{"_id":"@conterra/vuln-scan","_rev":"68-f5b76f4d0482d2bf2577d2b19a47456f","name":"@conterra/vuln-scan","dist-tags":{"latest":"1.2.1"},"versions":{"0.0.1":{"name":"@conterra/vuln-scan","version":"0.0.1","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.1","maintainers":[{"name":"a.frank","email":"a.frank@conterra.de"},{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js"},"dist":{"shasum":"6ede1847d0bb626bbaf5e344a1c71fc923b932be","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.1.tgz","fileCount":7,"integrity":"sha512-Dc4yroC4qHRQ+0r9So7XsBhQiQcjuJ0ytDGo+rpQjNwsf7rRDxokxLMH4LX4ZHaTvf955Kms1zx3z4c9KHjOGg==","signatures":[{"sig":"MEUCIQCCylrBpGnJ2JFCgyLIrqGDWSa72BaaZzmUfrXeFWW1OQIgYeqKPPmhKkEcAXoYgnYBYiedbgwo6EvundBvI0wrKX8=","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":85157},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"4e91b0fbc8007ed3b0f0a5d5caffa10e768c1790","scripts":{"lint":"eslint","prod":"node esbuild.config.mjs prod","build":"node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.18.0","dependencies":{"zx":"^8.1.9"},"_hasShrinkwrap":false,"devDependencies":{"chai":"^5.1.1","mocha":"^10.4.0","rimraf":"^6.0.1","esbuild":"^0.24.0","globals":"^15.11.0","copyfiles":"^2.4.1","tiny-glob":"^0.2.9","node-fetch":"^3.3.2","typescript":"^5.6.3","escape-html":"^1.0.3","typescript-eslint":"^8.11.0","@types/escape-html":"^1.0.4","node-sarif-builder":"^3.2.0","eslint-plugin-headers":"^1.2.0","json-schema-to-typescript":"^15.0.2"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.1_1729608170135_0.15648936653791323","host":"s3://npm-registry-packages"}},"0.0.2":{"name":"@conterra/vuln-scan","version":"0.0.2","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.2","maintainers":[{"name":"a.frank","email":"a.frank@conterra.de"},{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js"},"dist":{"shasum":"63aa274ae527c35338d2b8033b092054e54ba681","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.2.tgz","fileCount":7,"integrity":"sha512-5hlUnHXhZanyCCyRNuTtMlpGeLevMr1qiKGJihtxwzvcV9a5zITrhyNqY0DwIFKUewkm0NDsG2Vg52Ef/OjCAQ==","signatures":[{"sig":"MEUCIBFXYUx2PcDZ25ETyG8i448qf5CaCvgikclpSfIeDwSZAiEAh5rGp3jAWODsjxoNC/QxC0fEi0hDRCFAB5aLnOCkO3s=","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":97069},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"acfd2d1734c3636d9e950edd0f52346863be86cf","scripts":{"lint":"eslint","prod":"node esbuild.config.mjs prod","build":"node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.18.0","dependencies":{"zx":"^8.1.9"},"_hasShrinkwrap":false,"devDependencies":{"chai":"^5.1.1","mocha":"^10.4.0","rimraf":"^6.0.1","esbuild":"^0.24.0","globals":"^15.11.0","copyfiles":"^2.4.1","tiny-glob":"^0.2.9","typescript":"^5.6.3","escape-html":"^1.0.3","typescript-eslint":"^8.11.0","@types/escape-html":"^1.0.4","node-sarif-builder":"^3.2.0","eslint-plugin-headers":"^1.2.0","json-schema-to-typescript":"^15.0.2"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.2_1729704907028_0.7399110398510611","host":"s3://npm-registry-packages"}},"0.0.3":{"name":"@conterra/vuln-scan","version":"0.0.3","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.3","maintainers":[{"name":"a.frank","email":"a.frank@conterra.de"},{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js"},"dist":{"shasum":"4c5205928985c9fe20649193a49ad8d5b0400e96","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.3.tgz","fileCount":7,"integrity":"sha512-uZCgWZYGemBZp9IooMyLnq/YbTDap5OXJXTOrBL81DRgzFvbo4hOeYqJZuArPF6OW0NOLrUmj+piMmYToc1MKA==","signatures":[{"sig":"MEUCIQDo96cfWP2ktNtFniawAfBT+Es62gbzHDaU34qlGk1I8gIgPAMGBAcAit5wU/msVkX/W5CfdXKlNEGcXwndO4VyJAA=","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":97132},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"830cd120b6b821d1f39128d21b9a6b9977970645","scripts":{"lint":"eslint","prod":"node esbuild.config.mjs prod","build":"node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.18.0","dependencies":{"zx":"^8.1.9"},"_hasShrinkwrap":false,"devDependencies":{"chai":"^5.1.1","mocha":"^10.4.0","rimraf":"^6.0.1","esbuild":"^0.24.0","globals":"^15.11.0","copyfiles":"^2.4.1","tiny-glob":"^0.2.9","typescript":"^5.6.3","escape-html":"^1.0.3","typescript-eslint":"^8.11.0","@types/escape-html":"^1.0.4","node-sarif-builder":"^3.2.0","eslint-plugin-headers":"^1.2.0","json-schema-to-typescript":"^15.0.2"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.3_1729786138306_0.898925000769579","host":"s3://npm-registry-packages"}},"0.0.4":{"name":"@conterra/vuln-scan","version":"0.0.4","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.4","maintainers":[{"name":"a.frank","email":"a.frank@conterra.de"},{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js"},"dist":{"shasum":"441c6d795625f5102f099ca27a2edbddf832d1d1","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.4.tgz","fileCount":7,"integrity":"sha512-+eCjY7Cejqv41QCAPS63v/bG7XJPUavOATVyAC1wXntkGyk5RVpZK2fRrygny/FS7fqCaFOlHDmYpMqL6ODFgg==","signatures":[{"sig":"MEYCIQCPc2DnwEmREdRg2BAiz54SCWIsaDw0M4TcCTxSNhUowgIhANq4Fzkztb1eOPOHW1ZbH3TeQ/f5CQ5dOI6Si4TxwunQ","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":99470},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"e81331104ecf55268b67c20063daf3a771147d7d","scripts":{"lint":"eslint","prod":"npm run test && node esbuild.config.mjs prod","test":"vitest","build":"npm run test && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.18.0","dependencies":{"zx":"^8.1.9"},"_hasShrinkwrap":false,"devDependencies":{"rimraf":"^6.0.1","vitest":"^2.1.4","esbuild":"^0.24.0","globals":"^15.11.0","copyfiles":"^2.4.1","typescript":"^5.6.3","escape-html":"^1.0.3","typescript-eslint":"^8.11.0","@types/escape-html":"^1.0.4","node-sarif-builder":"^3.2.0","eslint-plugin-headers":"^1.2.0","json-schema-to-typescript":"^15.0.2"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.4_1731841098925_0.714737619428059","host":"s3://npm-registry-packages"}},"0.0.5":{"name":"@conterra/vuln-scan","version":"0.0.5","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.5","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js"},"dist":{"shasum":"f10be4b1ef10f2f7ce6d238539a0d1ef402507b2","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.5.tgz","fileCount":7,"integrity":"sha512-VdrqCG58VxBvx2R4TyiklGfjJq71vWto8lpIdS7LUoaOf0/exGPfUh7Fy49b11P9Sei0tK9hfxnaXvfYorabmA==","signatures":[{"sig":"MEYCIQDps/J3dRO22m1UOQ3VG9XHvUMsRdhDMVXfnleEpEoeEgIhAKM0s1wHehG2vFKx6kQorcOpfXIosjTa7sSlQSw29TZr","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":100249},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"4083091c4e0c64455347aee735bd35dd8aaa7e90","scripts":{"lint":"eslint","prod":"npm run test && node esbuild.config.mjs prod","test":"vitest","build":"npm run test && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.18.0","dependencies":{"zx":"^8.1.9"},"_hasShrinkwrap":false,"devDependencies":{"rimraf":"^6.0.1","vitest":"^2.1.4","esbuild":"^0.24.0","globals":"^15.11.0","copyfiles":"^2.4.1","typescript":"^5.6.3","escape-html":"^1.0.3","typescript-eslint":"^8.11.0","@types/escape-html":"^1.0.4","node-sarif-builder":"^3.2.0","eslint-plugin-headers":"^1.2.0","json-schema-to-typescript":"^15.0.2"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.5_1732558874700_0.2727070527575819","host":"s3://npm-registry-packages"}},"0.0.6":{"name":"@conterra/vuln-scan","version":"0.0.6","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.6","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js"},"dist":{"shasum":"f62c18e130f208e694b95493c9e7ca8e74d0fce6","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.6.tgz","fileCount":7,"integrity":"sha512-CyeOXQukDjIhjUsbG11ak0jru63mZRSZ/t45o0Nsnz/TNJN+YeOuwxTMo6QqSHM3Odkv3mRxyFkvImjPunvh8Q==","signatures":[{"sig":"MEYCIQCt2RslIHkojlX4E5PDyTNlKMi9wVR26Ck7EQaupmZiNwIhAIRE6k32p3zDAXW21fjR7IpDbhgkY7uscKZnBfmjSrjF","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":103989},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"88b2f19aefc214a647a076932c5a923e17977e4e","scripts":{"lint":"eslint","prod":"npm run test && node esbuild.config.mjs prod","test":"vitest","build":"npm run test && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.18.0","dependencies":{"zx":"^8.1.9"},"_hasShrinkwrap":false,"devDependencies":{"rimraf":"^6.0.1","vitest":"^2.1.4","esbuild":"^0.24.0","globals":"^15.11.0","copyfiles":"^2.4.1","typescript":"^5.6.3","escape-html":"^1.0.3","typescript-eslint":"^8.11.0","@types/escape-html":"^1.0.4","node-sarif-builder":"^3.2.0","eslint-plugin-headers":"^1.2.0","json-schema-to-typescript":"^15.0.2"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.6_1733936739352_0.01613531712990479","host":"s3://npm-registry-packages-npm-production"}},"0.0.7":{"name":"@conterra/vuln-scan","version":"0.0.7","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.7","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js"},"dist":{"shasum":"5c8a7b4f5fd14d2a5946719b0e7e44cae9520ddf","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.7.tgz","fileCount":7,"integrity":"sha512-d609mDL40GO0GqoyvkHr26pCrX81Y1s6V6V8chYkCrnDD2H/puDshLrxj35S6Tz6vipnQaRtqWWgrod8PbBrLw==","signatures":[{"sig":"MEQCIFPAF6tX/9ZomM/Z+07IzTQK4KcJi1Z/jABgozH+6RGEAiBhEA5zfArVXFATE+4J2oihOY40kBCkdgrjuh/Htc26OQ==","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":103988},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"5c50db108c32143d702390076142ee7ede854586","scripts":{"lint":"eslint","prod":"npm run test && node esbuild.config.mjs prod","test":"vitest","build":"npm run test && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.18.0","dependencies":{"zx":"^8.1.9"},"_hasShrinkwrap":false,"devDependencies":{"rimraf":"^6.0.1","vitest":"^2.1.4","esbuild":"^0.24.0","globals":"^15.11.0","copyfiles":"^2.4.1","typescript":"^5.6.3","escape-html":"^1.0.3","typescript-eslint":"^8.11.0","@types/escape-html":"^1.0.4","node-sarif-builder":"^3.2.0","eslint-plugin-headers":"^1.2.0","json-schema-to-typescript":"^15.0.2"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.7_1733938554036_0.22530884493330805","host":"s3://npm-registry-packages-npm-production"}},"0.0.8":{"name":"@conterra/vuln-scan","version":"0.0.8","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.8","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js"},"dist":{"shasum":"cf6213e78e69a78971a36a950fb6406061ff85ec","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.8.tgz","fileCount":7,"integrity":"sha512-M/UXScJUE20rak9lBkk0fsozFRmT3MPH1T/HgZ7/buJWrzCd2rFDIrvH0UDYjlE95dKeycHJ5ePPBI5+EeThIg==","signatures":[{"sig":"MEUCIHUk+jvWnl1B5dsJKODw/0yzI2uk+zfEAgDDKnx4QbuIAiEA9PJm6SzFX7vNj5cXheFcPl8UleuGJgqM1gQpyu16xWk=","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":103988},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"e3b26a7071925cdecb2806d9ffb9391106231072","scripts":{"lint":"eslint","prod":"npm run test && node esbuild.config.mjs prod","test":"vitest","build":"npm run test && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.18.0","dependencies":{"zx":"^8.1.9"},"_hasShrinkwrap":false,"devDependencies":{"rimraf":"^6.0.1","vitest":"^2.1.4","esbuild":"^0.24.0","globals":"^15.11.0","copyfiles":"^2.4.1","typescript":"^5.6.3","escape-html":"^1.0.3","typescript-eslint":"^8.11.0","@types/escape-html":"^1.0.4","node-sarif-builder":"^3.2.0","eslint-plugin-headers":"^1.2.0","json-schema-to-typescript":"^15.0.2"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.8_1734440521865_0.6452386963071908","host":"s3://npm-registry-packages-npm-production"}},"0.0.9":{"name":"@conterra/vuln-scan","version":"0.0.9","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.9","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js"},"dist":{"shasum":"79334578df99d5e252becf526d72d2c88b63ddf7","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.9.tgz","fileCount":7,"integrity":"sha512-pNNV9IJn8zZvFJs+kTancWMpNb97/NVbsa0pv9VKzqg9rKAHdHfORqYe4EeHPb/4iBEqgf+WMJkpdyEsPsJUww==","signatures":[{"sig":"MEQCIDR8Xotqln6+QFSOffvtSJAQeTXCor7hWgBOAMA9mHq9AiAXYSdtx+bMl2qHJkuke4x/qE1EezzOdZndbaIHLsUsVQ==","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":104365},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"bb37510ae76c4edbf5451bd08f4262699334270f","scripts":{"lint":"eslint","prod":"npm run test && node esbuild.config.mjs prod","test":"vitest","build":"npm run test && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.18.0","dependencies":{"zx":"^8.1.9"},"_hasShrinkwrap":false,"devDependencies":{"rimraf":"^6.0.1","vitest":"^2.1.4","esbuild":"^0.24.0","globals":"^15.11.0","copyfiles":"^2.4.1","typescript":"^5.6.3","escape-html":"^1.0.3","typescript-eslint":"^8.11.0","@types/escape-html":"^1.0.4","node-sarif-builder":"^3.2.0","eslint-plugin-headers":"^1.2.0","json-schema-to-typescript":"^15.0.2"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.9_1734441132821_0.708629079962102","host":"s3://npm-registry-packages-npm-production"}},"0.0.10":{"name":"@conterra/vuln-scan","version":"0.0.10","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.10","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-remove-project":"dist/remove-project.js"},"dist":{"shasum":"d373d338702353414e0a9add9a6516b6ee96df48","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.10.tgz","fileCount":9,"integrity":"sha512-DdAEEaRjw10FmUnimQLSfHv3S8cpN7Ooq17UCvbWtFlmL7RbddntVQUkgXHQp87vfoX+hlLDIgb9GRvU+IqW3Q==","signatures":[{"sig":"MEQCIDfmuDN3m8oi/DNJLCVMXG2OvJ/dnf+FMhnl9cj+MFhaAiBHyLhF3ulpHkJSoIJUDF+aZjlbRd8zwNaOMuq2O+/PgQ==","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":112341},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"25de60d829af65cc2619e8bf253b8f689b5d51d8","scripts":{"lint":"eslint","prod":"npm run test && node esbuild.config.mjs prod","test":"vitest","build":"npm run test && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.18.1","dependencies":{"zx":"^8.1.9"},"_hasShrinkwrap":false,"devDependencies":{"rimraf":"^6.0.1","vitest":"^2.1.4","esbuild":"^0.24.0","globals":"^15.11.0","copyfiles":"^2.4.1","typescript":"^5.6.3","escape-html":"^1.0.3","typescript-eslint":"^8.11.0","@types/escape-html":"^1.0.4","node-sarif-builder":"^3.2.0","eslint-plugin-headers":"^1.2.0","json-schema-to-typescript":"^15.0.2"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.10_1736773852997_0.09497979055852412","host":"s3://npm-registry-packages-npm-production"}},"0.0.11":{"name":"@conterra/vuln-scan","version":"0.0.11","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.11","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-remove-project":"dist/remove-project.js"},"dist":{"shasum":"b004ace2f2bc3821b8ff3d6e82a83b816d9ece9b","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.11.tgz","fileCount":9,"integrity":"sha512-WuKBVo9FLTYGuwHpZ/5F30PlWcI0ybc+sY/Dy2b4MN1XW6a6StSriZfXJVEVVuKfZabhWx4HkVlZMRiDwRwyuw==","signatures":[{"sig":"MEYCIQDi1uHn+TPEzmIUcJ5W0DNbpCVK7BP+hsV3szK/vEyAogIhAKgWY1B9sRgUP6894KmkUn9SNBI6CsrQQAuehDcyXehe","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":114273},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"04fe4a3ff9ec255794b681a70bfaae05136b3552","scripts":{"lint":"eslint","prod":"npm run test && node esbuild.config.mjs prod","test":"vitest","build":"npm run test && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.18.1","dependencies":{"zx":"^8.1.9"},"_hasShrinkwrap":false,"devDependencies":{"rimraf":"^6.0.1","vitest":"^2.1.4","esbuild":"^0.24.0","globals":"^15.11.0","copyfiles":"^2.4.1","typescript":"^5.6.3","escape-html":"^1.0.3","typescript-eslint":"^8.11.0","@types/escape-html":"^1.0.4","node-sarif-builder":"^3.2.0","eslint-plugin-headers":"^1.2.0","json-schema-to-typescript":"^15.0.2"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.11_1736782192058_0.2624543046250689","host":"s3://npm-registry-packages-npm-production"}},"0.0.12":{"name":"@conterra/vuln-scan","version":"0.0.12","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.12","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-remove-project":"dist/remove-project.js"},"dist":{"shasum":"33e09a63ee64fe7ee2bb42884ca2606a521e56fb","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.12.tgz","fileCount":9,"integrity":"sha512-St+bZR6N5Xlen/V56LAu4njfreEtMaIAot7hqevXwyctcsuD15LnbcNGDh8qESTGJCIXup+dWUblw+MhKmTkwQ==","signatures":[{"sig":"MEUCIDvTeU7RWoMu1CS/1Mgrl0T8uZWpAGsYjSDUaqBhzV5IAiEAnSTybwvmaBPoSLUvAv+hBwdtp+jEDtmiCR1X51EsRcg=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":65183},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"990283617874721834e109948cd4dc5f22dc943e","scripts":{"lint":"eslint","prod":"npm run test run && node esbuild.config.mjs prod","test":"vitest","build":"npm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.18.2","dependencies":{"zx":"^8.1.9"},"_hasShrinkwrap":false,"devDependencies":{"rimraf":"^6.0.1","vitest":"^3.0.5","esbuild":"^0.24.0","globals":"^15.11.0","copyfiles":"^2.4.1","typescript":"^5.6.3","escape-html":"^1.0.3","typescript-eslint":"^8.11.0","@types/escape-html":"^1.0.4","node-sarif-builder":"^3.2.0","eslint-plugin-headers":"^1.2.0","json-schema-to-typescript":"^15.0.2"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.12_1738921953353_0.9251243164264695","host":"s3://npm-registry-packages-npm-production"}},"0.0.13":{"name":"@conterra/vuln-scan","version":"0.0.13","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.13","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-remove-project":"dist/remove-project.js"},"dist":{"shasum":"492706c767b0a2983d79c502d9ed567d584ff1a3","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.13.tgz","fileCount":9,"integrity":"sha512-XdWGVplsjyO44ZN5DLv1EMpi6VN4m5b8yNESe1pqd62X8MjVnSFpbGOTF8PvbwNAkcQgNZk/scEOBipjyj7wBA==","signatures":[{"sig":"MEUCIA/l5bk780uiaeTuBRx4ahsJjLvbz0UWCb5RXw5kkuGqAiEArUeaFY27AsAAPKl5juy7UKJEB/1dcaYhPdxwt7Brevg=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":116105},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"0276ce08ac4d017ebaf3551f2b6577644e7c15cb","scripts":{"lint":"eslint","prod":"npm run test run && node esbuild.config.mjs prod","test":"vitest","build":"npm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.18.2","dependencies":{"zx":"^8.1.9"},"_hasShrinkwrap":false,"devDependencies":{"rimraf":"^6.0.1","vitest":"^3.0.5","esbuild":"^0.24.0","globals":"^15.11.0","copyfiles":"^2.4.1","typescript":"^5.6.3","escape-html":"^1.0.3","typescript-eslint":"^8.11.0","@types/escape-html":"^1.0.4","node-sarif-builder":"^3.2.0","eslint-plugin-headers":"^1.2.0","json-schema-to-typescript":"^15.0.2"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.13_1738958264867_0.27233505643239364","host":"s3://npm-registry-packages-npm-production"}},"0.0.14":{"name":"@conterra/vuln-scan","version":"0.0.14","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.14","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-remove-project":"dist/remove-project.js"},"dist":{"shasum":"3ab03d6c461a219de27cb80c354d31e07760917e","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.14.tgz","fileCount":9,"integrity":"sha512-ScUGM9ICU+1+BvlFG7MGr4bqVn4LIOZCdm+u3YkRCCI1bLIyJDqY17gbQ6j3y+t0dRsIFtcZJQfTYYAjfJBPEw==","signatures":[{"sig":"MEUCIQDtklwF4XZjlX6zLB7vuFt0tQHNRyTVseoWWvH7sbmudQIgVPBeVci1/xns8hQYj9RXYQ4cJdMBpfQly67pKm98dYo=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":117707},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"1dccce62398a60c9cf33e37e8630c81bc37f5d75","scripts":{"lint":"eslint","prod":"npm run test run && node esbuild.config.mjs prod","test":"vitest","build":"npm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.18.2","dependencies":{"zx":"^8.1.9"},"_hasShrinkwrap":false,"devDependencies":{"rimraf":"^6.0.1","vitest":"^3.0.5","esbuild":"^0.25.0","globals":"^15.11.0","copyfiles":"^2.4.1","typescript":"^5.6.3","escape-html":"^1.0.3","typescript-eslint":"^8.11.0","@types/escape-html":"^1.0.4","node-sarif-builder":"^3.2.0","eslint-plugin-headers":"^1.2.0","json-schema-to-typescript":"^15.0.2"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.14_1739376392765_0.38885283376202495","host":"s3://npm-registry-packages-npm-production"}},"0.0.15":{"name":"@conterra/vuln-scan","version":"0.0.15","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.15","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-remove-project":"dist/remove-project.js"},"dist":{"shasum":"2f50def70f9d6d5eba6d025906d31f5d288fc1cd","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.15.tgz","fileCount":9,"integrity":"sha512-uhQWMyFOEONUOfMaxO549sqjsP5XXL7cB+Q50icPSo5Mu9l+X2qd4OZNeyAkzE74CA4ID5B/+LkT8op2Z+sVKA==","signatures":[{"sig":"MEUCIQCSF7rwnxcj4ROHkp+sL5fWkOF8BTOFOHjOtWPKPejbYwIgQVU1Mnfvf0RXW1wAfARkD0j7VjJ3ufEu3CFO1aCq/4k=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":118648},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"c27a74f16d5c463010d9fd3e9b7f4750d2230a0e","scripts":{"lint":"eslint","prod":"npm run test run && node esbuild.config.mjs prod","test":"vitest","build":"npm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.18.2","dependencies":{"zx":"^8.1.9"},"_hasShrinkwrap":false,"devDependencies":{"rimraf":"^6.0.1","vitest":"^3.0.5","esbuild":"^0.25.0","globals":"^15.11.0","copyfiles":"^2.4.1","typescript":"^5.6.3","escape-html":"^1.0.3","typescript-eslint":"^8.11.0","@types/escape-html":"^1.0.4","node-sarif-builder":"^3.2.0","eslint-plugin-headers":"^1.2.0","json-schema-to-typescript":"^15.0.2"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.15_1739380826964_0.1157516430441301","host":"s3://npm-registry-packages-npm-production"}},"0.0.16":{"name":"@conterra/vuln-scan","version":"0.0.16","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.16","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-remove-project":"dist/remove-project.js"},"dist":{"shasum":"45c658a1485e855698a470e408f8852ce50de154","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.16.tgz","fileCount":9,"integrity":"sha512-HuMi7tO8KA2cIBvffYIerbsKJhBrNRVOa/41gKj7hMqb93W/EcL5eRh51AIwGLXR+3Bdatg2EmZm1VGXYJ2pZg==","signatures":[{"sig":"MEUCIBMtpEbBf3Y3KI7yuG7siGmlMmY0gaWIhqlqTS1KgSX8AiEAvtsqIe012zT/YKbk2z+umG+a2iOAcPTpogP3Or3KXUs=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":119531},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"411b859e92645875c0f34380cca25f79dbb649a7","scripts":{"lint":"eslint","prod":"npm run test run && node esbuild.config.mjs prod","test":"vitest","build":"npm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.18.2","dependencies":{"zx":"^8.1.9"},"_hasShrinkwrap":false,"devDependencies":{"rimraf":"^6.0.1","vitest":"^3.0.5","esbuild":"^0.25.0","globals":"^15.11.0","copyfiles":"^2.4.1","typescript":"^5.6.3","escape-html":"^1.0.3","typescript-eslint":"^8.11.0","@types/escape-html":"^1.0.4","node-sarif-builder":"^3.2.0","eslint-plugin-headers":"^1.2.0","json-schema-to-typescript":"^15.0.2"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.16_1739383214061_0.9307408900175598","host":"s3://npm-registry-packages-npm-production"}},"0.0.17":{"name":"@conterra/vuln-scan","version":"0.0.17","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.17","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-remove-project":"dist/remove-project.js"},"dist":{"shasum":"97659a443786d754325ac0e54dbc02049b9047be","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.17.tgz","fileCount":9,"integrity":"sha512-GkT6eO4rbqwbU3RRHRQ3YDZ+tNc/S/m4YfD8+zOpCtctSvY6HFTT8x9yWPH1nBKJVT3aCGFMmu9Voxbep4MGbw==","signatures":[{"sig":"MEUCIQCP1aacToMqXag/0si/UCBVDexKVl9lETSbGc+f/DGrJgIgF7dBp2cysFUI6M2lwS4Rude5IQ7ueneh2he4wU4NhmM=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":121049},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"81630b2dabd40a2e06f689426fa7ba93440d49d9","scripts":{"lint":"eslint","prod":"npm run test run && node esbuild.config.mjs prod","test":"vitest","build":"npm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.18.2","dependencies":{"zx":"^8.1.9"},"_hasShrinkwrap":false,"devDependencies":{"rimraf":"^6.0.1","vitest":"^3.0.5","esbuild":"^0.25.0","globals":"^15.11.0","copyfiles":"^2.4.1","typescript":"^5.6.3","escape-html":"^1.0.3","typescript-eslint":"^8.11.0","@types/escape-html":"^1.0.4","node-sarif-builder":"^3.2.0","eslint-plugin-headers":"^1.2.0","json-schema-to-typescript":"^15.0.2"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.17_1739446461203_0.7512543036097945","host":"s3://npm-registry-packages-npm-production"}},"0.0.18":{"name":"@conterra/vuln-scan","version":"0.0.18","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.18","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-remove-project":"dist/remove-project.js"},"dist":{"shasum":"6e09a7101867bad568194212fa1aabf553ab6e6f","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.18.tgz","fileCount":9,"integrity":"sha512-W1ZXvwCCcyYYI9gChC6ks2jSyqbbKcrFEiuB/5iQ2iLCwvrZGrrRSvholF8Lw6pPM8pFYI1R93GVhh2xaXAToQ==","signatures":[{"sig":"MEQCIDHZIdohYXeVBPmXfD43ufp5eIPq8OS/UMYwIyYUm/p7AiACdI9Byk7CY9VOqFI+BHNUwb4tzTCcV6gZhecMv2DSag==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1935799},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"9da7882935fdd4f668ba4d6418a1a6dea68b2749","scripts":{"lint":"eslint","prod":"npm run test run && node esbuild.config.mjs prod","test":"vitest","build":"npm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.18.2","dependencies":{"zx":"^8.1.9"},"_hasShrinkwrap":false,"devDependencies":{"dotenv":"^16.4.7","rimraf":"^6.0.1","vitest":"^3.0.5","esbuild":"^0.25.0","globals":"^15.11.0","copyfiles":"^2.4.1","typescript":"^5.6.3","escape-html":"^1.0.3","@inquirer/prompts":"^7.3.1","typescript-eslint":"^8.11.0","@types/escape-html":"^1.0.4","node-sarif-builder":"^3.2.0","eslint-plugin-headers":"^1.2.0","json-schema-to-typescript":"^15.0.2"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.18_1739557808895_0.4207439726701001","host":"s3://npm-registry-packages-npm-production"}},"0.0.19":{"name":"@conterra/vuln-scan","version":"0.0.19","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.19","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-remove-project":"dist/remove-project.js"},"dist":{"shasum":"8836d7d903ea02b7cf17dc7015a919963430b590","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.19.tgz","fileCount":9,"integrity":"sha512-JEdYo35SJkSDytuTRm7qngz9VM4AazJtpomN/qt1wppXJT7b/nONsI4yz60JT7JQK8dJDW/fniKeZ+xnzC8tuA==","signatures":[{"sig":"MEUCIC53xztvwa/EEOIeRbV0P+31xbaws7v1VLRELJWX0iZGAiEAob60URbPyX0Y7UgKHnxM8hpdL3tNoYT3iXosyvfPu9Q=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1937239},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"53141849796b263b6b55f00114e1cae16cb7a277","scripts":{"lint":"eslint","prod":"npm run test run && node esbuild.config.mjs prod","test":"vitest","build":"npm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.18.2","dependencies":{"zx":"^8.1.9"},"_hasShrinkwrap":false,"devDependencies":{"dotenv":"^16.4.7","rimraf":"^6.0.1","vitest":"^3.0.5","esbuild":"^0.25.0","globals":"^15.11.0","copyfiles":"^2.4.1","typescript":"^5.6.3","escape-html":"^1.0.3","@inquirer/prompts":"^7.3.1","typescript-eslint":"^8.11.0","@types/escape-html":"^1.0.4","node-sarif-builder":"^3.2.0","eslint-plugin-headers":"^1.2.0","json-schema-to-typescript":"^15.0.2"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.19_1740595080250_0.39049517446801185","host":"s3://npm-registry-packages-npm-production"}},"0.0.20":{"name":"@conterra/vuln-scan","version":"0.0.20","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.20","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-remove-project":"dist/remove-project.js"},"dist":{"shasum":"4f87b3ebb783c5b406995bebfed504bdd0cf3c6e","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.20.tgz","fileCount":9,"integrity":"sha512-QrWoIUiBvRiR1Z/y014fYMzjnT34mSAbIeG2+fpDwPQ3yaVCNz4ioPlwMjh6o3uWcfbq+uwxRdt0bHEeI+EFrw==","signatures":[{"sig":"MEYCIQDwnKWw4Pl2VYUHQMzGTJWMjCWkLLHZcEMc9bn/iNR6CAIhAKR5wWir0OJL4OmoY+jtRfkxC79rldtb0v2FhwRinIMX","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1937282},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"f7d5c3295390d7d5b51fb95278b0fa54345d0944","scripts":{"lint":"eslint","prod":"npm run test run && node esbuild.config.mjs prod","test":"vitest","build":"npm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.19.1","dependencies":{"zx":"^8.1.9"},"_hasShrinkwrap":false,"devDependencies":{"dotenv":"^16.4.7","rimraf":"^6.0.1","vitest":"^3.0.5","esbuild":"^0.25.0","globals":"^15.11.0","copyfiles":"^2.4.1","typescript":"^5.6.3","escape-html":"^1.0.3","@inquirer/prompts":"^7.3.1","typescript-eslint":"^8.11.0","@types/escape-html":"^1.0.4","node-sarif-builder":"^3.2.0","eslint-plugin-headers":"^1.2.0","json-schema-to-typescript":"^15.0.2"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.20_1747390788816_0.8960639213975796","host":"s3://npm-registry-packages-npm-production"}},"0.0.21":{"name":"@conterra/vuln-scan","version":"0.0.21","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.21","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-remove-project":"dist/remove-project.js"},"dist":{"shasum":"71960e18a5c522c0de13516834e3d601dbc95594","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.21.tgz","fileCount":9,"integrity":"sha512-oY54r0tLm4sCTUFZTB/SU0vmLjDOTWMnm6QPzmhbjX7alKdf1zstD+AMfYBJuvPiDYtmfq1lJbrTS3BqBPif3g==","signatures":[{"sig":"MEQCIGaEM/KGJrC78tta0oTze4lIrgTIVd3GMb+LsM0+UBaUAiBp9k4FmCWt0BTLD2eJlnDECDpgdvzidMArukiFKhQFKA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1934183},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"1698bdb7f158bf3252992faf84f6aa982835aa08","scripts":{"lint":"eslint","prod":"npm run test run && node esbuild.config.mjs prod","test":"vitest","build":"npm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.19.2","dependencies":{"zx":"^8.1.9"},"_hasShrinkwrap":false,"devDependencies":{"rimraf":"^6.0.1","vitest":"^3.0.5","esbuild":"^0.25.0","globals":"^16.0.0","copyfiles":"^2.4.1","typescript":"^5.6.3","escape-html":"^1.0.3","@inquirer/prompts":"^7.3.1","typescript-eslint":"^8.11.0","@types/escape-html":"^1.0.4","node-sarif-builder":"^3.2.0","eslint-plugin-headers":"^1.2.0","json-schema-to-typescript":"^15.0.2"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.21_1748962901691_0.7910646009717033","host":"s3://npm-registry-packages-npm-production"}},"0.0.22":{"name":"@conterra/vuln-scan","version":"0.0.22","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.22","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-remove-project":"dist/remove-project.js"},"dist":{"shasum":"c9188107c41ef213036e81346ea57a791171c40e","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.22.tgz","fileCount":9,"integrity":"sha512-E4YcXdbC7V6MnlxYWdQgIYWHtoB4f6woLsTw82HXx2rCxbMEaD7LX9TfdjoklGyL+DuiX2jcXqLS2e281Yr3nQ==","signatures":[{"sig":"MEUCIQDo0fTeHEi7yydQA2jvlA8bwW/9fFdWx1+qdLP9sP8J2gIgMmUkX8Kv/aPxiaYt2SftuT7RCIIe2pCjSvX0E4daCqc=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1934169},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"1ea6234e2eebe1d2fb582a5c419e5187188e2ff7","scripts":{"lint":"eslint","prod":"npm run test run && node esbuild.config.mjs prod","test":"vitest","build":"npm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.19.2","dependencies":{"zx":"8.5.4"},"_hasShrinkwrap":false,"devDependencies":{"rimraf":"6.0.1","vitest":"3.2.0","esbuild":"0.25.5","globals":"16.2.0","copyfiles":"2.4.1","typescript":"5.8.3","escape-html":"1.0.3","@inquirer/prompts":"7.5.3","typescript-eslint":"8.33.1","@types/escape-html":"1.0.4","node-sarif-builder":"3.2.0","eslint-plugin-headers":"1.3.3","json-schema-to-typescript":"15.0.4"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.22_1748964344366_0.07372482883599374","host":"s3://npm-registry-packages-npm-production"}},"0.0.23":{"name":"@conterra/vuln-scan","version":"0.0.23","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.23","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-remove-project":"dist/remove-project.js"},"dist":{"shasum":"2f8f9bec64f38c678a7d4f703bd4b26694cd126e","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.23.tgz","fileCount":9,"integrity":"sha512-Wy3bJs86CF2cJ6JFNW6x/Jf19a+Ly6QcWWK9/k5wXFTVFDQlKOkgqSb7/olYPNlHVCsV6gsVUFS0IJuQm5Tu6w==","signatures":[{"sig":"MEYCIQC036xGTIVWmlgaS/dr9FLjtR4+W/5g/53GYy/hSQTueAIhALvSQFU243AERqeFuafQop94xyoRt6J9/qEVC/EnS3+M","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1934840},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"1f3703bca5e8f70e50bae5137152ce747f0123bf","scripts":{"lint":"eslint","prod":"npm run test run && node esbuild.config.mjs prod","test":"vitest","build":"npm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.19.2","dependencies":{"zx":"8.5.5"},"_hasShrinkwrap":false,"devDependencies":{"rimraf":"6.0.1","vitest":"3.2.3","esbuild":"0.25.5","globals":"16.2.0","copyfiles":"2.4.1","typescript":"5.8.3","escape-html":"1.0.3","@inquirer/prompts":"7.5.3","typescript-eslint":"8.34.0","@types/escape-html":"1.0.4","node-sarif-builder":"3.2.0","eslint-plugin-headers":"1.3.3","json-schema-to-typescript":"15.0.4"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.23_1749640022861_0.982325721657267","host":"s3://npm-registry-packages-npm-production"}},"0.0.24":{"name":"@conterra/vuln-scan","version":"0.0.24","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.24","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-remove-project":"dist/remove-project.js"},"dist":{"shasum":"a17466217914a7513531d358a4bd70bc383643cb","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.24.tgz","fileCount":9,"integrity":"sha512-Z24uZyNPveZ5IdhXZ3fz4HNX5YDd01XoB1/EXg7SA/FAXDD0v5XJ58jb+dUkfIeqBj4fUiQL2GcHmpD6bMY2CQ==","signatures":[{"sig":"MEQCIGSv532UtEwGTNf5x+q2VJirsdZAA2T2ALxQw5UKBmYIAiAOtDTFf8JtazPg9iLCYYNiJ7yYvnKD9u18IsUK+gPpGw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1935025},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"38ae89afe31ef96bdc8692e9fb051f56d5ec764d","scripts":{"lint":"eslint","prod":"npm run test run && node esbuild.config.mjs prod","test":"vitest","build":"npm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.19.2","dependencies":{"zx":"8.5.5"},"_hasShrinkwrap":false,"devDependencies":{"rimraf":"6.0.1","vitest":"3.2.3","esbuild":"0.25.5","globals":"16.2.0","copyfiles":"2.4.1","typescript":"5.8.3","escape-html":"1.0.3","@inquirer/prompts":"7.5.3","typescript-eslint":"8.34.0","@types/escape-html":"1.0.4","node-sarif-builder":"3.2.0","eslint-plugin-headers":"1.3.3","json-schema-to-typescript":"15.0.4"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.24_1749651718147_0.45878807848873815","host":"s3://npm-registry-packages-npm-production"}},"0.0.25":{"name":"@conterra/vuln-scan","version":"0.0.25","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.25","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-remove-project":"dist/remove-project.js"},"dist":{"shasum":"4a18c2eb9feb2b668fc684ab1428dca8d6de9104","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.25.tgz","fileCount":9,"integrity":"sha512-NUrhZpQbgSavTqvVx9uqPjG2/VrrfXNOkV+dtu8oxN9SsEEWuseNaT4i0powV5xOlPvCm121XKHq/54dsnAmDQ==","signatures":[{"sig":"MEQCIFMbgi/Zz1a55S3cPRVxw8BXhBnrtOpczlfKzvj1SRv3AiB8O+l2HoCuDZnWCj7GVJFzX++vGuOuOx+YmuptIBXlwg==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1935029},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"0b968cae57ebfb97fd21045c9f8661e664eb1d39","scripts":{"lint":"eslint","prod":"npm run test run && node esbuild.config.mjs prod","test":"vitest","build":"npm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.19.2","dependencies":{"zx":"8.5.5"},"_hasShrinkwrap":false,"devDependencies":{"rimraf":"6.0.1","vitest":"3.2.3","esbuild":"0.25.5","globals":"16.2.0","copyfiles":"2.4.1","typescript":"5.8.3","escape-html":"1.0.3","@inquirer/prompts":"7.5.3","typescript-eslint":"8.34.0","@types/escape-html":"1.0.4","node-sarif-builder":"3.2.0","eslint-plugin-headers":"1.3.3","json-schema-to-typescript":"15.0.4"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.25_1749741350898_0.7581374318706029","host":"s3://npm-registry-packages-npm-production"}},"0.0.26":{"name":"@conterra/vuln-scan","version":"0.0.26","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.26","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-remove-project":"dist/remove-project.js"},"dist":{"shasum":"9199ebfc0301d27c39b27c21284faa9ff815a8c7","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.26.tgz","fileCount":9,"integrity":"sha512-3k8fw1pUIu4ezAomlPzvcxWMHCsXr1DRQrGAmUOKAHN6WuSLZfwzyfBI4HLv/Xr4Lrj/YeKJTZyANXtbPXvpjg==","signatures":[{"sig":"MEYCIQCNAJNzu04UWqubJVL5bIwOZcCH6A7mij8K9bwzUULnIQIhALXLgpCtmWPnFzN1+l7JzocUeUiEAckKV/Zef4N9XadF","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1937172},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"cbcc882d1c998fff2b686fc778eb07bd681bd009","scripts":{"lint":"eslint","prod":"npm run test run && node esbuild.config.mjs prod","test":"vitest","build":"npm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.19.2","dependencies":{"zx":"8.5.5"},"_hasShrinkwrap":false,"devDependencies":{"rimraf":"6.0.1","vitest":"3.2.3","esbuild":"0.25.5","globals":"16.2.0","copyfiles":"2.4.1","typescript":"5.8.3","escape-html":"1.0.3","@inquirer/prompts":"7.5.3","typescript-eslint":"8.34.0","@types/escape-html":"1.0.4","node-sarif-builder":"3.2.0","eslint-plugin-headers":"1.3.3","json-schema-to-typescript":"15.0.4"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.26_1749747474506_0.1660172939645259","host":"s3://npm-registry-packages-npm-production"}},"0.0.27":{"name":"@conterra/vuln-scan","version":"0.0.27","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.27","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-remove-project":"dist/remove-project.js"},"dist":{"shasum":"4abd9e3ad22711d96d86e0921f1dc1486e3c01e7","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.27.tgz","fileCount":9,"integrity":"sha512-249mbTG1Hv1B3S0PhDLrtux+BczeiFYJHkMFexBNyGTUrcHvCoefVmh1rT6N/IxdiPZpG2J4ma4TaxRHV1dINA==","signatures":[{"sig":"MEUCIA9r53dEibJfzznOnGkK5FlSXDkpVjxZoR9Z3QyTyGc7AiEAno0soabDzlmeukjriNYKBf0KRZ3aZpnrozJC2tyB8wE=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1943545},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"1c911e043ebc3d8d82f56dc756b17c5d6566d02b","scripts":{"lint":"eslint","prod":"npm run test run && node esbuild.config.mjs prod","test":"vitest","build":"npm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","actor":{"name":"jessebluemr","type":"user","email":"m.reiprecht@conterra.de"},"email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.19.2","dependencies":{"zx":"8.5.5"},"_hasShrinkwrap":false,"devDependencies":{"rimraf":"6.0.1","vitest":"3.2.4","esbuild":"0.25.5","globals":"16.2.0","copyfiles":"2.4.1","typescript":"5.8.3","escape-html":"1.0.3","@inquirer/prompts":"7.5.3","typescript-eslint":"8.34.1","@types/escape-html":"1.0.4","node-sarif-builder":"3.2.0","eslint-plugin-headers":"1.3.3","json-schema-to-typescript":"15.0.4"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.27_1750342655011_0.6822623990897256","host":"s3://npm-registry-packages-npm-production"}},"0.0.28":{"name":"@conterra/vuln-scan","version":"0.0.28","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.28","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-remove-project":"dist/remove-project.js"},"dist":{"shasum":"eb2798609838edc8420875fab5c2130ade6fd05f","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.28.tgz","fileCount":9,"integrity":"sha512-HwqpUnHNfKSnzBuu4aYQ874vC7hzeHwLRlKx9HoZM+0qa7kVUzSFwwdYP/ZKLEhhKYx6pTZzWaZjCwfiWzdGBQ==","signatures":[{"sig":"MEYCIQC1YxdEfl9uU+Q265Gq+Bj1dqwCcrX3CGVhryc81ji3xgIhAOCXtLOS8OY9tbXg1S2j2oV64+cIMKwu6o/UY7ZyVqpQ","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1943655},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"7b65316678aa1763e816796c692266326d43c28e","scripts":{"lint":"eslint","prod":"npm run test run && node esbuild.config.mjs prod","test":"vitest","build":"npm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","actor":{"name":"jessebluemr","type":"user","email":"m.reiprecht@conterra.de"},"email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.19.3","dependencies":{"zx":"8.6.0"},"_hasShrinkwrap":false,"devDependencies":{"rimraf":"6.0.1","vitest":"3.2.4","esbuild":"0.25.5","globals":"16.2.0","copyfiles":"2.4.1","typescript":"5.8.3","escape-html":"1.0.3","@inquirer/prompts":"7.5.3","typescript-eslint":"8.35.1","@types/escape-html":"1.0.4","node-sarif-builder":"3.2.0","eslint-plugin-headers":"1.3.3","json-schema-to-typescript":"15.0.4"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.28_1751397642745_0.21983142391910926","host":"s3://npm-registry-packages-npm-production"}},"0.0.29":{"name":"@conterra/vuln-scan","version":"0.0.29","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.29","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-remove-project":"dist/remove-project.js"},"dist":{"shasum":"6c679040ef791574e5197381e478d2299f3083e1","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.29.tgz","fileCount":9,"integrity":"sha512-Zkpx5aV15YbJ09fcjRONQUOnEWq3zyOAr1JGr4+oOttCzR5Vn9RvRj7A0bOs71JNgmpLBVWYR31RAdhU94sNxA==","signatures":[{"sig":"MEUCIQDWIYYW46jOkyPn4s0tl8upR48DoeeK4wEjLILuh5MKewIge48Pj3Sv5PVodhTKZIZ9UBl3fpiXGkklzx4WOvqk0SE=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1932181},"type":"commonjs","engines":{"node":">= 20"},"gitHead":"871d77f69f8629f3d8287a972cc36b8de6117a85","scripts":{"lint":"eslint","prod":"npm run test run && node esbuild.config.mjs prod","test":"vitest","build":"npm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"npm run clean && npm run type-check && npm run lint && npm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_npmVersion":"10.8.2","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"20.19.5","dependencies":{"zx":"8.8.4"},"_hasShrinkwrap":false,"devDependencies":{"rimraf":"6.0.1","vitest":"3.2.4","esbuild":"0.25.10","globals":"16.4.0","copyfiles":"2.4.1","typescript":"5.9.3","escape-html":"1.0.3","@inquirer/prompts":"7.9.0","typescript-eslint":"8.46.1","@types/escape-html":"1.0.4","node-sarif-builder":"3.2.0","eslint-plugin-headers":"1.3.3","json-schema-to-typescript":"15.0.4"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.29_1760426994554_0.701075607301664","host":"s3://npm-registry-packages-npm-production"}},"0.0.30":{"name":"@conterra/vuln-scan","version":"0.0.30","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.30","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-remove-project":"dist/remove-project.js"},"dist":{"shasum":"9a7211b21c974552843a2729385a7f39a6d24067","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.30.tgz","fileCount":9,"integrity":"sha512-2jQDIOOix4+G6t521doD62WHEyf734wjeWlBcIrGg2OC40C/lUEWT0Dp+pYPOLddADa1xbCoBktWVzi6Goefgg==","signatures":[{"sig":"MEQCIFqU2x1xUjXvtLke/1yF+26J2zyKDT+dauyq4B/RBbCOAiB6TsHUI/deYWGXrdHkEsAZ/AtclM5G/8tTpkiwOnc/Sw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1934548},"type":"commonjs","_from":"file:conterra-vuln-scan-0.0.30.tgz","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_resolved":"/tmp/be83a39b74305ce8ae833ded6d22c5f8/conterra-vuln-scan-0.0.30.tgz","_integrity":"sha512-2jQDIOOix4+G6t521doD62WHEyf734wjeWlBcIrGg2OC40C/lUEWT0Dp+pYPOLddADa1xbCoBktWVzi6Goefgg==","_npmVersion":"10.9.4","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.21.1","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.0","vitest":"3.2.4","esbuild":"0.27.0","globals":"16.5.0","copyfiles":"2.4.1","typescript":"5.9.3","@types/node":"^22","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"7.10.1","typescript-eslint":"8.46.4","@types/escape-html":"1.0.4","node-sarif-builder":"3.2.0","eslint-plugin-headers":"1.3.3","json-schema-to-typescript":"15.0.4"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.30_1763054240899_0.12861148094843045","host":"s3://npm-registry-packages-npm-production"}},"0.0.31":{"name":"@conterra/vuln-scan","version":"0.0.31","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.31","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-remove-project":"dist/remove-project.js"},"dist":{"shasum":"65ab85604676bee83b1ab86e0193de16bf60369e","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.31.tgz","fileCount":9,"integrity":"sha512-eGL3XdGwyZ7Jc9/cj7AOgdPyQPSEQT5fRLmWqIT8VHZtKaOjc9MhXovyksmOjZo24E5wy7Ik6UHpp6k217F48w==","signatures":[{"sig":"MEUCIQD0pjCcavJ46vyBwAGnB9LEVD+7n8EpONslqpg+Il3snAIgG+uop+04qkVUwvEHxdMAHq1R3M94lCvdQMa/YoBrzoY=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1934619},"type":"commonjs","_from":"file:conterra-vuln-scan-0.0.31.tgz","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_resolved":"/tmp/7396ba67e8ae439e2f8d222d4d86c091/conterra-vuln-scan-0.0.31.tgz","_integrity":"sha512-eGL3XdGwyZ7Jc9/cj7AOgdPyQPSEQT5fRLmWqIT8VHZtKaOjc9MhXovyksmOjZo24E5wy7Ik6UHpp6k217F48w==","_npmVersion":"10.9.4","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.21.1","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.0","vitest":"3.2.4","esbuild":"0.27.0","globals":"16.5.0","copyfiles":"2.4.1","typescript":"5.9.3","@types/node":"^22","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"7.10.1","typescript-eslint":"8.46.4","@types/escape-html":"1.0.4","node-sarif-builder":"3.2.0","eslint-plugin-headers":"1.3.3","json-schema-to-typescript":"15.0.4"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.31_1763127682967_0.6986629083075793","host":"s3://npm-registry-packages-npm-production"}},"0.0.32":{"name":"@conterra/vuln-scan","version":"0.0.32","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.32","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-remove-project":"dist/remove-project.js"},"dist":{"shasum":"9ae7eb536990f089d7ccb31714f44aeb703c6687","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.32.tgz","fileCount":9,"integrity":"sha512-WuBRw1x51ft4E6lxlzbpfpKy/x+eTHG3XkBc5XWK8vYR8R26k3NbiJOVQhMmtLGZySfBBfeoMP9qG0QIaUKVvg==","signatures":[{"sig":"MEUCIQCIgxaQUJ4JvbdvrVPb1mpmeLjrtCql8ALrUDaDii0yHgIgdA1TGyYKNvG23FNi0BhxsvcIvtj4ZPMK/+/YMvNr9WM=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1934579},"type":"commonjs","_from":"file:conterra-vuln-scan-0.0.32.tgz","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_resolved":"/tmp/6737c34db4a8af106e1f14813de13590/conterra-vuln-scan-0.0.32.tgz","_integrity":"sha512-WuBRw1x51ft4E6lxlzbpfpKy/x+eTHG3XkBc5XWK8vYR8R26k3NbiJOVQhMmtLGZySfBBfeoMP9qG0QIaUKVvg==","_npmVersion":"10.9.4","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.21.1","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.0","vitest":"3.2.4","esbuild":"0.27.0","globals":"16.5.0","copyfiles":"2.4.1","typescript":"5.9.3","@types/node":"^22","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"7.10.1","typescript-eslint":"8.46.4","@types/escape-html":"1.0.4","node-sarif-builder":"3.2.0","eslint-plugin-headers":"1.3.3","json-schema-to-typescript":"15.0.4"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.32_1763130913612_0.1519436276941235","host":"s3://npm-registry-packages-npm-production"}},"0.0.33":{"name":"@conterra/vuln-scan","version":"0.0.33","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.33","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-remove-project":"dist/remove-project.js"},"dist":{"shasum":"be3883a7a5d07a512dc504bdb4666391ad712017","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.33.tgz","fileCount":9,"integrity":"sha512-08Crg+tFlg9RIk1J561kAP957RSNfwgxk0sbvnw7QGz3FItcliFsqc6blVYPrGsjSJmboWBVHkz7LyznApSL/Q==","signatures":[{"sig":"MEUCIGlm8XfyBN/E8YLEOJhc3pvITiD0INiXIYNfs8rzc1A6AiEA++GjDgwJCxFpBc1twbfrKoZN2GHXJCZXwLuXvrrPxJY=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1934853},"type":"commonjs","_from":"file:conterra-vuln-scan-0.0.33.tgz","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_resolved":"/tmp/3c459d8306817366c782cf2353a6d9d5/conterra-vuln-scan-0.0.33.tgz","_integrity":"sha512-08Crg+tFlg9RIk1J561kAP957RSNfwgxk0sbvnw7QGz3FItcliFsqc6blVYPrGsjSJmboWBVHkz7LyznApSL/Q==","_npmVersion":"10.9.4","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.21.1","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.2","vitest":"3.2.4","esbuild":"0.27.0","globals":"16.5.0","copyfiles":"2.4.1","typescript":"5.9.3","@types/node":"^22","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"7.10.1","typescript-eslint":"8.47.0","@types/escape-html":"1.0.4","node-sarif-builder":"3.3.1","eslint-plugin-headers":"1.3.3","json-schema-to-typescript":"15.0.4"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.33_1764059077325_0.9313244904994782","host":"s3://npm-registry-packages-npm-production"}},"0.0.34":{"name":"@conterra/vuln-scan","version":"0.0.34","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.34","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-remove-project":"dist/remove-project.js"},"dist":{"shasum":"30b4478262ce00c58036679df14f2c53833609b0","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.34.tgz","fileCount":9,"integrity":"sha512-AM2aUf2HDOZGAK1SobuH7IaCU+F/JOx9cAqWBx74ZZEDMuPglHFdd9RveSLpen6+M9hfXlbDAmVkprgJXkj/0Q==","signatures":[{"sig":"MEYCIQDJx8hUTpatO/sVT74XDo8RRzRF4Lund7xN16tiKne+dgIhAIxFlPgXm+uQD8x1tPmkUCS3mwlKT+lXFbnEnWNhY7yt","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":1935410},"type":"commonjs","_from":"file:conterra-vuln-scan-0.0.34.tgz","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_resolved":"/tmp/2bfdf5846ad65968a171f69929abd6eb/conterra-vuln-scan-0.0.34.tgz","_integrity":"sha512-AM2aUf2HDOZGAK1SobuH7IaCU+F/JOx9cAqWBx74ZZEDMuPglHFdd9RveSLpen6+M9hfXlbDAmVkprgJXkj/0Q==","_npmVersion":"10.9.4","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.21.1","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.2","vitest":"3.2.4","esbuild":"0.27.0","globals":"16.5.0","copyfiles":"2.4.1","typescript":"5.9.3","@types/node":"^22","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"7.10.1","typescript-eslint":"8.48.0","@types/escape-html":"1.0.4","node-sarif-builder":"3.3.1","eslint-plugin-headers":"1.3.3","json-schema-to-typescript":"15.0.4"},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.34_1764764484801_0.41558376783838535","host":"s3://npm-registry-packages-npm-production"}},"0.0.35":{"name":"@conterra/vuln-scan","version":"0.0.35","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.35","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"0687b8b2e8ca10ebb89c6a91d71bd747f7c7e777","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.35.tgz","fileCount":10,"integrity":"sha512-g27GeJ8I/X9fGegSW3mvCYdf7MDm600/2hXwEr1wZrNuk6csmOj0TqCWa8n4OqvizrsX/Q5HHzw2m+w3jbGdpQ==","signatures":[{"sig":"MEQCIHsBe6Oqp9mSAdNOOburalN12zDdfDIVD7Dogu3vMFLHAiAW6zlLanKNF1uOo27MjMDVpMjNa3nl4TnZ1yfefvmGpQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":18518760},"type":"commonjs","_from":"file:conterra-vuln-scan-0.0.35.tgz","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_resolved":"/tmp/2d1a6fb8d1b87181fe47c9aeb8956df1/conterra-vuln-scan-0.0.35.tgz","_integrity":"sha512-g27GeJ8I/X9fGegSW3mvCYdf7MDm600/2hXwEr1wZrNuk6csmOj0TqCWa8n4OqvizrsX/Q5HHzw2m+w3jbGdpQ==","_npmVersion":"10.9.4","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.22.0","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.2","vitest":"4.0.18","esbuild":"0.27.2","globals":"17.3.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"5.9.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.2.0","typescript-eslint":"8.54.0","@types/escape-html":"1.0.4","node-sarif-builder":"3.4.0","eslint-plugin-headers":"1.3.3","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.35_1770486002409_0.11004053287135718","host":"s3://npm-registry-packages-npm-production"}},"0.0.36":{"name":"@conterra/vuln-scan","version":"0.0.36","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.0.36","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"3d3d4e154c3abe37618bb954d2158d1335413e6b","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.0.36.tgz","fileCount":13,"integrity":"sha512-BexEWm+jUhhp/DsiGDTDhj/ptFyGZW9ZA1KnOBXkt+XlReyLF5yaZIKTpXmmgKov9J7w0Q8ukwnAGYIsLvCfPw==","signatures":[{"sig":"MEYCIQCnbaUz3uu7fF0vI+lIdaMdP3cGmwdM+EdFd6p2oAT/mAIhANaoKdCnU4IeIxDvdAA5cGLN1rxLmCZfHIv1FyKX4t0F","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":18483083},"type":"commonjs","_from":"file:conterra-vuln-scan-0.0.36.tgz","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_resolved":"/tmp/285a0357a98cf4ac14ee57e7a021cdc2/conterra-vuln-scan-0.0.36.tgz","_integrity":"sha512-BexEWm+jUhhp/DsiGDTDhj/ptFyGZW9ZA1KnOBXkt+XlReyLF5yaZIKTpXmmgKov9J7w0Q8ukwnAGYIsLvCfPw==","_npmVersion":"10.9.4","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.22.0","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.0.18","esbuild":"0.27.3","globals":"17.3.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"5.9.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.3.0","typescript-eslint":"8.56.1","@types/escape-html":"1.0.4","node-sarif-builder":"3.4.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.0.36_1772487484189_0.6507518016248701","host":"s3://npm-registry-packages-npm-production"}},"0.1.0":{"name":"@conterra/vuln-scan","version":"0.1.0","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.1.0","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"529179787b8bceb069906411130523ad8ea43314","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.1.0.tgz","fileCount":13,"integrity":"sha512-IoMLELJUfz0cDI0sHc6OrAaceMZDjWYh465Vbg/TLyA9RPfMqY1h1n8gmQUbt/DB3sY7ENV6/mbO6TcHnRMVpw==","signatures":[{"sig":"MEUCIAvn6KPg2XeIZsDOEoy3aFupZgonTV51Wt1kL1YroIwEAiEAjqkhH4g0Qa/gU99e1KQHqY3k2uvtdEk/32oTC+rksCI=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":18485584},"type":"commonjs","_from":"file:conterra-vuln-scan-0.1.0.tgz","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_resolved":"/tmp/60145c922c93a6ca7d960aa19f0821d5/conterra-vuln-scan-0.1.0.tgz","_integrity":"sha512-IoMLELJUfz0cDI0sHc6OrAaceMZDjWYh465Vbg/TLyA9RPfMqY1h1n8gmQUbt/DB3sY7ENV6/mbO6TcHnRMVpw==","_npmVersion":"10.9.4","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.22.0","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.0.18","esbuild":"0.27.3","globals":"17.3.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"5.9.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.3.0","typescript-eslint":"8.56.1","@types/escape-html":"1.0.4","node-sarif-builder":"3.4.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.1.0_1772558764594_0.3334768076957628","host":"s3://npm-registry-packages-npm-production"}},"0.1.1":{"name":"@conterra/vuln-scan","version":"0.1.1","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.1.1","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"d144107c59e8cc825231184a66f5ea583436f761","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.1.1.tgz","fileCount":13,"integrity":"sha512-x/iRQsS6wjgugQmoh4itBvPBoo2ZuWLpMOaljIO9QBd2G0Sq/DfJv07NnirCIb3Czct5frQ8fmeLbfc6v5SCYA==","signatures":[{"sig":"MEUCIQD7LVO3oktQfCMbKzVSv9So/6NeK00JheZ92Ch6KNmSgwIgaHwKIM9qrHuzY350AkNIi2EQQ24WpNdIcIPomuHDS9A=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":18485715},"type":"commonjs","_from":"file:conterra-vuln-scan-0.1.1.tgz","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_resolved":"/tmp/f806bd66e4f967fc281b16fc908ef64a/conterra-vuln-scan-0.1.1.tgz","_integrity":"sha512-x/iRQsS6wjgugQmoh4itBvPBoo2ZuWLpMOaljIO9QBd2G0Sq/DfJv07NnirCIb3Czct5frQ8fmeLbfc6v5SCYA==","_npmVersion":"10.9.4","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.22.0","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.0.18","esbuild":"0.27.3","globals":"17.4.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"5.9.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.3.0","typescript-eslint":"8.56.1","@types/escape-html":"1.0.4","node-sarif-builder":"4.0.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.1.1_1772710825307_0.7758769512258741","host":"s3://npm-registry-packages-npm-production"}},"0.1.2":{"name":"@conterra/vuln-scan","version":"0.1.2","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.1.2","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"c48aec66b276b06b83b52169e0ef99fd4dd123f2","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.1.2.tgz","fileCount":13,"integrity":"sha512-eNlj0FA5tnmcOs1ihDSGA89TyesVwoLdn/E/vHShcjSvhl+9QKTV0llWS2jLgcQrsHnmHLtiXaCVUJZmnFy7JQ==","signatures":[{"sig":"MEUCIB1ajm/Vvuhl+0vLqIyztzTntm1PU/Ra21y13khoGtveAiEA5BkEI9CAxJJvULOWCJuyun1Ma/ZsN57vauNnyl3cxjA=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":18486641},"type":"commonjs","_from":"file:conterra-vuln-scan-0.1.2.tgz","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_resolved":"/tmp/fc6137c528e1fbc64fb0d93c9a2a6202/conterra-vuln-scan-0.1.2.tgz","_integrity":"sha512-eNlj0FA5tnmcOs1ihDSGA89TyesVwoLdn/E/vHShcjSvhl+9QKTV0llWS2jLgcQrsHnmHLtiXaCVUJZmnFy7JQ==","_npmVersion":"10.9.4","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.22.1","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.0.18","esbuild":"0.27.3","globals":"17.4.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"5.9.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.3.0","typescript-eslint":"8.56.1","@types/escape-html":"1.0.4","node-sarif-builder":"4.0.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.1.2_1773227044718_0.8108834812312029","host":"s3://npm-registry-packages-npm-production"}},"0.1.3":{"name":"@conterra/vuln-scan","version":"0.1.3","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.1.3","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"af36c6ded94763f76b26a130f7801717d9f411a4","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.1.3.tgz","fileCount":13,"integrity":"sha512-dZV+QvrMVAfXl+7IJUBSAmkvCl6leZ5+8ACDtOUs4BMhjSHztsdFoPPaN7U8IJXFo+EptmiZN8zdWiGktvAiMw==","signatures":[{"sig":"MEUCIQC7YHdDJClwYMs/a0bq8vtnchtceEWtn0DGCkR/osOBUwIgXdJYt9VooUVlthOpRHBVI5QqwUIZDXv4FbI2dINKvxs=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":18487280},"type":"commonjs","_from":"file:conterra-vuln-scan-0.1.3.tgz","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_resolved":"/tmp/e5bef9791a9ad544087b7f4b6d2e61cf/conterra-vuln-scan-0.1.3.tgz","_integrity":"sha512-dZV+QvrMVAfXl+7IJUBSAmkvCl6leZ5+8ACDtOUs4BMhjSHztsdFoPPaN7U8IJXFo+EptmiZN8zdWiGktvAiMw==","_npmVersion":"10.9.7","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.22.2","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.1.0","esbuild":"0.27.4","globals":"17.4.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"5.9.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.3.2","typescript-eslint":"8.57.1","@types/escape-html":"1.0.4","node-sarif-builder":"4.0.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.1.3_1774423203498_0.3419835965149889","host":"s3://npm-registry-packages-npm-production"}},"0.1.4":{"name":"@conterra/vuln-scan","version":"0.1.4","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.1.4","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"70052fad7a6beed4f4be4598b5595de90493a590","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.1.4.tgz","fileCount":13,"integrity":"sha512-ZlkNnUUJzv0Kgg1yx0HiBtiV7cEjefPE6Ag0SgnZvq3GuxIBNWXcf44u0frXCwLqvWuWCfpCjg8RbSgBREcYqg==","signatures":[{"sig":"MEUCIQC8RiQWdHayzalCOLFXePlu6Fh6F213NQ3X6lwd4WMnXgIgUR7HbqkscbRJZ7+1/2ubnM3lTYOo2oLrtV+CAkNxelE=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":18487280},"type":"commonjs","_from":"file:conterra-vuln-scan-0.1.4.tgz","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_resolved":"/tmp/e85726ca0c50b8cb83602521c13afc91/conterra-vuln-scan-0.1.4.tgz","_integrity":"sha512-ZlkNnUUJzv0Kgg1yx0HiBtiV7cEjefPE6Ag0SgnZvq3GuxIBNWXcf44u0frXCwLqvWuWCfpCjg8RbSgBREcYqg==","_npmVersion":"10.9.7","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.22.2","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.1.0","esbuild":"0.27.4","globals":"17.4.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"5.9.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.3.2","typescript-eslint":"8.57.1","@types/escape-html":"1.0.4","node-sarif-builder":"4.0.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.1.4_1774424460054_0.1689708474934415","host":"s3://npm-registry-packages-npm-production"}},"0.1.5":{"name":"@conterra/vuln-scan","version":"0.1.5","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.1.5","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"c31792b92628ffe8fc78a337c6412a52241b034d","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.1.5.tgz","fileCount":13,"integrity":"sha512-eq2Ut+20nR0LAJktuJoA19o30VOJ3YTpcdFSYIFlBMRSxqt/kSqm+dDNOV+ksduvUTdCGxwr/Tmv8N5ByV9aYA==","signatures":[{"sig":"MEQCIAdwWYWC8FN5SN9As5vIq0BqTJ96E5ZcBvDVLzzzH8ysAiANmGiI5kk8k2EDoet6jdrb40CMWE0heks1APVl9IsVgA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":18487280},"type":"commonjs","_from":"file:conterra-vuln-scan-0.1.5.tgz","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_resolved":"/tmp/cbafc32cc326095e6db455968b8d060c/conterra-vuln-scan-0.1.5.tgz","_integrity":"sha512-eq2Ut+20nR0LAJktuJoA19o30VOJ3YTpcdFSYIFlBMRSxqt/kSqm+dDNOV+ksduvUTdCGxwr/Tmv8N5ByV9aYA==","_npmVersion":"10.9.7","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.22.2","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.1.0","esbuild":"0.27.4","globals":"17.4.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"5.9.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.3.2","typescript-eslint":"8.57.1","@types/escape-html":"1.0.4","node-sarif-builder":"4.0.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.1.5_1774425050444_0.9590453506553474","host":"s3://npm-registry-packages-npm-production"}},"0.1.6":{"name":"@conterra/vuln-scan","version":"0.1.6","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.1.6","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"035503c131b2b65a7e15879bacf21d3f3f4c9bfb","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.1.6.tgz","fileCount":13,"integrity":"sha512-4fhqdiy1JTMc8KjLACY9sNh0/4i6y5Rg1H6Tu+wLzXMpX4zRUOsAKCNbFJu/DELA17JW8NpRCKZGUxtPNGAs7Q==","signatures":[{"sig":"MEYCIQDu4NwB87V5RJA0iOsf4hFR8JmT9RpgDZZDsVA3m4QuyQIhAPTTpcYxDUqw3/PDKRqttvm9nRRc3SqTYWMsImAxZnPa","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":18487280},"type":"commonjs","_from":"file:conterra-vuln-scan-0.1.6.tgz","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_resolved":"/tmp/0059eeaa144ac00f515f114dc0638cc1/conterra-vuln-scan-0.1.6.tgz","_integrity":"sha512-4fhqdiy1JTMc8KjLACY9sNh0/4i6y5Rg1H6Tu+wLzXMpX4zRUOsAKCNbFJu/DELA17JW8NpRCKZGUxtPNGAs7Q==","_npmVersion":"10.9.7","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.22.2","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.1.0","esbuild":"0.27.4","globals":"17.4.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"5.9.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.3.2","typescript-eslint":"8.57.1","@types/escape-html":"1.0.4","node-sarif-builder":"4.0.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.1.6_1774425469505_0.9961586430270952","host":"s3://npm-registry-packages-npm-production"}},"0.1.7":{"name":"@conterra/vuln-scan","version":"0.1.7","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@0.1.7","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"d003a9466497c0bd36960b988ae3e70c20fdb342","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-0.1.7.tgz","fileCount":13,"integrity":"sha512-/VXu3GfSdsmuYCczEpEU7twSQAJOwnVZXOhmz28F+idkmaSTvl42rIpZ3UdIhoniGKSf6zawjGRoHooVsjH42w==","signatures":[{"sig":"MEUCIQC7Q9vbEGW2kXXrEHhPFIwhVQpNEZY5xVqyNXwOd2ZRlQIgDHIv0Tdu2m9vliriF9RWXSYAFlWkBvPd5kLmSfs2Xrg=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":18487432},"type":"commonjs","_from":"file:conterra-vuln-scan-0.1.7.tgz","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_resolved":"/tmp/28b2220354025e32e115187139ef99ff/conterra-vuln-scan-0.1.7.tgz","_integrity":"sha512-/VXu3GfSdsmuYCczEpEU7twSQAJOwnVZXOhmz28F+idkmaSTvl42rIpZ3UdIhoniGKSf6zawjGRoHooVsjH42w==","_npmVersion":"10.9.7","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.22.2","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.1.1","esbuild":"0.27.4","globals":"17.4.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"5.9.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.3.2","typescript-eslint":"8.57.2","@types/escape-html":"1.0.4","node-sarif-builder":"4.0.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_0.1.7_1774610770143_0.8730176735577215","host":"s3://npm-registry-packages-npm-production"}},"1.0.8":{"name":"@conterra/vuln-scan","version":"1.0.8","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@1.0.8","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"e74545424bebce0d902a4c90fd96e3c771b98ded","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-1.0.8.tgz","fileCount":13,"integrity":"sha512-fVKxBai2VPrd20cWFIQXUfFTYl+6rbdhb5+0p2uS/WK2Z3VBeTBCXnCbq4ACNO4BH8dnhvcULytzOflvFn1gQQ==","signatures":[{"sig":"MEUCIQClVQNOI9dyWJ7QIB1nq7mJGFHiMeh11c5R+3BFssp4CwIgOQczLUJwNcX4e6WygyCQHCwm4apLvCFCyQTnTXTyf+M=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":262363},"type":"commonjs","_from":"file:conterra-vuln-scan-1.0.8.tgz","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},"_resolved":"/tmp/650052534c7e64399f8ba83e3484db1a/conterra-vuln-scan-1.0.8.tgz","_integrity":"sha512-fVKxBai2VPrd20cWFIQXUfFTYl+6rbdhb5+0p2uS/WK2Z3VBeTBCXnCbq4ACNO4BH8dnhvcULytzOflvFn1gQQ==","_npmVersion":"10.9.7","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.22.2","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.1.1","esbuild":"0.27.4","globals":"17.4.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"5.9.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.3.2","typescript-eslint":"8.57.2","@types/escape-html":"1.0.4","node-sarif-builder":"4.0.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_1.0.8_1774611072331_0.2487936703790563","host":"s3://npm-registry-packages-npm-production"}},"1.0.9":{"name":"@conterra/vuln-scan","version":"1.0.9","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@1.0.9","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"},{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"4ef95fc37eda8a0d3d6a6a7f52e35d4c497e2d56","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-1.0.9.tgz","fileCount":13,"integrity":"sha512-XkbbO0V+T6l2Uf6L0RmXz+88z7TZuLtGWr8YzGvl73BlhB7ptQe4eXVOi2rC/2K1ByamItjUbWUyKd09I/1DKw==","signatures":[{"sig":"MEUCIAwFnSuUZBRRNjbKfmZmwUpvzkEfL2g20Jzc0FzywHFTAiEA05I8NZLPW+xGLJtdrvtqVs4H2JrlgNnmCPknU3dCddM=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":265104},"type":"commonjs","_from":"file:conterra-vuln-scan-1.0.9.tgz","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"},"_resolved":"/tmp/e8b6cf73fa2eb565dc2b248099641691/conterra-vuln-scan-1.0.9.tgz","_integrity":"sha512-XkbbO0V+T6l2Uf6L0RmXz+88z7TZuLtGWr8YzGvl73BlhB7ptQe4eXVOi2rC/2K1ByamItjUbWUyKd09I/1DKw==","_npmVersion":"10.9.7","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.22.2","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.1.5","esbuild":"0.28.0","globals":"17.5.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"5.9.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.4.2","typescript-eslint":"8.59.0","@types/escape-html":"1.0.4","node-sarif-builder":"4.1.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_1.0.9_1777562275980_0.38976741147620353","host":"s3://npm-registry-packages-npm-production"}},"1.0.10":{"name":"@conterra/vuln-scan","version":"1.0.10","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@1.0.10","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"},{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"6dfb6a557a200a06df6b120be8bb8df8ab1d2224","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-1.0.10.tgz","fileCount":13,"integrity":"sha512-vvqaYPqrDXWpFsFaK8wV/fP0zMXmd2IZ1II2swBxW4C8rUx4ElRLdmIC46AUCYEjJbIK6EFPPtbdGaAodZ7jAg==","signatures":[{"sig":"MEUCIH9Dt9OPm5Z/muUqiXUj5Df7xTpL+XqsgQQg6PQ6vi0UAiEAgC3LvBFyjaYWSDA5bUJI2EBX/XS9EpPkW7JOgl3TE0Q=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":265105},"type":"commonjs","_from":"file:conterra-vuln-scan-1.0.10.tgz","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/types/openvex-schema.json --output ./src/types/openvex_json.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"},"_resolved":"/tmp/47c2ef84a47f8206772a4cd16c359c39/conterra-vuln-scan-1.0.10.tgz","_integrity":"sha512-vvqaYPqrDXWpFsFaK8wV/fP0zMXmd2IZ1II2swBxW4C8rUx4ElRLdmIC46AUCYEjJbIK6EFPPtbdGaAodZ7jAg==","_npmVersion":"10.9.7","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.22.2","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.1.5","esbuild":"0.28.0","globals":"17.5.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"5.9.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.4.2","typescript-eslint":"8.59.0","@types/escape-html":"1.0.4","node-sarif-builder":"4.1.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_1.0.10_1777562814940_0.08542086249822556","host":"s3://npm-registry-packages-npm-production"}},"1.0.11":{"name":"@conterra/vuln-scan","version":"1.0.11","author":{"name":"con terra GmbH"},"license":"Apache-2.0","_id":"@conterra/vuln-scan@1.0.11","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"},{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-auto-vex":"dist/auto-vex-creator.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"a2820538934b3ff572e611bb3d4c7d0286105ee4","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-1.0.11.tgz","fileCount":15,"integrity":"sha512-+np9k23FrCZ+8D1YDnTR37wcZ9gMRrVRdxowvfKrYbAWLLDFAu5nUhZ0aJTlRy9XL2qxulTSg5emA3gAAMGkLQ==","signatures":[{"sig":"MEYCIQCR6qtQN4+nPQlpMs5NMEE0+PQcc8rilyHBWfDQ4ZuUZgIhANHPxAo/0GhPWqRauK5nFYz7UycRCO+zpilkOTTfjUFv","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":316445},"type":"commonjs","_from":"file:conterra-vuln-scan-1.0.11.tgz","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/schema/openvex-schema.json --output ./src/types/OpenVex.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"},"_resolved":"/tmp/e4e39cde395da153b1d83a2e77b17307/conterra-vuln-scan-1.0.11.tgz","_integrity":"sha512-+np9k23FrCZ+8D1YDnTR37wcZ9gMRrVRdxowvfKrYbAWLLDFAu5nUhZ0aJTlRy9XL2qxulTSg5emA3gAAMGkLQ==","_npmVersion":"10.9.7","description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.22.2","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.1.5","esbuild":"0.28.0","globals":"17.6.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"5.9.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.4.2","typescript-eslint":"8.59.1","@types/escape-html":"1.0.4","node-sarif-builder":"4.1.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_1.0.11_1778148177087_0.335317198577467","host":"s3://npm-registry-packages-npm-production"}},"1.0.12":{"name":"@conterra/vuln-scan","version":"1.0.12","author":"con terra GmbH","license":"Apache-2.0","_id":"@conterra/vuln-scan@1.0.12","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"},{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-auto-vex":"dist/auto-vex-creator.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"157dd31fc763a413c818a1bfb80b43924f729a4d","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-1.0.12.tgz","fileCount":15,"integrity":"sha512-3/D7S/CghHVtU11r9BVbyETw3ljtzgtQxZIQuyerx++Uev/xTNoyctA/Bcf9b0PS0cGN6ztM80um0mMSKju+7A==","signatures":[{"sig":"MEYCIQDw3Yr+zEgLmEPrc7hy4yy2oH/OLEBPOcU3psfQ+AVGLwIhAN5YIFuvWNnm600UltKSv6RyOdWMeWjXCYRWmVuzJA7L","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":324744},"type":"commonjs","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/schema/openvex-schema.json --output ./src/types/OpenVex.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"},"description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.23.0","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.1.8","esbuild":"0.28.1","globals":"17.6.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"6.0.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.5.2","typescript-eslint":"8.61.0","@types/escape-html":"1.0.4","node-sarif-builder":"4.1.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_1.0.12_1781781383593_0.38941845189021196","host":"s3://npm-registry-packages-npm-production"}},"1.0.13":{"name":"@conterra/vuln-scan","version":"1.0.13","author":"con terra GmbH","license":"Apache-2.0","_id":"@conterra/vuln-scan@1.0.13","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"},{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-auto-vex":"dist/auto-vex-creator.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"fde9882c837574fe9512d189703a66289c5cf9ef","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-1.0.13.tgz","fileCount":15,"integrity":"sha512-dhkJlUOxVeltwBrqQmxU2QHQOQeVXwHEPw5P6eTzOTPkmVL4YovXv/ixE2Q7CeylUXkhz+am0t+9OwLSoWUVvg==","signatures":[{"sig":"MEQCIGa1GmYsRapP8b4w28mEGEcLYC5DzmvmPACKa1ta4xfWAiBCPc8x7lVnJJlPNl3Pz+UanG3Y5Az8rcewCyqnLKUiJQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":348809},"type":"commonjs","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/schema/openvex-schema.json --output ./src/types/OpenVex.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"},"description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.23.1","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.1.9","esbuild":"0.28.1","globals":"17.6.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"6.0.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.5.2","typescript-eslint":"8.61.1","@types/escape-html":"1.0.4","node-sarif-builder":"4.1.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_1.0.13_1782743011583_0.5108645170908654","host":"s3://npm-registry-packages-npm-production"}},"1.0.14":{"name":"@conterra/vuln-scan","version":"1.0.14","author":"con terra GmbH","license":"Apache-2.0","_id":"@conterra/vuln-scan@1.0.14","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"},{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-auto-vex":"dist/auto-vex-creator.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"690b7089f8f22c91e43ed0a9c2fc17cec2416418","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-1.0.14.tgz","fileCount":15,"integrity":"sha512-UpxQBc0dFQhL5KhLgJz/WVIJxL5yN2SoRnjHr2jNRNocNDWF49H6QIGWKpYDZh/fBIQ2Wilrr9EUkMfTOPY4xQ==","signatures":[{"sig":"MEQCIE2WP/W+Bi243uHdYrz3fJ0gQ0W1lDhn0z4HgcM0j+1dAiANeuZ/fARQ4eOYpQr7eLCO5kU95zum3l/R/BgYDLXsIQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":363178},"type":"commonjs","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/schema/openvex-schema.json --output ./src/types/OpenVex.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"},"description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.23.1","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.1.9","esbuild":"0.28.1","globals":"17.6.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"6.0.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.5.2","typescript-eslint":"8.61.1","@types/escape-html":"1.0.4","node-sarif-builder":"4.1.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_1.0.14_1782754403861_0.21181136475863216","host":"s3://npm-registry-packages-npm-production"}},"1.0.15":{"name":"@conterra/vuln-scan","version":"1.0.15","author":"con terra GmbH","license":"Apache-2.0","_id":"@conterra/vuln-scan@1.0.15","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"},{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-auto-vex":"dist/auto-vex-creator.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"3213515a51a7eceb2091b394bdfcedbae10a2074","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-1.0.15.tgz","fileCount":15,"integrity":"sha512-iEjkp5/5/YO71/GabshjGYYAQNSiD5+wisU8tCEBmDeGV03RrfBwpEait8xkh21w2HmirEENwrL5YBZroEAQ8A==","signatures":[{"sig":"MEYCIQDfnVa1n9dPgmG1YhoXSC8b8pW6Vzgm/PwwiPncwS+1+wIhAK775vBA1kcQNh0qFiTmdPJNthAxOTc2e35E3mZuylsX","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":370252},"type":"commonjs","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/schema/openvex-schema.json --output ./src/types/OpenVex.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"},"description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.23.1","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.1.9","esbuild":"0.28.1","globals":"17.6.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"6.0.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.5.2","typescript-eslint":"8.61.1","@types/escape-html":"1.0.4","node-sarif-builder":"4.1.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_1.0.15_1782903712674_0.31175149931576884","host":"s3://npm-registry-packages-npm-production"}},"1.0.16":{"name":"@conterra/vuln-scan","version":"1.0.16","author":"con terra GmbH","license":"Apache-2.0","_id":"@conterra/vuln-scan@1.0.16","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"},{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-auto-vex":"dist/auto-vex-creator.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"5701bb82b55cf959a0d130588060473b2cc0803c","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-1.0.16.tgz","fileCount":15,"integrity":"sha512-32yeMzlno46CeM48UFgrDow5sW8pkhK0kXkuy35U3Z38MfOz28SCRoQcSBMBueROHLzpwVl+T8E9WJms0RIjNQ==","signatures":[{"sig":"MEUCIQCd0ORuuCjdR7OaGVxdmul2/VF8WMzDoifVulIsPjBv8QIgOy8mIuNY6dG7Krut4rMtIrUB1lkUkNXAxuiilaEf8ok=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":371467},"type":"commonjs","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/schema/openvex-schema.json --output ./src/types/OpenVex.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"},"description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.23.1","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.1.9","esbuild":"0.28.1","globals":"17.6.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"6.0.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.5.2","typescript-eslint":"8.61.1","@types/escape-html":"1.0.4","node-sarif-builder":"4.1.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_1.0.16_1783502854626_0.132951218364316","host":"s3://npm-registry-packages-npm-production"}},"1.0.17":{"name":"@conterra/vuln-scan","version":"1.0.17","author":"con terra GmbH","license":"Apache-2.0","_id":"@conterra/vuln-scan@1.0.17","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"},{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-auto-vex":"dist/auto-vex-creator.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"288f51d9646cfe7fe0b4c4e643a01ecdea99ec7d","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-1.0.17.tgz","fileCount":15,"integrity":"sha512-CULY0BtZKW7AJkNfZOmRsRHc+kPLGpV0hGGQHqbbu/YZrPrarnjT7DvV8EWOkNIDdHFJx1mlyLOfMfnHma2LEw==","signatures":[{"sig":"MEUCIQCadqShsKkEivKHhheESpARo2LPnHm3sOoH6HpQQDBe8QIgJVLqnNpbR8wqiX31hduBFIQaDWwaWCiZHU1En82gvO4=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":374175},"type":"commonjs","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/schema/openvex-schema.json --output ./src/types/OpenVex.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"},"description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.23.1","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.1.9","esbuild":"0.28.1","globals":"17.6.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"6.0.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.5.2","typescript-eslint":"8.61.1","@types/escape-html":"1.0.4","node-sarif-builder":"4.1.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_1.0.17_1785146310317_0.5267763045328044","host":"s3://npm-registry-packages-npm-production"}},"1.0.18":{"name":"@conterra/vuln-scan","version":"1.0.18","author":"con terra GmbH","license":"Apache-2.0","_id":"@conterra/vuln-scan@1.0.18","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"},{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-auto-vex":"dist/auto-vex-creator.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"17e6baaba1670eff87ffcee36820821b2823bfee","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-1.0.18.tgz","fileCount":15,"integrity":"sha512-41+iffb3Cfgfzwl2wsr06tb2aaGlEjETA7902/v54gwPXqiDE4uTmN0tr2s2ivV9AEHYOl8JF3EKQRcE7RVrWA==","signatures":[{"sig":"MEUCIFgPxFOLy5zK2kHAvv4Y7wxVQxDp06HQQltdJ7h6qOu9AiEAvS2RLD19E67gNUM5mTokaD0QN4YwTCUmTuTZB7U2q9o=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":384928},"type":"commonjs","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/schema/openvex-schema.json --output ./src/types/OpenVex.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"},"description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.23.1","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.1.9","esbuild":"0.28.1","globals":"17.6.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"6.0.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.5.2","typescript-eslint":"8.61.1","@types/escape-html":"1.0.4","node-sarif-builder":"4.1.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_1.0.18_1785227475898_0.3157405729746503","host":"s3://npm-registry-packages-npm-production"}},"1.0.19":{"name":"@conterra/vuln-scan","version":"1.0.19","author":"con terra GmbH","license":"Apache-2.0","_id":"@conterra/vuln-scan@1.0.19","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"},{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-auto-vex":"dist/auto-vex-creator.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"98fb84fc6b3de5c636bf65e3bd34ec69d8f4ba8c","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-1.0.19.tgz","fileCount":15,"integrity":"sha512-NvQJLpy5d47Jpb7ZOpZXuF+zhPEom4wehlKT9XNHqXCRG65V/cnpiSRbaZNyopVa/j5PFFlFp1Wl2WaEwPz4bA==","signatures":[{"sig":"MEYCIQDSHILrJQD8m5eYt38piguBoyVR+jWU95L/47seM/2AhgIhAPZh4yS1GySATIrO4aTk1c8vAoWnv5eLJwK5ULZxqgeY","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":378826},"type":"commonjs","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/schema/openvex-schema.json --output ./src/types/OpenVex.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"},"description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.23.2","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.1.9","esbuild":"0.28.1","globals":"17.6.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"6.0.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.5.2","typescript-eslint":"8.61.1","@types/escape-html":"1.0.4","node-sarif-builder":"4.1.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_1.0.19_1785422494217_0.6674103630955719","host":"s3://npm-registry-packages-npm-production"}},"1.0.20":{"name":"@conterra/vuln-scan","version":"1.0.20","author":"con terra GmbH","license":"Apache-2.0","_id":"@conterra/vuln-scan@1.0.20","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"},{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-auto-vex":"dist/auto-vex-creator.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-html-report":"dist/html-reporter.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"d5a2220f6528ba5798e55f479cb4169ed74df459","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-1.0.20.tgz","fileCount":17,"integrity":"sha512-9PxC8cpLDI5/AVS7FFQLYNpOFkDc50JcfAg/Hg7GyxbPNWANl5trGYyIZPhblglIBkibpO6L2WnESHSFELPjjg==","signatures":[{"sig":"MEQCIDBu4oULiTQ8u1LTGZIEUc++5ooFxKsjMr9d/XCHUWTSAiAzX4sTAP9YDlsUa/1U+q3omFyuzXNo4jFKtkKdG7u9hQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":408448},"type":"commonjs","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/schema/openvex-schema.json --output ./src/types/OpenVex.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"},"description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.23.2","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.1.9","esbuild":"0.28.1","globals":"17.6.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"6.0.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.5.2","typescript-eslint":"8.61.1","@types/escape-html":"1.0.4","node-sarif-builder":"4.1.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_1.0.20_1785425802784_0.6197607155533951","host":"s3://npm-registry-packages-npm-production"}},"1.0.21":{"name":"@conterra/vuln-scan","version":"1.0.21","author":"con terra GmbH","license":"Apache-2.0","_id":"@conterra/vuln-scan@1.0.21","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"},{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-auto-vex":"dist/auto-vex-creator.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-html-report":"dist/html-reporter.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"b1512bc7a88abe1ba91affca1ec6ab6be11ae2e2","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-1.0.21.tgz","fileCount":17,"integrity":"sha512-kMhUm0np8NTfOIuHpOo4nAAjRRqxZptWUpteJ5lrtpEHsCJXVk8s4UWk5qR1bM1VZ1rvzWHs8Zn2HE5GB0ksnA==","signatures":[{"sig":"MEYCIQD3AmNgTNxKJalS0PhtRo8bn1MbFtUEBnWXBTE1LNyxQwIhALhiu6NekfLSSxZCM/6vH/tjeObioPl+7hLrNqhjK4P+","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":408859},"type":"commonjs","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/schema/openvex-schema.json --output ./src/types/OpenVex.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"},"description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.23.2","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.1.9","esbuild":"0.28.1","globals":"17.6.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"6.0.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.5.2","typescript-eslint":"8.61.1","@types/escape-html":"1.0.4","node-sarif-builder":"4.1.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_1.0.21_1785428054939_0.7211300937679892","host":"s3://npm-registry-packages-npm-production"}},"1.0.22":{"name":"@conterra/vuln-scan","version":"1.0.22","author":"con terra GmbH","license":"Apache-2.0","_id":"@conterra/vuln-scan@1.0.22","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"},{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-auto-vex":"dist/auto-vex-creator.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-html-report":"dist/html-reporter.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"5edf05f3a63a95c405246646b0fb8e0ab7ea76a5","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-1.0.22.tgz","fileCount":17,"integrity":"sha512-bmR4gsiLioBOHcDiGhYPp1MhsaYyVzRUzmmg5qIrVKf447GsvJ7Q06zDs3xjWLpf7Kqn7ENCpOYx/v/zjyXUmQ==","signatures":[{"sig":"MEUCIQDE7XSIKzZZ8nfr7gUAwTWXk9qXCupKJ3kTWbhOcjq7uQIgDx5Z/tNpy4fJViDI0ZGTrH7m0Uvs3VZB3WStYMVLSJM=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":413212},"type":"commonjs","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/schema/openvex-schema.json --output ./src/types/OpenVex.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"},"description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.23.2","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.1.9","esbuild":"0.28.1","globals":"17.6.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"6.0.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.5.2","typescript-eslint":"8.61.1","@types/escape-html":"1.0.4","node-sarif-builder":"4.1.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_1.0.22_1785429478134_0.5173895272991491","host":"s3://npm-registry-packages-npm-production"}},"1.0.23":{"name":"@conterra/vuln-scan","version":"1.0.23","author":"con terra GmbH","license":"Apache-2.0","_id":"@conterra/vuln-scan@1.0.23","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"},{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-auto-vex":"dist/auto-vex-creator.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-html-report":"dist/html-reporter.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"378bc0199b89057ef3e44018a0268825186196c8","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-1.0.23.tgz","fileCount":18,"integrity":"sha512-6useV1GVLYzvjiZ7wrwHPpunMtiUdHBLMCz39U/JCpHSj4xTl3t2S+NliOAhOe6F4Z7F/ypiLmDSGDshrBnT2g==","signatures":[{"sig":"MEUCIQCPOEFpU0DZDgzf56x/TQd0aC14iAmoWrO2zmXAvc6KhQIgGuy7qpwyrJexNjPgl58y7DypoJSIpcOfyI6Qokia3UE=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":448507},"type":"commonjs","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/schema/openvex-schema.json --output ./src/types/OpenVex.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"},"description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.23.2","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.1.9","esbuild":"0.28.1","globals":"17.6.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"6.0.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.5.2","typescript-eslint":"8.61.1","@types/escape-html":"1.0.4","node-sarif-builder":"4.1.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_1.0.23_1785511181124_0.4540255754910496","host":"s3://npm-registry-packages-npm-production"}},"1.0.24":{"name":"@conterra/vuln-scan","version":"1.0.24","author":"con terra GmbH","license":"Apache-2.0","_id":"@conterra/vuln-scan@1.0.24","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"},{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-auto-vex":"dist/auto-vex-creator.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-html-report":"dist/html-reporter.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"9e93673f9a978fa3b9a19d73062496e7c8fa9927","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-1.0.24.tgz","fileCount":18,"integrity":"sha512-49Z/9tTJJ0oQl6RXzD1i8W0wWasShRnaquBDLi7/FRvoeE/XXgoxWRieTMOpuOSkA44zeVLSSGVJo5riIRkX0g==","signatures":[{"sig":"MEQCICD6X/qn0J6jL3jmI+Q/1L+EMxdlmlx8nMazupkcAoIlAiA7NAwzc03+9ACn8UCth7nDnwnSEpL13HIk2eGobL/Rjw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":455659},"type":"commonjs","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/schema/openvex-schema.json --output ./src/types/OpenVex.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"},"description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.23.2","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.1.9","esbuild":"0.28.1","globals":"17.6.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"6.0.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.5.2","typescript-eslint":"8.61.1","@types/escape-html":"1.0.4","node-sarif-builder":"4.1.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_1.0.24_1785771823957_0.7142952170270136","host":"s3://npm-registry-packages-npm-production"}},"1.0.25":{"name":"@conterra/vuln-scan","version":"1.0.25","author":"con terra GmbH","license":"Apache-2.0","_id":"@conterra/vuln-scan@1.0.25","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"},{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-auto-vex":"dist/auto-vex-creator.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-html-report":"dist/html-reporter.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"f10d946047ddf0e5a01fa86b2ee1a99d8172c315","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-1.0.25.tgz","fileCount":18,"integrity":"sha512-+j/8OCD2KwypeiwgkKwFlUvxZiLM7im/J2ggYef7Ud/uyN6o2Pix+iBFCdYTikc6ZSsaeeSEL1ufU+cfIp8+OA==","signatures":[{"sig":"MEUCIA3XJ7aQqSVeOVT2ii2TV3S5VmSbtm3+vTC8l/Xmpo1JAiEA2XeMsz1kBGd1Jm4GwdZclv2L2CFNqm8ouanKZpJzYQI=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":456589},"type":"commonjs","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/schema/openvex-schema.json --output ./src/types/OpenVex.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"},"description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.23.2","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.1.10","esbuild":"0.28.1","globals":"17.8.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"6.0.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.5.2","typescript-eslint":"8.65.0","@types/escape-html":"1.0.4","node-sarif-builder":"4.1.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_1.0.25_1785778690614_0.8240125715585029","host":"s3://npm-registry-packages-npm-production"}},"1.0.26":{"name":"@conterra/vuln-scan","version":"1.0.26","author":"con terra GmbH","license":"Apache-2.0","_id":"@conterra/vuln-scan@1.0.26","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"},{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-auto-vex":"dist/auto-vex-creator.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-html-report":"dist/html-reporter.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"c0c4050e8594a7951eaf0b44157a0c98bc25bad4","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-1.0.26.tgz","fileCount":18,"integrity":"sha512-jlnVNHXmFVT/aQRc8hpQrSddco4GTaVQrJGa7Mw9fG9aB8u0eu2XQC67FTFW/MHq3f37BJK7BpzfVit/mUKGbg==","signatures":[{"sig":"MEUCIQC9s1NcUa7kRNZoGix5V/AyMJ1kzqwPkfj0CPsW1rM7pwIgGWzH2VxArpesMznMc2fqddDFBGYWzeOLfqHiiil6yM8=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":456905},"type":"commonjs","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/schema/openvex-schema.json --output ./src/types/OpenVex.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"},"description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.23.2","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.1.10","esbuild":"0.28.1","globals":"17.9.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"6.0.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.5.2","typescript-eslint":"8.66.0","@types/escape-html":"1.0.4","node-sarif-builder":"4.1.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_1.0.26_1786368461345_0.36186504832657684","host":"s3://npm-registry-packages-npm-production"}},"1.0.27":{"name":"@conterra/vuln-scan","version":"1.0.27","author":"con terra GmbH","license":"Apache-2.0","_id":"@conterra/vuln-scan@1.0.27","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"},{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-auto-vex":"dist/auto-vex-creator.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-html-report":"dist/html-reporter.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"13b69e7bb5880bfe9db226e9ca42e16f22659129","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-1.0.27.tgz","fileCount":18,"integrity":"sha512-SQKxIFcMwfDx44apYjyr6IJv9xPdvFDkJYNOmNCSgpwR2wmTArhDUV0qN09t5aZ7a60/Dz8uBbnfHT8XyH7HYw==","signatures":[{"sig":"MEQCIBii80zZSgn1RZFJHk4a/5AbkRM1z5yUmfI7bk/+zOJuAiAc8pUyulXIquDlxBaAU5eOr8tvBSqVEsgoh1UzfbzEjQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEYCIQDd++o9Y7QGtSGTA0oEBIDagt0Y4xoXmb9dVQFpoMa4igIhAKPxT5goXdGf2LNiiTh3JMgg/GehcJu4PKCpHnhR5Huy","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":466194},"type":"commonjs","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/schema/openvex-schema.json --output ./src/types/OpenVex.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"},"description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.23.2","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.1.11","esbuild":"0.28.2","globals":"17.11.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"6.0.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.7.0","typescript-eslint":"8.68.0","@types/escape-html":"1.0.4","node-sarif-builder":"4.1.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_1.0.27_1788252110859_0.11052489519381248","host":"s3://npm-registry-packages-npm-production"}},"1.1.0":{"name":"@conterra/vuln-scan","version":"1.1.0","author":"con terra GmbH","license":"Apache-2.0","_id":"@conterra/vuln-scan@1.1.0","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"},{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-auto-vex":"dist/auto-vex-creator.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-html-report":"dist/html-reporter.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"1ce62547b774834f753ac8b81276fc1e3bc61c9f","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-1.1.0.tgz","fileCount":18,"integrity":"sha512-8sT8taLQZST+eeoxEc2KSejIbJg16lMRzISbiERJdoLKiCmrqQ1zXJp+45w0Ok54gqTfZgNg8fa2dCsfV1UAnw==","signatures":[{"sig":"MEQCIG9O4TA7i6Dn9Sz1sH8rKHF2bNnutdPsAYrDmDbZHC+sAiBfN2xFhjYSkhs+XrZk9/+kmQ5Shj0kPkPzpMy16kEeBQ==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEQCIEN6JUOYk/Cp0djyhPinJB+j/n9tgZtw8WAAyEc4aK/cAiBmKf/dmi/fbxKUGAiHktoACnCs1msHaih3WTWiMrVXAg==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":469333},"type":"commonjs","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/schema/openvex-schema.json --output ./src/types/OpenVex.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"},"description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.23.2","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.1.11","esbuild":"0.28.2","globals":"17.11.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"6.0.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.7.0","typescript-eslint":"8.68.0","@types/escape-html":"1.0.4","node-sarif-builder":"4.1.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_1.1.0_1788427045754_0.38771988049226924","host":"s3://npm-registry-packages-npm-production"}},"1.2.0":{"name":"@conterra/vuln-scan","version":"1.2.0","author":"con terra GmbH","license":"Apache-2.0","_id":"@conterra/vuln-scan@1.2.0","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"},{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"}],"bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-auto-vex":"dist/auto-vex-creator.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-html-report":"dist/html-reporter.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"93b7a804162536af009cbc60ccb9c903af4164f0","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-1.2.0.tgz","fileCount":18,"integrity":"sha512-p5KIjo6kSCMEMnjff1hiTSK+CauFcShywTHCm9UztnuvllAjPz/Nv+9Bo/Z3SfZGKtCCMOvSSBpZj7Cfy0lzSw==","signatures":[{"sig":"MEYCIQCPg1L6v0fnM31L+5E/SvNTMWdQu0+EJXZQI7G/Lg5CIgIhAOMmwB+TgMNrS8SY6WQBwkYG44xEtYIQjixAb3IutYQk","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"sig":"MEUCIQCEZzyUPlEonWkbfKA2rKI6FDXJ2MS+WN1ImPxYIBu6lwIgQEqwyUs7Mjci4+on1/suEQkWE26S3PbWY0BzCFQzNH0=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":471774},"type":"commonjs","engines":{"node":">= 20","pnpm":">= 10.0.0"},"scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/schema/openvex-schema.json --output ./src/types/OpenVex.ts --no-style.semi --style.tabWidth 4"},"_npmUser":{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"},"description":"con terra vulnerability scan process","directories":{},"_nodeVersion":"22.23.2","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.1.11","esbuild":"0.28.2","globals":"17.12.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"6.0.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.7.2","typescript-eslint":"8.70.0","@types/escape-html":"1.0.4","node-sarif-builder":"4.1.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"tmp":"tmp/vuln-scan_1.2.0_1789392057459_0.3533990850070978","host":"s3://npm-registry-packages-npm-production"}},"1.2.1":{"_id":"@conterra/vuln-scan@1.2.1","bin":{"ct-vuln-scan":"dist/vuln-scan.js","ct-vuln-add-vex":"dist/add-statement.js","ct-vuln-auto-vex":"dist/auto-vex-creator.js","ct-vuln-add-project":"dist/add-project.js","ct-vuln-html-report":"dist/html-reporter.js","ct-vuln-jira-report":"dist/jira-reporter.js","ct-vuln-remove-project":"dist/remove-project.js","ct-vuln-add-project-to-vex":"dist/add-project-to-vex.js"},"dist":{"shasum":"998b1db545d2fd73c1abe4b837602aced6e7f91e","tarball":"https://registry.npmjs.org/@conterra/vuln-scan/-/vuln-scan-1.2.1.tgz","fileCount":18,"integrity":"sha512-39hN4uWEQK9vjQ3gm16XIRMDvyzBhiGDfMAgtlhdPwNXpN/5pPvCs1RjLM+GOgTA2SubX0Rpj19/K965iKBddg==","signatures":[{"sig":"MEUCIB4SvRC8QN3WXo6vM3AXRmaapW/Akqgmf6/YBZBVgW11AiEAlRcXi4o5vRniZpLK4FC/3qaBLvp/9Kng7XoAMfl89QE=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"},{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEUCIHaMTtuDB6gFyBukJReT8XvepPTqL2p/SjHE9OjWBI0DAiEAwnQ4TB7KBdp1Krn1Jk1FT5v0nn9Pl3gvf2vP2fBIVjY="}],"unpackedSize":477283},"name":"@conterra/vuln-scan","type":"commonjs","author":"con terra GmbH","engines":{"node":">= 20","pnpm":">= 10.0.0"},"license":"Apache-2.0","scripts":{"lint":"eslint","prod":"pnpm run test run && node esbuild.config.mjs prod","test":"vitest","build":"pnpm run test run && node esbuild.config.mjs build","clean":"rimraf dist","watch":"node esbuild.config.mjs watch","full-build":"pnpm run clean && pnpm run type-check && pnpm run lint && pnpm run prod","type-check":"tsc --noEmit","type-watch":"tsc -w --noEmit","update-openvex-types":"json2ts --input ./src/schema/openvex-schema.json --output ./src/types/OpenVex.ts --no-style.semi --style.tabWidth 4"},"version":"1.2.1","_npmUser":{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"},"description":"con terra vulnerability scan process","directories":{},"maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"},{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"}],"_nodeVersion":"22.23.3","dependencies":{"zx":"8.8.5"},"_hasShrinkwrap":false,"devDependencies":{"eslint":"^9.39.1","rimraf":"6.1.3","vitest":"4.1.11","esbuild":"0.28.2","globals":"17.12.0","prettier":"^3.8.1","copyfiles":"2.4.1","typescript":"6.0.3","@types/node":"^24.0.0","escape-html":"1.0.3","@types/sarif":"^2.1.7","@inquirer/prompts":"8.7.2","typescript-eslint":"8.70.0","@types/escape-html":"1.0.4","node-sarif-builder":"4.1.0","eslint-plugin-headers":"1.3.4","json-schema-to-typescript":"15.0.4"},"peerDependencies":{"prettier":"3.x"},"peerDependenciesMeta":{"prettier":{"optional":true}},"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/vuln-scan_1.2.1_1790587901407_0.24022847838510097"}}},"time":{"created":"2024-10-22T14:42:50.012Z","modified":"2026-09-28T09:31:41.707Z","0.0.1":"2024-10-22T14:42:50.299Z","0.0.2":"2024-10-23T17:35:07.220Z","0.0.3":"2024-10-24T16:08:58.539Z","0.0.4":"2024-11-17T10:58:19.100Z","0.0.5":"2024-11-25T18:21:14.879Z","0.0.6":"2024-12-11T17:05:39.535Z","0.0.7":"2024-12-11T17:35:54.203Z","0.0.8":"2024-12-17T13:02:02.037Z","0.0.9":"2024-12-17T13:12:12.992Z","0.0.10":"2025-01-13T13:10:53.218Z","0.0.11":"2025-01-13T15:29:52.257Z","0.0.12":"2025-02-07T09:52:33.601Z","0.0.13":"2025-02-07T19:57:45.081Z","0.0.14":"2025-02-12T16:06:32.999Z","0.0.15":"2025-02-12T17:20:27.176Z","0.0.16":"2025-02-12T18:00:14.396Z","0.0.17":"2025-02-13T11:34:21.498Z","0.0.18":"2025-02-14T18:30:09.229Z","0.0.19":"2025-02-26T18:38:00.488Z","0.0.20":"2025-05-16T10:19:49.088Z","0.0.21":"2025-06-03T15:01:41.935Z","0.0.22":"2025-06-03T15:25:44.582Z","0.0.23":"2025-06-11T11:07:03.071Z","0.0.24":"2025-06-11T14:21:58.403Z","0.0.25":"2025-06-12T15:15:51.179Z","0.0.26":"2025-06-12T16:57:54.712Z","0.0.27":"2025-06-19T14:17:35.184Z","0.0.28":"2025-07-01T19:20:43.080Z","0.0.29":"2025-10-14T07:29:54.777Z","0.0.30":"2025-11-13T17:17:21.146Z","0.0.31":"2025-11-14T13:41:23.219Z","0.0.32":"2025-11-14T14:35:13.893Z","0.0.33":"2025-11-25T08:24:37.571Z","0.0.34":"2025-12-03T12:21:25.047Z","0.0.35":"2026-02-07T17:40:02.718Z","0.0.36":"2026-03-02T21:38:04.599Z","0.1.0":"2026-03-03T17:26:04.934Z","0.1.1":"2026-03-05T11:40:25.695Z","0.1.2":"2026-03-11T11:04:05.058Z","0.1.3":"2026-03-25T07:20:03.831Z","0.1.4":"2026-03-25T07:41:00.445Z","0.1.5":"2026-03-25T07:50:50.756Z","0.1.6":"2026-03-25T07:57:49.824Z","0.1.7":"2026-03-27T11:26:10.514Z","1.0.8":"2026-03-27T11:31:12.496Z","1.0.9":"2026-04-30T15:17:56.213Z","1.0.10":"2026-04-30T15:26:55.089Z","1.0.11":"2026-05-07T10:02:57.230Z","1.0.12":"2026-06-18T11:16:23.733Z","1.0.13":"2026-06-29T14:23:31.717Z","1.0.14":"2026-06-29T17:33:24.037Z","1.0.15":"2026-07-01T11:01:52.813Z","1.0.16":"2026-07-08T09:27:34.772Z","1.0.17":"2026-07-27T09:58:30.463Z","1.0.18":"2026-07-28T08:31:16.031Z","1.0.19":"2026-07-30T14:41:34.364Z","1.0.20":"2026-07-30T15:36:42.940Z","1.0.21":"2026-07-30T16:14:15.111Z","1.0.22":"2026-07-30T16:37:58.326Z","1.0.23":"2026-07-31T15:19:41.287Z","1.0.24":"2026-08-03T15:43:44.098Z","1.0.25":"2026-08-03T17:38:10.755Z","1.0.26":"2026-08-10T13:27:41.482Z","1.0.27":"2026-09-01T08:41:50.963Z","1.1.0":"2026-09-03T09:17:25.872Z","1.2.0":"2026-09-14T13:20:57.550Z","1.2.1":"2026-09-28T09:31:41.533Z"},"author":"con terra GmbH","license":"Apache-2.0","description":"con terra vulnerability scan process","maintainers":[{"name":"jessebluemr","email":"m.reiprecht@conterra.de"},{"name":"schneiderlars","email":"info@schneiderlars.de"},{"name":"julkuh","email":"julkuh@googlemail.com"},{"name":"m-scherpi","email":"m.scherpinski@conterra.de"},{"name":"mbeckem_conterra","email":"m.beckemeyer@conterra.de"},{"name":"conterrade","email":"itservices@conterra.de"},{"name":"a.frank","email":"a.frank@conterra.de"},{"name":"conterra-product-engineering","email":"product-engineering-npm@conterra.de"}],"readme":"# ct-vuln-scan\n\nThe utility is a wrapper around the following tools:\n\n- [grype](https://github.com/anchore/grype) - Vulnerability scanner for container images and filesystems.\n- [trivy](https://github.com/aquasecurity/trivy) - Comprehensive and versatile security scanner.\n- [oss index](https://ossindex.sonatype.org/) - Free catalogue of open source components and scanning tools to help developers identify vulnerabilities.\n\nIt also supports the [OpenVex](https://github.com/openvex) specification for vulnerability status and justification.\n\nFor an architectural overview see [ARCHITECTURE.md](./ARCHITECTURE.md).\nFor build, test and contribution guidelines see [AGENTS.md](./AGENTS.md).\n\n- [Pre-Requisites](#pre-requisites)\n- [Installation](#installation)\n- [Configuration](#configuration)\n- [Usage - Scan](#usage---scan)\n    - [Environment variables](#environment-variables)\n    - [Output files](#output-files)\n    - [Azure DevOps Pipelines integration](#azure-devops-pipelines-integration)\n        - [Keeping the build green after auto-vex](#keeping-the-build-green-after-auto-vex)\n- [Usage - Add Vex](#usage---add-vex)\n- [Usage - Add Project](#usage---add-project)\n- [Usage - Remove Project](#usage---remove-project)\n    - [Remove project from vex files matching a vulnerability id](#remove-project-from-vex-files-matching-a-vulnerability-id)\n- [Usage - Add Project to Vex](#usage---add-project-to-vex)\n- [Usage - Simulate a release](#usage---simulate-a-release)\n- [Usage - HTML Report](#usage---html-report)\n- [Usage - Jira Report](#usage---jira-report)\n        - [Severity-change handling](#severity-change-handling)\n    - [Environment variables](#environment-variables-1)\n    - [Configuration - `jira-conf.json`](#configuration---jira-confjson)\n        - [Auto-close low-severity issues](#auto-close-low-severity-issues)\n            - [Auto-acknowledgement comments](#auto-acknowledgement-comments)\n            - [`issues[].projectOverrides` — per-project stricter thresholds](#issuesprojectoverrides--per-project-stricter-thresholds)\n    - [CLI](#cli)\n- [Usage - Auto VEX](#usage---auto-vex)\n    - [Configuration - `auto-vex-conf.json`](#configuration---auto-vex-confjson)\n        - [`projectOverrides` — per-project stricter thresholds](#projectoverrides--per-project-stricter-thresholds)\n            - [Glob patterns and exclusion](#glob-patterns-and-exclusion)\n    - [Usage](#usage)\n    - [Behaviour](#behaviour)\n- [Contributing](#contributing)\n\n\n## Pre-Requisites\n\nYou need to have `docker` and `node` (>= 20) installed on your machine.\n\n## Installation\n\nThe utility is published as an npm package and can be installed globally or locally.\n\n```sh\n# global\n$ npm install -g @conterra/vuln-scan\n\n# local\n$ npm install @conterra/vuln-scan\n```\n\nAfter installation the following commands are available:\n\n- `ct-vuln-scan` - Triggers the vulnerability scan.\n- `ct-vuln-add-vex` - Adds a new vex statement to a file, interactively or via flags.\n- `ct-vuln-add-project` - Adds a new project to the configuration file based on an existing project entry and adds it to all vex statements.\n- `ct-vuln-remove-project` - Removes a project from the configuration file and all vex statements (or only from vex statements matching a given vulnerability id).\n- `ct-vuln-add-project-to-vex` - Updates vex files to include a new project version. Already part of `ct-vuln-add-project`.\n- `ct-vuln-jira-report` - Reads a `scan-summary.json` and creates Jira issues for newly detected vulnerabilities.\n- `ct-vuln-auto-vex` - Auto-creates OpenVEX statements for newly detected vulnerabilities below a configurable severity threshold.\n- `ct-vuln-html-report` - Post-processes the scan output directory into a browsable report: `index.html` (project index with links to all output files and per-project report deep-links), `report.html` (cross-project CVE report) and `index.json` (data manifest). Served over HTTP.\n\n## Configuration\n\nCreate a `vuln-scan-conf.json` file in the working directory.\n\nMinimal configuration:\n\n```json\n{\n    \"$schema\": \"./node_modules/@conterra/vuln-scan/dist/schema/conf-schema.json\",\n    \"projects\": [\n        {\n            \"name\": \"mapapps\",\n            \"version\": \"4.18.2\",\n            \"purl\": \"pkg:maven/de.conterra.mapapps/ct-mapapps@4.18.2\",\n            \"sbomFile\": \"./input/sboms/mapapps-4.18.2.cdx.json\"\n        }\n    ]\n}\n```\n\nFull configuration with all available options and their defaults:\n\n```jsonc\n{\n    \"$schema\": \"./node_modules/@conterra/vuln-scan/dist/schema/conf-schema.json\",\n\n    // Action on newly detected vulnerabilities: \"fail\" | \"warn\" | \"ignore\"\n    // - \"fail\": exits with code 1\n    // - \"warn\": logs ##vso[task.complete result=SucceededWithIssues;]\n    // - \"ignore\": no effect\n    \"onNewVulnerabilities\": \"fail\",\n    // Action on vulnerabilities no longer detected, same values as above.\n    \"onNoLongerDetectedVulnerabilities\": \"ignore\",\n    // Maven repository to fetch sboms from.\n    // Set MAVEN_REPO_USER / MAVEN_REPO_PW for authentication.\n    \"mavenRepo\": \"https://repository.conterra.de/repository/maven-mirror-ct\",\n    // Scanners to use. `grype` and `trivy` run as Docker images (anchore/grype,\n    // aquasec/trivy). Pin a version (tag) with `<scanner>@<version>`, e.g.\n    // `trivy@0.69.3`. Pin the image by digest with `<scanner>@sha256:<64 hex>`,\n    // or combine both as `<scanner>:<version>@sha256:<64 hex>`. Digest pinning is\n    // intended to be maintained automatically by Renovate.\n    \"scanners\": [\"grype\", \"trivy\", \"ossindex\"],\n    // (optional) URLs of additional vex files to download.\n    \"vexUrls\": [\"https://example.com/my-vex.json\"],\n    // Directory containing vex files.\n    \"vexDir\": \"./input/vex\",\n    // Directory for scan output.\n    \"outDir\": \"./output\",\n    // Cache directory for grype/trivy databases.\n    \"cacheDir\": \"./cache\",\n    // If true, results for each project are written to a sub-directory of outDir.\n    \"createSubDirsForProject\": true,\n    // If true (default), OpenVEX files are written even when they contain no\n    // statements: the per-project scan output always gets an OpenVEX file, and a\n    // vex file that loses its last statement is kept on disk with an empty\n    // \"statements\" array instead of being deleted. If false, such documents are\n    // never written / the emptied file is deleted instead. Note that OpenVEX\n    // documents with an empty \"statements\" array do not conform to the upstream\n    // OpenVEX JSON Schema, which requires at least one statement.\n    \"writeEmptyOpenVexFiles\": true,\n    // Console output style:\n    //   \"BY_PROJECT_DETAILED\" (default) - group by project, print CVE details\n    //   \"BY_PROJECT\"                    - group by project, no CVE details\n    //   \"BY_CVE\"                        - group by CVE, no CVE details\n    //   \"BY_CVE_DETAILED\"               - group by CVE, print CVE details\n    \"consoleReport\": \"BY_PROJECT_DETAILED\",\n    \"projects\": [\n        {\n            \"name\": \"mapapps\",\n            \"version\": \"4.18.3\",\n            // identifier used to match vex statements\n            \"purl\": \"pkg:maven/de.conterra.mapapps/ct-mapapps@4.18.3\",\n            // maven coordinates used to download the sbom from mavenRepo\n            \"sbomMavenCoordinates\": \"de.conterra.mapapps:ct-mapapps-rollout:4.18.3:sbom\"\n        },\n        {\n            \"name\": \"mapapps\",\n            \"version\": \"4.18.2\",\n            \"purl\": \"pkg:maven/de.conterra.mapapps/ct-mapapps@4.18.2\",\n            // local sbom file\n            \"sbomFile\": \"./input/sboms/mapapps-4.18.2.cdx.json\",\n            // (optional) skip this project\n            \"enabled\": true,\n            // (optional) scan but never break the build\n            \"silent\": false,\n            // (optional) only break the build for severities >= this value.\n            // One of: \"CRITICAL\", \"HIGH\", \"MEDIUM\", \"LOW\", \"UNKNOWN\"\n            \"minimumSeverity\": \"HIGH\"\n        }\n    ]\n}\n```\n\n## Usage - Scan\n\nRun from the directory containing `vuln-scan-conf.json`:\n\n```sh\n# scan all projects\n$ ct-vuln-scan\n\n# scan all versions of one project\n$ ct-vuln-scan mapapps\n\n# scan a specific project version\n$ ct-vuln-scan mapapps 4.18.2\n```\n\nA typical working directory layout:\n\n```plain\n/vuln-scan/              # working directory\n├── vuln-scan-conf.json\n├── input/\n│   ├── sbom/            # sbom files\n│   └── vex/             # vex files\n└── output/              # aggregated scan results\n```\n\n### Environment variables\n\n```bash\n# (optional) maven repo authentication for sbom download\nMAVEN_REPO_USER=[username]\nMAVEN_REPO_PW=[password]\n\n# (optional) sonatype OSS Index authenticated API\nOSS_INDEX_API_USER=[username]\nOSS_INDEX_API_TOKEN=[token]\nOSS_INDEX_BASE_URL=[url]   # default: https://api.guide.sonatype.com (since 1.0.8)\n\n# (optional) authentication for vex files referenced via vexUrls\nVEX_URLS_USER=[username]\nVEX_URLS_PW=[password]\n\n# (optional) helps with the trivy DB GitHub rate limit\n# https://aquasecurity.github.io/trivy/v0.38/docs/references/troubleshooting/#github-rate-limiting\nTRIVY_GITHUB_TOKEN=[token]\n\n# (optional) verbose logging\nVERBOSE=true\n\n# (optional) if \"true\", a project's product-id is automatically removed\n# from vex statements covering vulnerabilities no longer detected for that project.\nAUTO_REMOVE_UNUSED_STATEMENTS=true\n```\n\nThese variables can also be defined in a `.env` file in the working directory.\n\n### Output files\n\nThree summary files are written directly into `outDir`:\n\n- `scan-summary.txt` - The console \"scan summary\" output as plain text.\n  New vulnerabilities are annotated with a VEX-lookup hint so it is clear that\n  \"new\" means \"no project-level VEX entry yet\":\n    - `(VEX entry missing)` - the VEX store contains a\n      statement for this CVE (for another product), but none that applies to\n      this project. Adding/importing a project-level entry will silence it.\n    - `(VEX file missing)` - the CVE has not been triaged anywhere in the\n      VEX store yet.\n- `scan-summary.json` - Machine-readable summary, for post-processing or downstream tools. Example (truncated):\n\n    ```json\n    {\n        \"errors\": [\n            {\n                \"project\": \"mapapps@4.18.2\",\n                \"error\": \"Failed to fetch sbom file ...\"\n            }\n        ],\n        \"vulnerabilities\": {\n            \"CVE-2025-48988\": {\n                \"id\": \"CVE-2025-48988\",\n                \"severity\": \"HIGH\",\n                \"title\": \"tomcat: Apache Tomcat DoS in multipart upload\",\n                \"description\": \"...\",\n                \"components\": [\"pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.41\"],\n                \"refs\": [\"https://avd.aquasec.com/nvd/cve-2025-48988\"]\n            }\n        },\n        \"vulnerabilityToProject\": {\n            \"CVE-2025-48988\": [\"smartfinder-sdi@2.7.1-SNAPSHOT\"]\n        },\n        \"projectToVulnerability\": {\n            \"smartfinder-sdi@2.7.1-SNAPSHOT\": [\"CVE-2025-48988\"]\n        },\n        \"noLongerDetectedVulnerabilities\": {\n            \"CVE-2023-52070\": [\"mapapps@4.19.3-SNAPSHOT\"]\n        }\n    }\n    ```\n\n- `index.json` / `index.html` / `report.html` - Written by\n  `ct-vuln-html-report`. `index.html` lists every scanned project with links to\n  its output files and per-project report deep-links; `report.html` is the\n  cross-project CVE report. Both load their data from `index.json` and must be\n  served over HTTP (see [Usage - HTML Report](#usage---html-report)).\n\n- `auto-vex-result.json` - Written by `ct-vuln-auto-vex` next to the scan\n  summary. It records which of the new vulnerabilities the run covered, so a\n  pipeline can decide the build result *after* post-processing (see\n  [Keeping the build green after auto-vex](#keeping-the-build-green-after-auto-vex)).\n  Example:\n\n    ```json\n    {\n        \"residualVulnIds\": [],\n        \"coveredVulnIds\": [\"CVE-2026-12143\", \"CVE-2026-13149\"],\n        \"partialVulnIds\": [],\n        \"created\": [\"CVE-2026-12143\", \"CVE-2026-13149\"],\n        \"revokedProducts\": 0,\n        \"errors\": []\n    }\n    ```\n\nFor each scanned project, raw scanner output, an aggregated JSON, a [SARIF](https://sarifweb.azurewebsites.net/) file (used by the Azure DevOps SARIF tab) and the matching OpenVEX statements are written to a `<project-name>-<project-version>/` sub-directory (when `createSubDirsForProject` is `true`). See [ARCHITECTURE.md §5](./ARCHITECTURE.md#5-output-folder-layout) for the full file layout.\n\n### Azure DevOps Pipelines integration\n\nPublish the output directory as build artifact `CodeAnalysisLogs`:\n\n```yaml\n- task: PublishBuildArtifacts@1\n  inputs:\n      PathtoPublish: \"output\"\n      ArtifactName: \"CodeAnalysisLogs\"\n```\n\nThe [SARIF SAST Scans Tab](https://marketplace.visualstudio.com/items?itemName=sariftools.scans) extension visualizes the `.sarif.json` files in the artifact.\n\nIf `onNewVulnerabilities` is set to `warn`, the pipeline will be marked as `SucceededWithIssues` when new vulnerabilities are found. With the default `fail`, the pipeline fails (exit code 1).\n\n#### Keeping the build green after auto-vex\n\nA pipeline that runs `ct-vuln-scan` → `ct-vuln-auto-vex` → `git commit` fixes most\nof its own findings: everything below the auto-VEX threshold receives a VEX\nstatement and is committed in the same run. If the scan is left to emit the\n`SucceededWithIssues` result itself, the run stays yellow forever — Azure DevOps\ncannot take a `task.complete` back, and the scan runs *before* auto-vex.\n\n`ct-vuln-scan` therefore reports facts only and knows nothing about any\npost-processing step. To keep such a run green, let the pipeline decide the\nresult **after** `ct-vuln-auto-vex`:\n\n1. Run the scan with `onNewVulnerabilities: \"ignore\"` so it does not flip the\n   build yellow on its own.\n2. After `ct-vuln-auto-vex`, read `output/auto-vex-result.json`. It lists the\n   vulnerabilities that survived post-processing:\n\n   | Field             | Meaning                                                                   |\n   | ----------------- | ------------------------------------------------------------------------- |\n   | `coveredVulnIds`  | covered for every affected project — will not re-surface next scan        |\n   | `partialVulnIds`  | a statement is written but at least one project stays uncovered            |\n   | `residualVulnIds` | not fully covered (partial + none) — what the next scan will still report |\n\n3. Emit the warning only when `residualVulnIds` is non-empty, e.g.:\n\n   ```bash\n   pnpm scan            # onNewVulnerabilities: \"ignore\" -> stays silent\n   pnpm auto-vex        # writes output/auto-vex-result.json\n   residual=$(jq '.residualVulnIds | length' output/auto-vex-result.json)\n   if [ \"$residual\" -gt 0 ]; then\n       echo \"##vso[task.logissue type=warning;]NEW_VULNERABILITIES_DETECTED\"\n       echo \"##vso[task.complete result=SucceededWithIssues;]\"\n   fi\n   ```\n\nThis keeps the scan and the post-processor fully decoupled: the pipeline (or the\nauto-vex step) owns the verdict, and the direction of knowledge only ever flows\nfrom post-processing to the scan's output — never the reverse.\n\nNotes:\n\n- The residual vulnerabilities remain visible in `scan-summary.json`, the SARIF\n  report and Jira regardless of the pipeline verdict.\n- No-longer-detected vulnerabilities that `AUTO_REMOVE_UNUSED_STATEMENTS` removes\n  in the same run can be treated the same way: the removal is already committed,\n  so the pipeline need not warn about them.\n\n\n## Usage - Add Vex\n\nExperimental maintenance workflow for recording a decision about whether a vulnerability affects a project.\n\n```sh\n$ ct-vuln-add-vex\n```\n\nWithout flags it prompts for all values. Pass `--cve` to skip all prompts and write without confirmation (e.g. for agents):\n\n```sh\n$ ct-vuln-add-vex --cve CVE-2026-84939 \\\n    --product servicemonitor@4.10.0 --product servicemonitor@5.0.0 \\\n    --status not_affected \\\n    --justification vulnerable_code_not_in_execute_path \\\n    --impact-statement \"Templates are rendered with Velocity, not FreeMarker.\" \\\n    [--action-statement …] [--status-notes …] [--dry-run] [--no-project-filter]\n```\n\nRun `ct-vuln-add-vex --help` for all options and the rules for each status.\n\nBoth modes create or update a `CVE-<id>.json` file in `vexDir`; an existing file gets the statement upserted and its `version` bumped, e.g.:\n\n```json\n{\n    \"@context\": \"https://openvex.dev/ns/v0.2.0\",\n    \"@id\": \"https://openvex.dev/docs/public/vex-fc763e6e...\",\n    \"author\": \"conterra\",\n    \"timestamp\": \"2024-10-01T18:54:23+02:00\",\n    \"last_updated\": \"2024-10-01T19:58:13+02:00\",\n    \"version\": 2,\n    \"statements\": [\n        {\n            \"vulnerability\": { \"name\": \"CVE-2023-52070\" },\n            \"timestamp\": \"2024-10-01T19:58:13+02:00\",\n            \"products\": [\n                { \"@id\": \"pkg:maven/de.conterra.mapapps/ct-mapapps@4.18.2\" },\n                { \"@id\": \"pkg:maven/de.conterra.mapapps/ct-mapapps@4.18.3\" }\n            ],\n            \"status\": \"not_affected\",\n            \"impact_statement\": \"<short rationale>\"\n        }\n    ]\n}\n```\n\nFor details see the [OpenVex spec](https://github.com/openvex/spec/blob/main/OPENVEX-SPEC.md).\n\nValid `status` values:\n\n| Status              | Description                                                                |\n| ------------------- | -------------------------------------------------------------------------- |\n| not_affected        | The product is known to be not affected by this vulnerability.             |\n| affected            | The product is known to be affected by this vulnerability.                 |\n| fixed               | The product contains a fix for this vulnerability.                         |\n| under_investigation | It is not yet known whether the product is affected; still being assessed. |\n\nValid `justification` values when `status` is `not_affected` (full text in the [VEX Status Justification PDF](https://www.cisa.gov/sites/default/files/publications/VEX_Status_Justification_Jun22.pdf)):\n\n| Justification                                     | Short description                                            |\n| ------------------------------------------------- | ------------------------------------------------------------ |\n| component_not_present                             | Vulnerable component is not present in the product.          |\n| vulnerable_code_not_present                       | Vulnerable code is excluded by configuration or build.       |\n| vulnerable_code_not_in_execute_path               | Vulnerable code is shipped but never called.                 |\n| vulnerable_code_cannot_be_controlled_by_adversary | Attacker cannot influence the vulnerable code path.          |\n| inline_mitigations_already_exist                  | Built-in, non-disable-able mitigations prevent exploitation. |\n\n## Usage - Add Project\n\nAdd a new project entry to the configuration and propagate it to vex statements:\n\n```sh\n$ ct-vuln-add-project <reference-name> <reference-version> <new-version>\n\n# example: clone mapapps@4.18.2-SNAPSHOT into a new mapapps@4.18.2 entry\n$ ct-vuln-add-project mapapps 4.18.2-SNAPSHOT 4.18.2\n```\n\nThe new entry inherits all options from the reference project, and its product-id is added to every vex statement that already references the reference project.\n\n## Usage - Remove Project\n\nRemove a project entry from the configuration and all matching vex statements:\n\n```sh\n$ ct-vuln-remove-project <name> <version>\n\n$ ct-vuln-remove-project mapapps 4.18.2-SNAPSHOT\n```\n\n### Remove project from vex files matching a vulnerability id\n\nUseful when a single vulnerability is no longer relevant for a project but the project itself remains:\n\n```sh\n$ ct-vuln-remove-project <name> <version> <vuln-id>\n\n$ ct-vuln-remove-project mapapps 4.18.2-SNAPSHOT CVE-2024-38820\n```\n\n## Usage - Add Project to Vex\n\nAdd a new project version to all vex statements that already reference an existing version. Already part of `ct-vuln-add-project`; useful when the configuration entry already exists.\n\n```sh\n$ ct-vuln-add-project-to-vex <existingPurl> <newPurl>\n\n$ ct-vuln-add-project-to-vex \\\n    pkg:maven/de.conterra.mapapps/ct-mapapps@4.19.0 \\\n    pkg:maven/de.conterra.mapapps/ct-mapapps@4.19.1\n```\n\n## Usage - Simulate a release\n\nCombine the project commands to simulate releasing `4.18.3` and preparing the next dev version `4.18.4-SNAPSHOT`:\n\n```sh\n$ ct-vuln-add-project mapapps 4.18.3-SNAPSHOT 4.18.3\n$ ct-vuln-remove-project mapapps 4.18.3-SNAPSHOT\n$ ct-vuln-add-project mapapps 4.18.3 4.18.4-SNAPSHOT\n```\n\n## Usage - HTML Report\n\n`ct-vuln-html-report` post-processes the scan output directory and writes three artefacts into it:\n\n- **`index.json`** - a machine-readable manifest listing every scanned project (including projects without vulnerabilities) and all generated output files (SBOM, aggregated JSON/SARIF, per-scanner JSON, OpenVEX).\n- **`index.html`** - a landing page listing every project with direct links to all of its output files, a per-project deep-link into the report (`report.html#project=<name@version>`, which auto-filters the report for that project) and a link to the full cross-project report.\n- **`report.html`** - the cross-project CVE report.\n\n```sh\n$ ct-vuln-html-report\n```\n\nThe output directory is read from the `outDir` setting in `vuln-scan-conf.json` (default `./output`), i.e. the same directory `ct-vuln-scan` wrote to. Project identity (name, version and purl) is likewise taken from `vuln-scan-conf.json` in the current working directory, which is therefore **required**. Using the configuration as the authoritative source keeps identities stable even for versions that contain a `-` (e.g. `1.6.3-SNAPSHOT`), which cannot be reconstructed reliably from output file names alone. A project is included when it was actually scanned in the run (i.e. its `*-scan-aggregate-results.json` exists); configured-but-disabled projects are skipped.\n\nBoth HTML pages load their data at runtime: `index.html` fetches `index.json`, and `report.html` fetches `index.json` plus each project's `*-scan-aggregate-results.json` in parallel and computes the cross-project view in the browser. Because browsers block `fetch()` for `file://` URLs, the output directory must be **served over HTTP** rather than opened directly from disk, e.g.:\n\n```sh\n$ npx serve output            # then open http://localhost:3000/index.html\n# or\n$ python -m http.server -d output\n```\n\nOpen `index.html` for the project index, or `report.html` for the full report. The report lets you:\n\n- see all CVEs of a project and their assessments (VEX statements),\n- filter by CVE (id, title, project or component) across all projects,\n- filter to a single project - either via the dropdown or by opening `report.html#project=<name@version>` (the selected project is kept in the URL hash so the view can be shared),\n- hide all CVEs that already have an assessment (\"Hide assessed CVEs\"),\n- click a CVE to quickly find every affected project (with its purl), its dependency tree and assessment.\n\nA CVE is shown as `assessed` when every affected project (respecting the active project filter) carries a VEX statement; otherwise it is `open`.\n\n## Usage - Jira Report\n\n`ct-vuln-jira-report` reads `scan-summary.json` produced by `ct-vuln-scan` and creates Jira issues for new vulnerabilities. For each vulnerability the tool: produced by `ct-vuln-scan` and creates Jira issues for new vulnerabilities. For each vulnerability the tool:\n\n1. Checks (via JQL) whether an issue with the same vulnerability ID already exists in the target Jira project.\n2. If not, creates a new issue with a structured description (CVE details, affected artefacts and products, placeholders for assessment and remediation) and tags every currently-affected scan project as a `proj:<name>_v<version>` label on the issue.\n3. If an issue already exists, the project tags are compared with the current scan result. For every newly-affected project the issue is updated:\n    - the missing `proj:` label is added,\n    - a comment is posted listing only the additional projects (without re-emitting the CVE details),\n    - and if the issue is currently in status category `done` it is transitioned to status `Open` and re-added to the active sprint of its routed scrum board (when one is configured).\n\nProject tags use the form `proj:<name>_v<version>` (the `@` separator is replaced with `_v` to keep labels JQL-friendly). On the very first run after upgrading, existing Jira issues will not yet carry these labels, so every currently-matching project will be added at once and a single follow-up comment will be posted.\n\nWhen an issue is updated because new projects became affected, any `addToBoard` `issueLabels` that *would now match* (per the same first-sprint-wins / Kanban-aggregate rules used at creation) are added to the issue retroactively. Labels already present on the issue are not re-emitted. Sprint placement is **not** changed for issues that are still in progress; only when a closed issue is re-opened is it placed in the active sprint of whichever scrum entry currently matches first — which may differ from the original sprint if the routing config has been edited since the issue was created.\n\n#### Severity-change handling\n\nWhen the live severity reported for a CVE differs from the severity encoded in the existing issue's title (typically because the upstream feed rerated it, or because an auto-VEX statement was just invalidated and the CVE resurfaced), the reporter will:\n\n- update the issue summary to the new `[SEVERITY] CVE-ID: …` form,\n- post a short German comment explaining the change,\n- re-open the issue (and re-add to the active sprint) **if** it is currently closed and the new severity is **not** below `autoCloseBelowSeverity`. Closed sub-threshold issues stay closed but still get retitled and commented.\n\nIssues whose summary was hand-edited and no longer matches the `[SEVERITY] CVE-ID` shape are silently skipped for severity-change detection.\n\n### Environment variables\n\n```bash\nJIRA_USER=user@example.com   # Jira account e-mail\nJIRA_API_TOKEN=<token>       # https://id.atlassian.com/manage-profile/security/api-tokens\n```\n\nThese can also be set in a `.env` file in the working directory.\n\n### Configuration - `jira-conf.json`\n\n```json\n{\n    \"$schema\": \"./node_modules/@conterra/vuln-scan/dist/schema/jira-config-schema.json\",\n    \"jiraUrl\": \"https://myorg.atlassian.net\",\n    \"issues\": [\n        {\n            \"jiraProject\": \"PLATFORM\",\n            \"issueType\": \"CVE\",\n            \"issueLabels\": [\"security\"],\n            \"addToBoard\": [\n                {\n                    \"sprintBoardId\": 10,\n                    \"issueLabels\": [\"team-a\"],\n                    \"matchProjects\": [\"mapapps@*\"]\n                },\n                {\n                    \"issueLabels\": [\"team-b\"],\n                    \"matchProjects\": [\"smartfinder@*\"]\n                }\n            ],\n            \"reportProjects\": [\"mapapps@*\", \"smartfinder@4.*\"]\n        },\n        {\n            \"jiraProject\": \"OTHER\",\n            \"issueType\": \"Bug\",\n            \"reportProjects\": [\"*\"]\n        }\n    ]\n}\n```\n\n| Field                             | Required | Description                                                                                                                                        |\n| --------------------------------- | -------- | -------------------------------------------------------------------------------------------------------------------------------------------------- |\n| `jiraUrl`                         | yes      | Base URL of the Jira instance.                                                                                                                     |\n| `issues`                          | yes      | Routing rules. Each rule is evaluated independently, so a vulnerability can be reported to multiple projects.                                      |\n| `issues[].jiraProject`            | yes      | Jira project key, e.g. `PLATFORM`.                                                                                                                 |\n| `issues[].issueType`              | yes      | Jira issue type, e.g. `Bug`, `CVE`.                                                                                                                |\n| `issues[].reportProjects`         | yes      | Glob patterns (`*` wildcard) matched against scan project identifiers (`name@version`).                                                            |\n| `issues[].issueLabels`            | no       | Labels added to every issue created by this rule, merged with labels from matching `addToBoard` entries.                                           |\n| `issues[].addToBoard`             | no       | Per-board routing rules; see below.                                                                                                                |\n| `addToBoard[].sprintBoardId`      | no       | Scrum board id. If set, the issue is assigned to the board's active sprint via `customfield_10020`.                                                |\n| `addToBoard[].issueLabels`        | no       | Labels contributed by this entry.                                                                                                                  |\n| `addToBoard[].matchProjects`      | no       | Glob patterns to activate this entry. Defaults to `[\"*\"]`.                                                                                         |\n| `autoCloseBelowSeverity`          | no       | Default auto-close threshold inherited by every `issues[]` entry that does not override it. One of `UNKNOWN`, `LOW`, `MEDIUM`, `HIGH`, `CRITICAL`. |\n| `issues[].autoCloseBelowSeverity` | no       | Per-rule override of the top-level threshold.                                                                                                      |\n| `issues[].projectOverrides`       | no       | Per-project overrides of this rule's `autoCloseBelowSeverity`. See below.                                                                          |\n\n`addToBoard` resolution: only entries whose `matchProjects` cover the vulnerability's affected scan projects are considered. The **first** matching scrum entry (with `sprintBoardId`) claims the sprint; further scrum entries are ignored. Kanban entries (no `sprintBoardId`) all contribute their labels.\n\n#### Auto-close low-severity issues\n\nWhen `autoCloseBelowSeverity` (top-level or per-issue rule) is set, newly-created issues whose vulnerability severity is **strictly below** the threshold are immediately transitioned to a status whose Jira status category is `done` (the first such transition exposed by the workflow is used, regardless of the status's display name and locale). The board/sprint assignment, labels and comment described above still happen *before* the transition, so the issue is reachable on the configured board even though it starts out closed. A short German-language comment is added explaining the auto-closure (see below).\n\nFor *existing* issues, the threshold only suppresses re-opening: when a closed sub-threshold issue gains a newly-affected project, the project label and \"Zusätzlich gemeldet für\" comment are added as usual, but the issue is **not** re-opened (and never re-closed). Issues at or above the threshold keep the existing re-open + re-add-to-active-sprint behavior.\n\nThreshold semantics mirror `ct-vuln-auto-vex`: with `\"HIGH\"`, severities `MEDIUM`, `LOW` and `UNKNOWN` are auto-closed, while `HIGH` and `CRITICAL` stay open.\n\n##### Auto-acknowledgement comments\n\nThe Jira reporter posts one of three German comment shapes depending on the per-project resolver outcome (see `projectOverrides` below for the bucket definitions):\n\n- **Auto-close comment** — posted after a successful close transition. Lists every project that was auto-acknowledged together with its effective threshold:\n\n  ```\n  Automatisch geschlossen: Schwere MEDIUM liegt unterhalb der konfigurierten Auto-Close-Schwelle.\n  Auto-akzeptiert für:\n   - mapapps@4.20.0 (Schwelle HIGH)\n   - other-tool@1.0.0 (Schwelle CRITICAL)\n  ```\n\n- **Partial-ack comment** (`Teilweise auto-akzeptiert`) — posted on a newly-created issue that stays open because the issue's matching projects split across both buckets. Names which projects are implicitly auto-acknowledged and which still require manual evaluation:\n\n  ```\n  Teilweise auto-akzeptiert. Schwere HIGH.\n  Auto-akzeptiert für:\n   - other-tool@1.0.0 (Schwelle CRITICAL)\n  Manuelle Bewertung erforderlich für:\n   - mapapps@4.20.0 (Schwelle HIGH)\n  ```\n\n  The comment is suppressed when all matching projects fall in a single bucket (the auto-close path covers all-auto-acknowledged; the all-manual case posts nothing).\n\n- **Reopen-reason append** — when a closed sub-threshold issue is re-opened because newly-affected projects raise the bar, the consolidated reopen-reason comment is extended with the same `Auto-akzeptiert für` / `Manuelle Bewertung erforderlich für` sections (scoped to the newly added projects). The reporter does not post a second comment for the bucket split.\n\nProjects that have no effective threshold configured (no `projectOverrides` match, no rule-level / top-level `autoCloseBelowSeverity`) are omitted from these listings — they neither block nor enable the auto-close decision in any new way.\n\n##### `issues[].projectOverrides` — per-project stricter thresholds\n\n`projectOverrides` mirrors the [`projectOverrides`](#projectoverrides--per-project-stricter-thresholds) block of `auto-vex-conf.json`, so the same LTSS / regular-release-line policy can be expressed in both tools. Each entry binds one severity threshold to a list of glob patterns matched against the `name@version` project identifier (same shape used in `vuln-scan-conf.json#projects[]` and in Jira `reportProjects`). Only `*` wildcards are supported, plus an optional `!` prefix to exclude a pattern (see [Glob patterns and exclusion](#glob-patterns-and-exclusion)).\n\nFor every vulnerability covered by a rule:\n\n1. Each `matchingProject` (an affected project that matches the rule's `reportProjects`) resolves to an effective threshold — the strictest (lowest) matching `projectOverrides` entry, falling back to `issues[].autoCloseBelowSeverity` and finally the top-level `autoCloseBelowSeverity`.\n2. The issue's threshold is the **strictest across all matchingProjects**. A new issue is therefore only auto-closed when the vulnerability is strictly below the threshold for *every* matching project; any project that still requires deeper analysis keeps the issue open.\n3. Existing closed sub-threshold issues are never re-opened by `projectOverrides` — but raising the bar (e.g. via an LTSS override) above the live severity *does* re-open them, just as if `autoCloseBelowSeverity` itself had been raised.\n\nExample mirroring the matching `auto-vex-conf.json`:\n\n```jsonc\n{\n    \"jiraProject\": \"PLATFORM\",\n    \"issueType\": \"CVE\",\n    \"reportProjects\": [\"*\"],\n    \"autoCloseBelowSeverity\": \"CRITICAL\",\n    \"projectOverrides\": [\n        {\n            \"projects\": [\"mapapps@4.20.*\", \"mapapps-sdi@5.8.*\"],\n            \"autoCloseBelowSeverity\": \"HIGH\",\n            \"comment\": \"LTSS means to analyze 'HIGH and CRITICAL'\"\n        }\n    ]\n}\n```\n\nWith this rule, a `MEDIUM` CVE that affects only `mapapps@4.20.0` is auto-closed (below `HIGH`); the same CVE bleeding into a non-LTSS project keeps the issue open if its effective threshold treats `MEDIUM` as actionable.\n\n### CLI\n\n```\nOptions:\n  -c, --jira-config <path>   Path to jira-conf.json (default: ./jira-conf.json)\n  -s, --summary <path>       Path to scan-summary.json (default: ./output/scan-summary.json)\n      --dry-run              Print what would be created without calling Jira\n  -h, --help                 Show help\n```\n\nExamples:\n\n```sh\n$ ct-vuln-jira-report\n$ ct-vuln-jira-report --jira-config ./config/jira-conf.json --summary ./output/scan-summary.json\n$ ct-vuln-jira-report --dry-run\n```\n\n## Usage - Auto VEX\n\n`ct-vuln-auto-vex` is a post-processor for `ct-vuln-scan`. It auto-creates OpenVEX statements for newly detected vulnerabilities whose severity is **strictly below** a configurable threshold, reducing manual triage noise for low-impact CVEs.\n\nGenerated files are written to `<vexDir>/<subDir>/<CVE-ID>.json` and are picked up automatically by the next scan run (the vex store recurses into sub-directories). Manual VEX files in `vexDir` always take precedence: any existing statement covering a CVE suppresses it from the \"new vulnerabilities\" list before this tool runs.\n\n### Configuration - `auto-vex-conf.json`\n\nPlace this file next to `vuln-scan-conf.json`.\n\n```json\n{\n    \"$schema\": \"./node_modules/@conterra/vuln-scan/dist/schema/auto-vex-config.schema.json\",\n    \"impactStatement\": \"Auto-acknowledged: no evidence of exploitability in our deployment context.\",\n    \"maxSeverity\": \"HIGH\",\n    \"author\": \"conterra\",\n    \"subDir\": \"auto\"\n}\n```\n\n| Field              | Required | Default      | Description                                                                                                                                                                                |\n| ------------------ | -------- | ------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |\n| `impactStatement`  | yes      | -            | `impact_statement` written into every auto-generated VEX statement.                                                                                                                        |\n| `maxSeverity`      | no       | `\"HIGH\"`     | Exclusive threshold; CVEs strictly below this severity get a statement. One of `UNKNOWN`, `LOW`, `MEDIUM`, `HIGH`, `CRITICAL`. With the default, `MEDIUM` is auto-vexed but `HIGH` is not. |\n| `author`           | no       | `\"conterra\"` | `author` field of the OpenVEX document.                                                                                                                                                    |\n| `subDir`           | no       | `\"auto\"`     | Sub-directory of `vexDir` for generated files.                                                                                                                                             |\n| `projectOverrides` | no       | `[]`         | Per-project stricter thresholds. See below.                                                                                                                                                |\n\n#### `projectOverrides` — per-project stricter thresholds\n\nBy default the global `maxSeverity` applies uniformly. `projectOverrides` lets you raise the bar for selected projects so they require manual review at lower severities. Each entry binds one severity threshold to a list of glob patterns matched against the `name@version` project identifier (same shape used in `vuln-scan-conf.json#projects[]` and in Jira `reportProjects`). Only `*` wildcards are supported, plus an optional `!` prefix to exclude a pattern (see [Glob patterns and exclusion](#glob-patterns-and-exclusion)). If several entries match the same project, the strictest (lowest) `maxSeverity` wins.\n\n```json\n{\n    \"impactStatement\": \"Auto-acknowledged: no evidence of exploitability.\",\n    \"maxSeverity\": \"CRITICAL\",\n    \"projectOverrides\": [\n        {\n            \"projects\": [\"mapapps@4.20.*\"],\n            \"maxSeverity\": \"HIGH\",\n            \"comment\": \"Stricter review for the upcoming release line.\"\n        }\n    ]\n}\n```\n\nWith the example above, all projects auto-VEX everything below `CRITICAL`, but for `mapapps@4.20.x` only severities below `HIGH` are auto-VEXed — `HIGH` and `CRITICAL` keep reaching manual triage (and the Jira reporter, since they remain in `scan-summary.json`).\n\nWhen a single CVE is associated with **both** a \"strict\" and a \"lax\" project, the generated statement covers only the lax projects' PURLs. The strict project's PURL is left out, so the CVE re-surfaces for that project on the next scan and flows into Jira normally. Adding a new (or tighter) override on a subsequent run invalidates any pre-existing auto-VEX product whose owning project now resolves to a stricter effective threshold — even if the live severity itself hasn't changed.\n\n##### Glob patterns and exclusion\n\nEvery `projects` / `reportProjects` / `matchProjects` list in this project uses the same simple glob dialect: `*` matches any sequence of characters, and everything else is matched literally. There is no character-class or single-character wildcard support.\n\nA pattern prefixed with `!` **excludes** matching project identifiers instead of including them. A list matches a given project id only if:\n\n1. the id matches **at least one non-negated (\"positive\") pattern**, and\n2. the id does **not** match any negated (`!`-prefixed) pattern.\n\nA list containing only negated patterns never matches anything — there is no implicit `*` positive pattern, so you must pair a negation with at least one positive pattern (often `\"*\"` itself).\n\nThis makes it possible to express \"everything in a range except a specific exception\", which a plain include-only glob cannot do (e.g. `4.20.*` on its own also matches `4.20.4-SNAPSHOT`, since `*` matches the `-SNAPSHOT` suffix too). For example, to apply a stricter `HIGH` threshold to every `mapapps@4.20.x` release but leave `-SNAPSHOT` builds at the global default:\n\n```json\n{\n    \"maxSeverity\": \"CRITICAL\",\n    \"projectOverrides\": [\n        {\n            \"projects\": [\"mapapps@4.20.*\", \"!mapapps@4.20.*-SNAPSHOT\"],\n            \"maxSeverity\": \"HIGH\",\n            \"comment\": \"LTSS release line, excluding in-development snapshots\"\n        }\n    ]\n}\n```\n\n`mapapps@4.20.4` matches the positive pattern and no negated pattern → the `HIGH` override applies. `mapapps@4.20.4-SNAPSHOT` matches the positive pattern but is excluded by the negated pattern → this override does not match it at all, so it falls back to the top-level `maxSeverity` (`CRITICAL` here). If you want the snapshot to resolve to a threshold other than the global default, add a second, non-overlapping override for it (e.g. `\"projects\": [\"mapapps@4.20.*-SNAPSHOT\"]`).\n\n\n### Usage\n\n```bash\n# defaults: ./auto-vex-conf.json + ./output/scan-summary.json + vexDir from vuln-scan-conf.json\n$ ct-vuln-auto-vex\n\n# custom paths\n$ ct-vuln-auto-vex --auto-vex-config ./config/auto-vex-conf.json --summary ./output/scan-summary.json\n\n# preview without writing files\n$ ct-vuln-auto-vex --dry-run\n\n# one-off: backfill the auto_vex_max_severity marker into pre-marker files\n$ ct-vuln-auto-vex --write-missing-marker\n```\n\n### Behaviour\n\n- Only entries from `summary.vulnerabilities` are processed; this map already contains only newly detected CVEs, so previously declared vulnerabilities are never re-processed.\n- Each generated statement records the authoritative severity threshold via `status_notes: \"auto_vex_max_severity=<threshold>\"`, where `<threshold>` is the effective per-project threshold for the PURLs in that specific statement (the strictest matching `projectOverrides` entry, or `maxSeverity` when none matches). When a single CVE affects multiple projects whose effective thresholds differ, one statement is emitted per threshold bucket so the marker stays accurate per PURL. The marker is parsed by the scanner and the auto-vex tool itself on subsequent runs.\n- **Severity-escalation invalidation:** on every run, all statements under `<vexDir>/<subDir>` are inspected. For each product on each statement, the effective threshold is the strictest of (a) the recorded `auto_vex_max_severity` marker (or the current `maxSeverity` for legacy statements without a marker) and (b) the per-project effective threshold from `projectOverrides`. If the live severity is no longer strictly below that threshold, the product is removed (and, if no products remain, the file is kept on disk with an empty `statements` array, or deleted, depending on `writeEmptyOpenVexFiles` in `vuln-scan-conf.json`). This means adding or tightening a `projectOverrides` entry invalidates pre-existing auto-VEX products for the matched projects on the next run, even when the live severity hasn't changed.\n- During the next scan, the matcher in `VexStore` also skips auto VEX statements whose recorded threshold is exceeded — so an escalated CVE re-surfaces on the same run that detects the escalation, even before the next `ct-vuln-auto-vex` cleanup. Manual VEX statements (no marker) are unaffected by both checks.\n- `--write-missing-marker` is a one-off migration mode: it stamps `auto_vex_max_severity=<maxSeverity>` into every statement under `<vexDir>/<subDir>` that lacks any `status_notes`. Existing markers are preserved; unrelated manual notes are left alone (with a warning). The invalidation pass and statement creation are skipped in this mode; combine with `--dry-run` to preview.\n- If `<vexDir>/<subDir>/<CVE-ID>.json` already exists, the new statement is **appended** (document version is bumped). Manual edits in the same file are preserved.\n- The generated statement uses `status: \"not_affected\"` and the configured `impactStatement`. No `justification` is set.\n- Affected scan project identifiers (`name@version`) are used as the product `@id`, matching what `VexStore` expects when populated from the scan summary.\n\n## Contributing\n\nSee [AGENTS.md](./AGENTS.md) for toolchain, build, lint and test conventions.\n","readmeFilename":""}