Bump the development group with 2 updates by dependabot[bot] · Pull Request #282 · KMI-IRM/wowbe

dependabot · 2026-11-01T01:24:56Z

Bumps the development group with 2 updates: eslint-plugin-vue and typescript-eslint.

Updates eslint-plugin-vue from 10.11.1 to 10.12.0

Release notes

Sourced from eslint-plugin-vue's releases.

v10.12.0

New rules

Added new vue/no-content-outside-block rule (#3119)

Added new vue/no-define-model-default rule (#3146)

Added new vue/no-props-shadow rule (#3118)

New rule options

Added required option to vue/block-lang to report components that omit a required block entirely (#3125)

Added ignoreMixins option to vue/require-explicit-emits rule (#3141)

Fixed false negatives (may result in more lint issues)

Added support for refs detected by type information, such as refs returned from composables, to vue/no-ref-as-operand rule (#3144)

Fixed vue/no-dupe-keys not reporting defineModel() names that collide with a prop, another model, or a <script setup> variable (#3163)

Fixed vue/no-dupe-keys not reporting <script setup> variables that shadow a prop while aliasing a different one, such as const foo = toRef(props, 'bar') (#3124)

Fixed vue/no-multi-spaces not reporting multiple spaces in the tags of some top-level blocks, e.g. <script setup> (#3162)

Fixed vue/no-ref-as-operand and vue/no-ref-object-reactivity-loss to also check refs created with useTemplateRef() (#3154)

Fixed vue/no-unused-properties not reporting unused non-props properties in components that use $props as a whole (e.g. v-bind="$props") (#3161)

Fixed vue/padding-lines-in-component-definition to check every pair of adjacent properties, not only the first, when withinOption or withinEach is not set (#3155)

Fixed vue/require-default-prop, vue/no-boolean-default, vue/no-required-prop-with-default and vue/require-valid-default-prop not handling defaults that are passed to withDefaults() by reference or spread instead of an inline object literal (#3114)

Fixed false positives (may result in fewer lint issues)

Changed vue/singleline-html-element-content-newline and vue/multiline-html-element-content-newline rules to ignore router-link and nuxt-link elements by default (#3165)

Fixed vue/no-undef-properties false positives for properties returned via ...toRefs(reactive({ ... })) from setup() (#3134)

Fixed vue/require-typed-ref false positives when an explicit type annotation already applies to the ref() call (#3123)

Fixed vue/v-if-else-key false positive for components with a bound :key (#3150)

Other changes

Removed Reactivity Transform support from vue/no-ref-object-reactivity-loss, since the Reactivity Transform proposal was dropped from Vue (#3126)

Changed vue/html-self-closing to treat Vue's special <slot> and \<template> elements as components (html.component option) instead of normal HTML elements (#3164)

Changed vue/attributes-order rule to provide a suggestion instead of an autofix when the fix would move a binding across v-bind="object" (#3145)

Improved performance of vue/no-reserved-component-names by no longer rebuilding its reserved name sets for every file (#3147)

Changelog

Sourced from eslint-plugin-vue's changelog.

10.12.0

New rules

Added new vue/no-content-outside-block rule (#3119)

Added new vue/no-define-model-default rule (#3146)

Added new vue/no-props-shadow rule (#3118)

New rule options

Added required option to vue/block-lang to report components that omit a required block entirely (#3125)

Added ignoreMixins option to vue/require-explicit-emits rule (#3141)

Fixed false negatives (may result in more lint issues)

Added support for refs detected by type information, such as refs returned from composables, to vue/no-ref-as-operand rule (#3144)

Fixed vue/no-dupe-keys not reporting defineModel() names that collide with a prop, another model, or a <script setup> variable (#3163)

Fixed vue/no-dupe-keys not reporting <script setup> variables that shadow a prop while aliasing a different one, such as const foo = toRef(props, 'bar') (#3124)

Fixed vue/no-multi-spaces not reporting multiple spaces in the tags of some top-level blocks, e.g. <script setup> (#3162)

Fixed vue/no-ref-as-operand and vue/no-ref-object-reactivity-loss to also check refs created with useTemplateRef() (#3154)

Fixed vue/no-unused-properties not reporting unused non-props properties in components that use $props as a whole (e.g. v-bind="$props") (#3161)

Fixed vue/padding-lines-in-component-definition to check every pair of adjacent properties, not only the first, when withinOption or withinEach is not set (#3155)

Fixed vue/require-default-prop, vue/no-boolean-default, vue/no-required-prop-with-default and vue/require-valid-default-prop not handling defaults that are passed to withDefaults() by reference or spread instead of an inline object literal (#3114)

Fixed false positives (may result in fewer lint issues)

Changed vue/singleline-html-element-content-newline and vue/multiline-html-element-content-newline rules to ignore router-link and nuxt-link elements by default (#3165)

Fixed vue/no-undef-properties false positives for properties returned via ...toRefs(reactive({ ... })) from setup() (#3134)

Fixed vue/require-typed-ref false positives when an explicit type annotation already applies to the ref() call (#3123)

Fixed vue/v-if-else-key false positive for components with a bound :key (#3150)

Other changes

Removed Reactivity Transform support from vue/no-ref-object-reactivity-loss, since the Reactivity Transform proposal was dropped from Vue (#3126)

Changed vue/html-self-closing to treat Vue's special <slot> and \<template> elements as components (html.component option) instead of normal HTML elements (#3164)

Changed vue/attributes-order rule to provide a suggestion instead of an autofix when the fix would move a binding across v-bind="object" (#3145)

Improved performance of vue/no-reserved-component-names by no longer rebuilding its reserved name sets for every file (#3147)

Commits

f2a0cb5 Version Packages (#3153)
9814050 fix(no-dupe-keys): detect defineModel() name collisions (#3163)
1741d59 fix(no-multi-spaces): check tags of all top-level blocks (#3162)
d743582 fix(no-unused-properties): report unused non-props along $props (#3161)
d2a1f76 fix(padding-lines-in-component-definition): check every property pair when `w...
2a7ad86 fix: recognize useTemplateRef() (#3154)
515614e fix(attributes-order): change unsafe autofix to suggestion (#3145)
9175cc5 feat: remove Reactivity Transform support (#3126)
f115fd6 refactor: migrate block-lang to TypeScript (#3209)
30a2a53 refactor: migrate class name and valid-next-tick rules to TypeScript (#3202)
Additional commits viewable in compare view

Updates typescript-eslint from 8.72.0 to 8.72.1

Release notes

Sourced from typescript-eslint's releases.

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

eslint-plugin: [no-unnecessary-condition] false positives on unresolved conditional types (#13062)

eslint-plugin: [no-unnecessary-type-assertion] bound recursive type traversal instead of catching stack overflows (#13039)

typescript-estree: use one Program per tsconfig for the project service in single-run mode (#12988)

❤️ Thank You

Evyatar Daud @StyleShit

Josh Ghoulberg 👻

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.72.1 (2026-10-26)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

4ad6b75 chore(release): publish 8.72.1
7757694 chore: cleanup typecheck & build and fix race condition (#13071)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the development group with 2 updates: [eslint-plugin-vue](https://github.com/vuejs/eslint-plugin-vue) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint). Updates `eslint-plugin-vue` from 10.11.1 to 10.12.0 - [Release notes](https://github.com/vuejs/eslint-plugin-vue/releases) - [Changelog](https://github.com/vuejs/eslint-plugin-vue/blob/master/CHANGELOG.md) - [Commits](vuejs/eslint-plugin-vue@v10.11.1...v10.12.0) Updates `typescript-eslint` from 8.72.0 to 8.72.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.72.1/packages/typescript-eslint) --- updated-dependencies: - dependency-name: eslint-plugin-vue dependency-version: 10.12.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development - dependency-name: typescript-eslint dependency-version: 8.72.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-11-01T01:25:09Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Scorecard details

Package

Version

Score

Details

npm/@typescript-eslint/eslint-plugin

8.72.1

🟢 6.8

Details

Check	Score	Reason
Code-Review	🟢 7	Found 10/14 approved changesets -- score normalized to 7
Maintained	🟢 10	30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 10	security policy file detected
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Fuzzing	⚠️ 0	project is not fuzzed
SAST	🟢 5	SAST tool is not run on all commits -- score normalized to 5

npm/@typescript-eslint/parser

8.72.1

🟢 6.8

Details

Check	Score	Reason
Code-Review	🟢 7	Found 10/14 approved changesets -- score normalized to 7
Maintained	🟢 10	30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 10	security policy file detected
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Fuzzing	⚠️ 0	project is not fuzzed
SAST	🟢 5	SAST tool is not run on all commits -- score normalized to 5

npm/@typescript-eslint/project-service

8.72.1

🟢 6.8

Details

Check	Score	Reason
Code-Review	🟢 7	Found 10/14 approved changesets -- score normalized to 7
Maintained	🟢 10	30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 10	security policy file detected
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Fuzzing	⚠️ 0	project is not fuzzed
SAST	🟢 5	SAST tool is not run on all commits -- score normalized to 5

npm/@typescript-eslint/scope-manager

8.72.1

🟢 6.8

Details

Check	Score	Reason
Code-Review	🟢 7	Found 10/14 approved changesets -- score normalized to 7
Maintained	🟢 10	30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 10	security policy file detected
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Fuzzing	⚠️ 0	project is not fuzzed
SAST	🟢 5	SAST tool is not run on all commits -- score normalized to 5

npm/@typescript-eslint/tsconfig-utils

8.72.1

🟢 6.8

Details

Check	Score	Reason
Code-Review	🟢 7	Found 10/14 approved changesets -- score normalized to 7
Maintained	🟢 10	30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 10	security policy file detected
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Fuzzing	⚠️ 0	project is not fuzzed
SAST	🟢 5	SAST tool is not run on all commits -- score normalized to 5

npm/@typescript-eslint/type-utils

8.72.1

🟢 6.8

Details

Check	Score	Reason
Code-Review	🟢 7	Found 10/14 approved changesets -- score normalized to 7
Maintained	🟢 10	30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 10	security policy file detected
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Fuzzing	⚠️ 0	project is not fuzzed
SAST	🟢 5	SAST tool is not run on all commits -- score normalized to 5

npm/@typescript-eslint/types

8.72.1

🟢 6.8

Details

Check	Score	Reason
Code-Review	🟢 7	Found 10/14 approved changesets -- score normalized to 7
Maintained	🟢 10	30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 10	security policy file detected
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Fuzzing	⚠️ 0	project is not fuzzed
SAST	🟢 5	SAST tool is not run on all commits -- score normalized to 5

npm/@typescript-eslint/typescript-estree

8.72.1

🟢 6.8

Details

Check	Score	Reason
Code-Review	🟢 7	Found 10/14 approved changesets -- score normalized to 7
Maintained	🟢 10	30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 10	security policy file detected
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Fuzzing	⚠️ 0	project is not fuzzed
SAST	🟢 5	SAST tool is not run on all commits -- score normalized to 5

npm/@typescript-eslint/utils

8.72.1

🟢 6.8

Details

Check	Score	Reason
Code-Review	🟢 7	Found 10/14 approved changesets -- score normalized to 7
Maintained	🟢 10	30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 10	security policy file detected
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Fuzzing	⚠️ 0	project is not fuzzed
SAST	🟢 5	SAST tool is not run on all commits -- score normalized to 5

npm/@typescript-eslint/visitor-keys

8.72.1

🟢 6.8

Details

Check	Score	Reason
Code-Review	🟢 7	Found 10/14 approved changesets -- score normalized to 7
Maintained	🟢 10	30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 10	security policy file detected
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Fuzzing	⚠️ 0	project is not fuzzed
SAST	🟢 5	SAST tool is not run on all commits -- score normalized to 5

npm/eslint-plugin-vue

10.12.0

🟢 5.2

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Code-Review	🟢 9	Found 27/29 approved changesets -- score normalized to 9
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 3	dependency not pinned by hash detected -- score normalized to 3
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Security-Policy	⚠️ 0	security policy file not detected
License	🟢 10	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	🟢 3	branch protection is not maximal on development and all release branches
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/ignore

7.0.14

🟢 3.9

Details

Check	Score	Reason
Binary-Artifacts	🟢 10	no binaries found in the repo
Code-Review	⚠️ 1	Found 4/26 approved changesets -- score normalized to 1
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Maintained	🟢 10	30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Security-Policy	⚠️ 0	security policy file not detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 9	license file detected
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
Signed-Releases	⚠️ -1	no releases found
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/typescript-eslint

8.72.1

🟢 6.8

Details

Check	Score	Reason
Code-Review	🟢 7	Found 10/14 approved changesets -- score normalized to 7
Maintained	🟢 10	30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 10	security policy file detected
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Fuzzing	⚠️ 0	project is not fuzzed
SAST	🟢 5	SAST tool is not run on all commits -- score normalized to 5

Scanned Files

package-lock.json

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 1, 2026

Navigation Menu

Repository navigation

Bump the development group with 2 updates - #282

Bump the development group with 2 updates#282
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/development-0dcaf1e300

dependabot Bot commented on behalf of github Nov 1, 2026

Uh oh!

github-actions Bot commented Nov 1, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 1, 2026

v10.12.0

New rules

New rule options

Fixed false negatives (may result in more lint issues)

Fixed false positives (may result in fewer lint issues)

Other changes

10.12.0

New rules

New rule options

Fixed false negatives (may result in more lint issues)

Fixed false positives (may result in fewer lint issues)

Other changes

v8.72.1

8.72.1 (2026-10-26)

🩹 Fixes

❤️ Thank You

8.72.1 (2026-10-26)

Uh oh!

github-actions Bot commented Nov 1, 2026

Dependency Review

OpenSSF Scorecard

Scanned Files

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants