Bump source-map-js from 1.2.1 to 1.2.2 - #244

Kusari Analysis Results:

✅ No Flagged Issues Detected
All values appear to be within acceptable risk parameters.

Both analyses support merging. The dependency update moves the transitive dependency source-map-js from 1.2.1 to 1.2.2 (via postcss, used by tailwindcss and next). This remediates GHSA-68fv-2mgg-jv7q (CVE-2026-93749), an event-loop denial of service, and the new version lists no advisories. EPSS is low (0.0063), the license is BSD-3-Clause (permissive), and the version is neither deprecated nor end of life. The Scorecard notes on low maintenance activity and no required code review are low-risk and do not outweigh the security fix. The code analysis found no code issues, exposed secrets, or workflow issues. The combined risk profile is unchanged and the PR improves security posture.

@kusari-inspector rerun - Trigger a re-analysis of this PR
@kusari-inspector feedback [your message] - Send feedback to our AI and team
See Kusari's documentation for setup and configuration.
Commit: 17f135b, performed at: 2026-10-06T14:33:50Z