Weekly npm audit (production tree)

[github-actions]

Automated weekly npm audit reports for the production dependency tree.

Command: npm audit --omit=dev --json

New reports are posted as comments below with a diff against the previous run.

[github-actions]

Weekly npm audit — 2026-06-22

Command: npm audit --omit=dev --json

Current summary

Severity	Count
critical	0
high	0
moderate	0
low	0
total	0

No high or critical vulnerabilities in the production tree.

[github-actions]

Weekly npm audit — 2026-07-06

Command: npm audit --omit=dev --json

Diff vs last report

Severity	Previous	Current	Δ
critical	0	0	0
high	0	0	0
moderate	0	7	+7
low	0	0	0
total	0	7	+7

Current summary

Severity	Count
critical	0
high	0
moderate	7
low	0
total	7

No high or critical vulnerabilities in the production tree.

[github-actions]

Weekly npm audit — 2026-07-13

Command: npm audit --omit=dev --json

Diff vs last report

Severity	Previous	Current	Δ
critical	0	0	0
high	0	0	0
moderate	0	7	+7
low	0	0	0
total	0	7	+7

Current summary

Severity	Count
critical	0
high	0
moderate	7
low	0
total	7

No high or critical vulnerabilities in the production tree.

[github-actions]

Weekly npm audit — 2026-07-20

Command: npm audit --omit=dev --json

Diff vs last report

Severity	Previous	Current	Δ
critical	0	0	0
high	0	0	0
moderate	0	7	+7
low	0	0	0
total	0	7	+7

Current summary

Severity	Count
critical	0
high	0
moderate	7
low	0
total	7

No high or critical vulnerabilities in the production tree.

[github-actions]

Weekly npm audit — 2026-07-27

Command: npm audit --omit=dev --json

Diff vs last report

Severity	Previous	Current	Δ
critical	0	1	+1
high	0	9	+9
moderate	0	9	+9
low	0	0	0
total	0	19	+19

Current summary

Severity	Count
critical	1
high	9
moderate	9
low	0
total	19

High / critical packages

• high @daytona/sdk (<=0.200.1)
• high @opentelemetry/propagator-jaeger (<2.9.0)
• high @opentelemetry/sdk-node (0.24.1-alpha.1 - 0.219.0)
• high fast-uri (3.0.0 - 3.1.3)
• high js-yaml (4.0.0 - 4.2.0)
• high next (>=9.3.4-canary.0)
• high postcss (<=8.5.17)
• high sharp (<0.35.0)
• high shell-quote (<=1.8.4)
• critical tar (<=7.5.20)

[ravidsrk]

Triage (2026-08 personal-repo cleanup): this is a standing weekly-audit tracker, not a closable bug. Leaving open.

[github-actions]

Weekly npm audit — 2026-08-31

Command: npm audit --omit=dev --json

Diff vs last report

Severity	Previous	Current	Δ
critical	0	0	0
high	0	0	0
moderate	0	0	0
low	0	0	0
total	0	0	0

Current summary

Severity	Count
critical	0
high	0
moderate	0
low	0
total	0

No high or critical vulnerabilities in the production tree.

[github-actions]

Weekly npm audit — 2026-09-07

Command: npm audit --omit=dev --json

Diff vs last report

Severity	Previous	Current	Δ
critical	0	0	0
high	0	1	+1
moderate	0	1	+1
low	0	0	0
total	0	2	+2

Current summary

Severity	Count
critical	0
high	1
moderate	1
low	0
total	2

High / critical packages

• high browserslist (<=4.28.6)

[github-actions]

Weekly npm audit — 2026-09-14

Command: npm audit --omit=dev --json

Diff vs last report

Severity	Previous	Current	Δ
critical	0	0	0
high	0	0	0
moderate	0	0	0
low	0	0	0
total	0	0	0

Current summary

Severity	Count
critical	0
high	0
moderate	0
low	0
total	0

No high or critical vulnerabilities in the production tree.

[github-actions]

Weekly npm audit — 2026-09-21

Command: npm audit --omit=dev --json

Diff vs last report

Severity	Previous	Current	Δ
critical	0	0	0
high	0	0	0
moderate	0	0	0
low	0	0	0
total	0	0	0

Current summary

Severity	Count
critical	0
high	0
moderate	0
low	0
total	0

No high or critical vulnerabilities in the production tree.

[github-actions]

Weekly npm audit — 2026-09-28

Command: npm audit --omit=dev --json

Diff vs last report

Severity	Previous	Current	Δ
critical	0	0	0
high	0	0	0
moderate	0	0	0
low	0	0	0
total	0	0	0

Current summary

Severity	Count
critical	0
high	0
moderate	0
low	0
total	0

No high or critical vulnerabilities in the production tree.

[github-actions]

Weekly npm audit — 2026-10-05

Command: npm audit --omit=dev --json

Diff vs last report

Severity	Previous	Current	Δ
critical	0	1	+1
high	0	7	+7
moderate	0	2	+2
low	0	0	0
total	0	10	+10

Current summary

Severity	Count
critical	1
high	7
moderate	2
low	0
total	10

High / critical packages

• high @daytona/sdk (<=0.222.0)
• high @grpc/grpc-js (1.14.0 - 1.14.4)
• high axios (1.0.0 - 1.19.0)
• high braces (*)
• high fast-glob (*)
• high fast-uri (3.0.0 - 3.1.7)
• high micromatch (>=0.2.0)
• critical next (16.2.0 - 16.3.5)