Bump applicationinsights from 2.9.5 to 3.14.0 in /extensions/ql-vscode · github/vscode-codeql@1d3abb2

Triggered via pull request March 5, 2026 13:14

opened #4324

Status Success

Total duration 26s

Artifacts –

dependency-review.yml

on: pull_request

7 warnings

npm/winston-transport has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.

npm/triple-beam has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.

npm/postgres-bytea has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.

npm/postgres-array has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.

npm/pg-int8 has an OpenSSF Scorecard of 1.9, which is less than this repository's threshold of 3.

npm/module-details-from-path has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.

npm/forwarded-parse has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.