Test2

[ethomson]

No description provided.

[stacklok-cloud-staging]

Minder Vulnerability Report ✅

Minder analyzed this PR and found it does not add any new vulnerable dependencies.

Vulnerability scan of f651bfcf:

• 🐞 vulnerable packages: 0
• 🛠 fixes available for: 0

[stacklok-cloud]

Minder Vulnerability Report ✅

Minder analyzed this PR and found it does not add any new vulnerable dependencies.

Vulnerability scan of f651bfcf:

• 🐞 vulnerable packages: 0
• 🛠 fixes available for: 0

[stacklok-cloud-staging]

Dependency Information

Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.

📦 Dependency: tap-browser-color

Trusty Score: 3.2

Scoring details

Component	Score
Repository activity	1.2
From	activity
Package activity	3.2
Provenance	5
Malicious	false
Trust-summary	1.7
User activity	5.2

Proof of Origin (Provenance)

This package can be linked back to its source code using a historical provenance map.

We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.

Published package versions	3
Number of git tags or releases	2
Versions matched to tags or releases	2

Alternatives

Package	Score	Description
tap-mocha-reporter	5.7
tap-diff	5
tap-spec	5
tap-summary	4.1
tap-mocha-reporter	5.7
tap-diff	5
tap-spec	5
tap-summary	4.1

[stacklok-cloud]

Dependency Information

Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.

📦 Dependency: tap-browser-color

Trusty Score: 3.2

Scoring details

Component	Score
Repository activity	1.2
From	activity
Package activity	3.2
Trust-summary	2.4
Provenance	5
Malicious	false
User activity	5.2

Proof of Origin (Provenance)

This package can be linked back to its source code using a historical provenance map.

We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.

Published package versions	3
Number of git tags or releases	2
Versions matched to tags or releases	2

Alternatives

Package	Score	Description
tap-mocha-reporter	5.7
tap-dot	5.1
tap-bail	5
tap-diff	5
tap-mocha-reporter	5.7
tap-dot	5.1
tap-bail	5
tap-diff	5