{"data":{"source":{"kind":"github","repo":"star7th/htq","commit":"c64ac96becf9d0003774094bc5ff192bec8c70be","treeEntries":12,"treeTruncated":false,"filesRead":6,"bytesRead":52035,"sourceFilesRead":4,"skippedBySize":[],"skippedByCap":0,"license":"apache2.0","licenseSource":"manifest"},"ecosystems":[{"ecosystem":"npm","manifests":[{"path":"package.json","lockfile":"package-lock v1","runtimeMin":null,"declared":9}],"sourceFilesScanned":4}],"summary":{"declaredPackages":9,"flaggedPackages":11,"findings":19,"byCategory":{"underused":4,"outgrown":12,"replace":3},"byKind":{"vulnerable":6,"deprecated":2,"redundant-dependency":1,"undeclared":1,"unused":1,"dev-only-in-dependencies":1,"native-replacement":1,"trivial-use":1,"stale":3,"overlap":1,"behind-major":1},"high":8,"replacementsReviewed":4},"findings":[{"ecosystem":"npm","package":"node-fetch","manifest":"package.json","kind":"vulnerable","confidence":"high","summary":"node-fetch@2.6.1 has 1 known advisory (GHSA-r683-j2x4-v87g).","evidence":{"version":"2.6.1","versionSource":"lockfile","source":"osv","advisories":[{"id":"GHSA-r683-j2x4-v87g","cvss":8.8,"severity":"high","summary":"node-fetch forwards secure headers to untrusted sites"}],"total":1,"latestVersion":"3.3.2"},"action":"Upgrade node-fetch (latest is 3.3.2) and re-check advisories.","id":"vulnerable:npm:node-fetch:package.json","category":"outgrown","score":91,"severity":"high"},{"ecosystem":"npm","package":"body-parser","manifest":"package.json","kind":"vulnerable","confidence":"high","summary":"body-parser@1.18.3 has 3 known advisories (GHSA-27r3-jxmh-p828, GHSA-qwcr-r2fm-qrc7, GHSA-v422-hmwv-36x6).","evidence":{"version":"1.18.3","versionSource":"lockfile","source":"osv","advisories":[{"id":"GHSA-27r3-jxmh-p828","cvss":7.5,"severity":"high","summary":"body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body"},{"id":"GHSA-qwcr-r2fm-qrc7","cvss":7.5,"severity":"high","summary":"body-parser vulnerable to denial of service when url encoding is enabled"},{"id":"GHSA-v422-hmwv-36x6","cvss":3.7,"severity":"low","summary":"body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement"}],"total":3,"latestVersion":"2.4.0"},"action":"Upgrade body-parser (latest is 2.4.0) and re-check advisories.","id":"vulnerable:npm:body-parser:package.json","category":"outgrown","score":88,"severity":"high"},{"ecosystem":"npm","package":"connect-multiparty","manifest":"package.json","kind":"vulnerable","confidence":"high","summary":"connect-multiparty@2.2.0 has 1 known advisory (GHSA-w2xw-44r3-4v9g).","evidence":{"version":"2.2.0","versionSource":"lockfile","source":"osv","advisories":[{"id":"GHSA-w2xw-44r3-4v9g","cvss":7.8,"severity":"high","summary":"Connect-Multiparty allows arbitrary file upload"}],"total":1,"latestVersion":"2.2.0"},"action":"No newer release; replace connect-multiparty.","id":"vulnerable:npm:connect-multiparty:package.json","category":"outgrown","score":88,"severity":"high"},{"ecosystem":"npm","package":"redis","manifest":"package.json","kind":"vulnerable","confidence":"high","summary":"redis@2.6.5 has 1 known advisory (GHSA-35q2-47q7-3pc3).","evidence":{"version":"2.6.5","versionSource":"lockfile","source":"osv","advisories":[{"id":"GHSA-35q2-47q7-3pc3","cvss":7.5,"severity":"high","summary":"Node-Redis potential exponential regex in monitor mode"}],"total":1,"latestVersion":"6.3.1"},"action":"Upgrade redis (latest is 6.3.1) and re-check advisories.","id":"vulnerable:npm:redis:package.json","category":"outgrown","score":88,"severity":"high"},{"ecosystem":"npm","package":"express","manifest":"package.json","kind":"vulnerable","confidence":"high","summary":"express@4.16.4 has 2 known advisories (GHSA-qw6h-vgh9-j6wx, GHSA-rv95-896h-c2vc).","evidence":{"version":"4.16.4","versionSource":"lockfile","source":"osv","advisories":[{"id":"GHSA-qw6h-vgh9-j6wx","cvss":5,"severity":"medium","summary":"express vulnerable to XSS via response.redirect()"},{"id":"GHSA-rv95-896h-c2vc","cvss":6.1,"severity":"medium","summary":"Express.js Open Redirect in malformed URLs"}],"total":2,"latestVersion":"5.3.0"},"action":"Upgrade express (latest is 5.3.0) and re-check advisories.","id":"vulnerable:npm:express:package.json","category":"outgrown","score":83,"severity":"high"},{"ecosystem":"npm","package":"request","manifest":"package.json","kind":"vulnerable","confidence":"high","summary":"request@2.88.0 has 1 known advisory (GHSA-p8p7-x288-28g6).","evidence":{"version":"2.88.0","versionSource":"lockfile","source":"osv","advisories":[{"id":"GHSA-p8p7-x288-28g6","cvss":6.1,"severity":"medium","summary":"Server-Side Request Forgery in Request"}],"total":1,"latestVersion":"2.88.2"},"action":"Upgrade request (latest is 2.88.2) and re-check advisories.","id":"vulnerable:npm:request:package.json","category":"outgrown","score":83,"severity":"high"},{"ecosystem":"npm","package":"connect-multiparty","manifest":"package.json","kind":"deprecated","confidence":"high","summary":"connect-multiparty@2.2.0 is deprecated: This package is archived and no longer maintained. For support, visit https://github.com/expressjs/express/discussions","evidence":{"deprecatedReason":"This package is archived and no longer maintained. For support, visit https://github.com/expressjs/express/discussions","version":"2.2.0","latestVersion":"2.2.0","files":1,"prodFiles":1},"action":"Migrate off connect-multiparty.","migrationEffort":"low","id":"deprecated:npm:connect-multiparty:package.json","category":"outgrown","score":75,"severity":"high"},{"ecosystem":"npm","package":"request","manifest":"package.json","kind":"deprecated","confidence":"high","summary":"request@2.88.0 is deprecated: request has been deprecated, see https://github.com/request/request/issues/3142","evidence":{"deprecatedReason":"request has been deprecated, see https://github.com/request/request/issues/3142","version":"2.88.0","latestVersion":"2.88.2","files":2,"prodFiles":1},"action":"Migrate off request (candidates: undici, got, axios, ky, superagent).","migrationEffort":"low","citations":[{"title":"request/request#3142: Request is officially deprecated","url":"https://github.com/request/request/issues/3142"},{"title":"MDN: Fetch API","url":"https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API"}],"id":"deprecated:npm:request:package.json","category":"outgrown","score":75,"severity":"high"},{"ecosystem":"npm","package":"body-parser","manifest":"package.json","kind":"redundant-dependency","confidence":"high","summary":"body-parser: Express exposes json and urlencoded (4.16.0), raw and text (4.17.0) built in.","evidence":{"replacementsTable":"2026-11-04.1","applicability":"applies","symbols":1,"tableCovered":0,"tableUncovered":0,"needsReview":1},"action":"Use express built-in body parsers and drop body-parser.","migrationEffort":"low","citations":[{"title":"Express History.md (4.16.0 adds express.json and express.urlencoded; 4.17.0 adds raw and text)","url":"https://github.com/expressjs/express/blob/master/History.md"}],"id":"redundant-dependency:npm:body-parser:package.json","category":"replace","score":55,"severity":"medium"},{"ecosystem":"npm","package":"form-data","manifest":"package.json","kind":"undeclared","confidence":"medium","summary":"form-data is imported in 1 file but not declared; it is installed only through request.","evidence":{"files":["queue.js"],"symbols":["default"],"installedTransitively":true,"requiredBy":["request"]},"action":"Declare form-data in dependencies; replacing or removing the packages that bring it in would otherwise break these imports.","id":"undeclared:npm:form-data:package.json","category":"underused","score":55,"severity":"medium"},{"ecosystem":"npm","package":"multer","manifest":"package.json","kind":"unused","confidence":"high","summary":"multer is declared in dependencies but no source file, script or config references it.","evidence":{"sections":["dependencies"],"filesScanned":4,"scanComplete":true,"unresolvedDynamicImports":0,"alsoDeprecated":true,"knownAdvisories":8,"version":"1.2.1"},"action":"Remove multer from dependencies.","id":"unused:npm:multer:package.json","category":"underused","score":55,"severity":"medium"},{"ecosystem":"npm","package":"body-parser","manifest":"package.json","kind":"dev-only-in-dependencies","confidence":"high","summary":"body-parser is in dependencies but only tests or tooling use it (1 test, 0 tooling files).","evidence":{"filesByClass":{"prod":0,"test":1,"tooling":0},"typeOnly":false,"publishedPackage":true},"action":"Move body-parser to the development dependencies.","id":"dev-only-in-dependencies:npm:body-parser:package.json","category":"underused","score":45,"severity":"medium"},{"ecosystem":"npm","package":"node-fetch","manifest":"package.json","kind":"native-replacement","confidence":"medium","summary":"node-fetch: fetch, Headers, Request and Response are Node globals (stable since Node 21, available behind no flag since Node 18). (requires runtime >= 18; the repo does not declare its minimum runtime)","evidence":{"replacementsTable":"2026-11-04.1","applicability":"unknown-runtime","note":"requires runtime >= 18; the repo does not declare its minimum runtime","symbols":1,"tableCovered":1,"tableUncovered":0,"needsReview":0},"action":"Replace node-fetch with global fetch where every imported symbol is covered.","migrationEffort":"low","citations":[{"title":"Node.js globals (fetch, FormData, AbortController, atob, btoa)","url":"https://nodejs.org/api/globals.html"}],"id":"native-replacement:npm:node-fetch:package.json","category":"replace","score":45,"severity":"medium"},{"ecosystem":"npm","package":"request","manifest":"package.json","kind":"trivial-use","confidence":"high","summary":"request is imported in 2 files for 1 symbol (default) and weighs 202 KB unpacked.","evidence":{"files":2,"symbols":["default"],"unpackedSize":206894,"curatedReplacement":"npm:request"},"action":"Replace with global fetch.","migrationEffort":"low","citations":[{"title":"request/request#3142: Request is officially deprecated","url":"https://github.com/request/request/issues/3142"},{"title":"MDN: Fetch API","url":"https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API"}],"id":"trivial-use:npm:request:package.json","category":"underused","score":45,"severity":"medium"},{"ecosystem":"npm","package":"async-redis","manifest":"package.json","kind":"stale","confidence":"medium","summary":"async-redis's latest release (2.0.0) is 65 months old.","evidence":{"latestVersion":"2.0.0","latestPublishedAt":"2021-05-25T23:01:42Z","monthsSinceLatestRelease":65.3,"staleThresholdMonths":24},"action":"Check whether async-redis is still maintained; look for an actively maintained alternative.","migrationEffort":"low","id":"stale:npm:async-redis:package.json","category":"outgrown","score":35,"severity":"low"},{"ecosystem":"npm","package":"cookie-parser","manifest":"package.json","kind":"stale","confidence":"medium","summary":"cookie-parser's latest release (1.4.7) is 24 months old.","evidence":{"latestVersion":"1.4.7","latestPublishedAt":"2024-10-08T18:26:16Z","monthsSinceLatestRelease":24.9,"staleThresholdMonths":24},"action":"Check whether cookie-parser is still maintained; look for an actively maintained alternative.","migrationEffort":"low","id":"stale:npm:cookie-parser:package.json","category":"outgrown","score":35,"severity":"low"},{"ecosystem":"npm","package":"node-fetch","manifest":"package.json","kind":"stale","confidence":"medium","summary":"node-fetch's latest release (3.3.2) is 39 months old.","evidence":{"latestVersion":"3.3.2","latestPublishedAt":"2023-07-25T11:50:17Z","monthsSinceLatestRelease":39.4,"staleThresholdMonths":24},"action":"Check whether node-fetch is still maintained; look for an actively maintained alternative.","migrationEffort":"low","id":"stale:npm:node-fetch:package.json","category":"outgrown","score":35,"severity":"low"},{"ecosystem":"npm","package":"node-fetch+request","manifest":"package.json","kind":"overlap","confidence":"medium","summary":"2 HTTP client libraries are in use: node-fetch (2 files), request (2 files).","evidence":{"group":"http-client","packages":[{"name":"node-fetch","files":2,"symbols":1},{"name":"request","files":2,"symbols":1}]},"action":"Consolidate on one HTTP client library; start with the one used in the fewest files.","id":"overlap:npm:node-fetch+request:package.json","category":"replace","score":25,"severity":"low"},{"ecosystem":"npm","package":"redis","manifest":"package.json","kind":"behind-major","confidence":"high","summary":"redis@2.6.5 is 4 major versions behind 6.3.1.","evidence":{"version":"2.6.5","latestVersion":"6.3.1","majorsBehind":4},"action":"Review the changelog and upgrade redis.","id":"behind-major:npm:redis:package.json","category":"outgrown","score":20,"severity":"low"}],"replacements":[{"package":"connect-multiparty","ecosystem":"npm","manifest":"package.json","flaggedBy":["deprecated"],"files":1,"symbols":["default"],"migrationEffort":"low","current":{"version":"2.2.0","scorecard":3,"dependents":423,"monthsSinceLatestRelease":97.7,"unpackedSize":8691,"licenses":["MIT"]},"table":null,"alternatives":[],"candidates":[],"reviewedAlternative":null,"coverage":null},{"package":"request","ecosystem":"npm","manifest":"package.json","flaggedBy":["deprecated","trivial-use"],"files":2,"symbols":["default"],"migrationEffort":"low","current":{"version":"2.88.0","scorecard":3.4,"dependents":4587,"monthsSinceLatestRelease":80.8,"unpackedSize":206894,"licenses":["Apache-2.0"]},"table":{"entry":"npm:request","tableVersion":"2026-11-04.1","reason":"deprecated","summary":"request is deprecated by its maintainers and receives no fixes; the callback and stream API has no drop-in replacement.","applicability":"unknown-runtime","note":"requires runtime >= 18; the repo does not declare its minimum runtime","citations":[{"title":"request/request#3142: Request is officially deprecated","url":"https://github.com/request/request/issues/3142"},{"title":"MDN: Fetch API","url":"https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API"}]},"alternatives":[{"kind":"platform","name":"global fetch","applicability":"unknown-runtime"},{"kind":"package","name":"axios"},{"kind":"package","name":"undici"},{"kind":"package","name":"got"},{"kind":"package","name":"ky"}],"candidates":[{"name":"axios","source":"curated","score":84.9,"components":{"scorecard":0.77,"recency":1,"dependents":1,"size":0.177,"license":1},"licenseCompat":"compatible","version":"1.21.0","licenses":["MIT"],"scorecard":7.7,"monthsSinceLatestRelease":0.3,"dependents":174259,"unpackedSize":2215223},{"name":"undici","source":"curated","score":82.5,"components":{"scorecard":0.81,"recency":1,"dependents":0.817,"size":0.182,"license":1},"licenseCompat":"compatible","version":"8.12.3","licenses":["MIT"],"scorecard":8.1,"monthsSinceLatestRelease":0.5,"dependents":12137,"unpackedSize":2167341},{"name":"got","source":"curated","score":70.1,"components":{"scorecard":0.55,"recency":1,"dependents":0.427,"size":0.502,"license":1},"licenseCompat":"compatible","version":"16.2.0","licenses":["MIT"],"scorecard":5.5,"monthsSinceLatestRelease":0.2,"dependents":135,"unpackedSize":495293},{"name":"ky","source":"curated","score":69.4,"components":{"scorecard":0.47,"recency":1,"dependents":0.537,"size":0.459,"license":1},"licenseCompat":"compatible","version":"2.2.0","licenses":["MIT"],"scorecard":4.7,"monthsSinceLatestRelease":0.9,"dependents":481,"unpackedSize":602993}],"reviewedAlternative":"global fetch","coverage":{"status":"NO_COVERAGE","symbols":[{"symbol":"default","covered":false,"replacement":"","decidedBy":"model","caveat":"The listed sites only show the import, not how request is called, so same arguments and result handling cannot be confirmed. Global fetch differs from request in several ways: it is promise-based rather than callback-based, it has no options such as qs, form, json, auth or pool, it does not reject on HTTP error statuses, and the body must be read explicitly with res.json() or res.text(). Each call site would need a rewrite.","quoteVerified":true}],"unaccounted":[],"decidedBy":"model"}},{"package":"body-parser","ecosystem":"npm","manifest":"package.json","flaggedBy":["redundant-dependency"],"files":1,"symbols":["default"],"migrationEffort":"low","current":{"version":"1.18.3","scorecard":7.4,"dependents":3545,"monthsSinceLatestRelease":0.4,"unpackedSize":55897,"licenses":["MIT"]},"table":{"entry":"npm:body-parser","tableVersion":"2026-11-04.1","reason":"redundant","summary":"Express exposes json and urlencoded (4.16.0), raw and text (4.17.0) built in.","applicability":"applies","citations":[{"title":"Express History.md (4.16.0 adds express.json and express.urlencoded; 4.17.0 adds raw and text)","url":"https://github.com/expressjs/express/blob/master/History.md"}]},"alternatives":[{"kind":"dependency","name":"express built-in body parsers","applicability":"applies"}],"candidates":[],"reviewedAlternative":"express built-in body parsers","coverage":{"status":"FULL_COVERAGE","symbols":[{"symbol":"default","covered":true,"replacement":"const express = require('express'); app.use(express.json()); app.use(express.urlencoded({ extended: true }))","decidedBy":"model","caveat":"Express 4.16+ is required. Only the json and urlencoded parsers are built in; bodyParser.raw and bodyParser.text are also exposed as express.raw and express.text in 4.17+. Set the urlencoded extended option explicitly, because the default differs from older bodyParser usage.","quoteVerified":true}],"unaccounted":[],"decidedBy":"model"}},{"package":"node-fetch","ecosystem":"npm","manifest":"package.json","flaggedBy":["native-replacement"],"files":2,"symbols":["default"],"migrationEffort":"low","current":{"version":"2.6.1","scorecard":4.9,"dependents":7329,"monthsSinceLatestRelease":39.4,"unpackedSize":157766,"licenses":["MIT"]},"table":{"entry":"npm:node-fetch","tableVersion":"2026-11-04.1","reason":"native","summary":"fetch, Headers, Request and Response are Node globals (stable since Node 21, available behind no flag since Node 18).","applicability":"unknown-runtime","note":"requires runtime >= 18; the repo does not declare its minimum runtime","citations":[{"title":"Node.js globals (fetch, FormData, AbortController, atob, btoa)","url":"https://nodejs.org/api/globals.html"}]},"alternatives":[{"kind":"platform","name":"global fetch","applicability":"unknown-runtime"}],"candidates":[],"reviewedAlternative":"global fetch","coverage":{"status":"FULL_COVERAGE","symbols":[{"symbol":"default","covered":true,"replacement":"fetch","decidedBy":"table"}],"unaccounted":[],"decidedBy":"table"}}],"dependencies":[{"ecosystem":"npm","name":"async-redis","sections":["dependencies"],"manifest":"package.json","range":"^1.1.7","version":"1.1.7","versionSource":"lockfile","usage":{"files":2,"filesByClass":{"prod":1,"test":1,"tooling":0},"symbols":["createClient"],"symbolCount":1,"typeOnly":false,"referencedByTooling":false},"health":{"deprecated":false,"latestVersion":"2.0.0","monthsSinceLatestRelease":65.3,"licenses":["MIT"],"advisories":0,"unpackedSize":104783,"maintainers":1,"scorecard":3,"dependents":127}},{"ecosystem":"npm","name":"body-parser","sections":["dependencies"],"manifest":"package.json","range":"^1.18.3","version":"1.18.3","versionSource":"lockfile","usage":{"files":1,"filesByClass":{"prod":0,"test":1,"tooling":0},"symbols":["default"],"symbolCount":1,"typeOnly":false,"referencedByTooling":false},"health":{"deprecated":false,"latestVersion":"2.4.0","monthsSinceLatestRelease":0.4,"licenses":["MIT"],"advisories":3,"unpackedSize":55897,"maintainers":1,"scorecard":7.4,"dependents":3545}},{"ecosystem":"npm","name":"connect-multiparty","sections":["dependencies"],"manifest":"package.json","range":"^2.2.0","version":"2.2.0","versionSource":"lockfile","usage":{"files":1,"filesByClass":{"prod":1,"test":0,"tooling":0},"symbols":["default"],"symbolCount":1,"typeOnly":false,"referencedByTooling":false},"health":{"deprecated":true,"latestVersion":"2.2.0","monthsSinceLatestRelease":97.7,"licenses":["MIT"],"advisories":1,"unpackedSize":8691,"maintainers":2,"scorecard":3,"dependents":423}},{"ecosystem":"npm","name":"cookie-parser","sections":["dependencies"],"manifest":"package.json","range":"~1.4.3","version":"1.4.4","versionSource":"lockfile","usage":{"files":1,"filesByClass":{"prod":1,"test":0,"tooling":0},"symbols":["default"],"symbolCount":1,"typeOnly":false,"referencedByTooling":false},"health":{"deprecated":false,"latestVersion":"1.4.7","monthsSinceLatestRelease":24.9,"licenses":["MIT"],"advisories":0,"unpackedSize":11188,"maintainers":2,"scorecard":5.8,"dependents":188}},{"ecosystem":"npm","name":"express","sections":["dependencies"],"manifest":"package.json","range":"^4.16.4","version":"4.16.4","versionSource":"lockfile","usage":{"files":2,"filesByClass":{"prod":1,"test":1,"tooling":0},"symbols":["default"],"symbolCount":1,"typeOnly":false,"referencedByTooling":false},"health":{"deprecated":false,"latestVersion":"5.3.0","monthsSinceLatestRelease":0.9,"licenses":["MIT"],"advisories":2,"unpackedSize":206123,"maintainers":4,"scorecard":8.5,"dependents":1892}},{"ecosystem":"npm","name":"multer","sections":["dependencies"],"manifest":"package.json","range":"~1.2.0","version":"1.2.1","versionSource":"lockfile","usage":{"files":0,"filesByClass":{"prod":0,"test":0,"tooling":0},"symbols":[],"symbolCount":0,"typeOnly":false,"referencedByTooling":false},"health":{"deprecated":true,"latestVersion":"2.5.0","monthsSinceLatestRelease":0.4,"licenses":["MIT"],"advisories":8,"unpackedSize":null,"maintainers":3,"scorecard":null,"dependents":null}},{"ecosystem":"npm","name":"node-fetch","sections":["dependencies"],"manifest":"package.json","range":"^2.6.1","version":"2.6.1","versionSource":"lockfile","usage":{"files":2,"filesByClass":{"prod":1,"test":1,"tooling":0},"symbols":["default"],"symbolCount":1,"typeOnly":false,"referencedByTooling":false},"health":{"deprecated":false,"latestVersion":"3.3.2","monthsSinceLatestRelease":39.4,"licenses":["MIT"],"advisories":1,"unpackedSize":157766,"maintainers":4,"scorecard":4.9,"dependents":7329}},{"ecosystem":"npm","name":"redis","sections":["dependencies"],"manifest":"package.json","range":"~2.6.2","version":"2.6.5","versionSource":"lockfile","usage":{"files":2,"filesByClass":{"prod":1,"test":1,"tooling":0},"symbols":["createClient","default"],"symbolCount":2,"typeOnly":false,"referencedByTooling":false},"health":{"deprecated":false,"latestVersion":"6.3.1","monthsSinceLatestRelease":0.2,"licenses":["MIT"],"advisories":1,"unpackedSize":null,"maintainers":4,"scorecard":6.5,"dependents":409}},{"ecosystem":"npm","name":"request","sections":["dependencies"],"manifest":"package.json","range":"^2.88.0","version":"2.88.0","versionSource":"lockfile","usage":{"files":2,"filesByClass":{"prod":1,"test":1,"tooling":0},"symbols":["default"],"symbolCount":1,"typeOnly":false,"referencedByTooling":false},"health":{"deprecated":true,"latestVersion":"2.88.2","monthsSinceLatestRelease":80.8,"licenses":["Apache-2.0"],"advisories":1,"unpackedSize":206894,"maintainers":4,"scorecard":3.4,"dependents":4587}}],"coverage":{"complete":true,"notes":[],"sourceFilesScanned":4,"health":{"checked":9,"skipped":0},"upstreamCalls":{"github":8,"registries":76},"failures":[]},"llmCalls":1,"decidedBy":{"findings":"code","replacementCoverage":{"table":1,"model":2,"unreviewed":0}},"versions":{"replacementsTable":"2026-11-04.1"},"thresholds":{"trivialMaxSymbols":2,"trivialMaxFiles":2,"trivialMinSizeBytes":200000,"effortLowFiles":2,"effortMediumFiles":8,"heavyUseFiles":5,"staleMonths":24,"majorsBehind":2},"wouldChangeVerdict":[]},"_provenance":{"version":"writerslogic-provenance/1","issuer":"did:web:agents.writerslogic.com","verify":{"endpoint":"POST /api/v1/verify-provenance","did":"did:web:agents.writerslogic.com"},"manifest":{"format":"application/json","instance_id":"xmp:iid:447a9b83-8854-4da8-9ffb-0f7c6d7ff969","claim_generator_info":[{"name":"WritersLogic x402 Agent Hub","version":"2.0.0"}],"title":"Dependency Underuse & Replacement Advisor","assertions":[{"label":"c2pa.actions.v2","data":{"actions":[{"action":"c2pa.created","when":"2026-11-04T20:33:43.865Z","softwareAgent":{"name":"writerslogic-agent-hub/dependency-advisor","version":"2.0.0"},"digitalSourceType":"http://cv.iptc.org/newscodes/digitalsourcetype/trainedAlgorithmicMedia","parameters":{"endpoint":"POST /api/v1/audit-dependencies","inputDigest":{"alg":"sha256","hash":"37c095cb60d6201d577c99d5034f0bbca358960f712c9b38f8b4d1a614736151","canonicalization":"JCS"}}}]}},{"label":"c2pa.hash.data","data":{"alg":"sha256","hash":"dcfab7d7452c0e2f571525b0d85b0c119db070316b81a3031f950262b84bfa6f","name":"jcs-canonical-json(data)"}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.github.com/repos/star7th/htq/commits/HEAD","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.github.com/repos/star7th/htq/commits/HEAD","date":"2026-11-04T20:33:36.979Z"},"hash":{"alg":"sha256","hash":"4bd55e22578cbe3b02e15b73bcb3d6f24c81e015ed9b9cfaddb1ca41f760e631","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.github.com/repos/star7th/htq/git/trees/c64ac96becf9d0003774094bc5ff192bec8c70be?recursive=1","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.github.com/repos/star7th/htq/git/trees/c64ac96becf9d0003774094bc5ff192bec8c70be?recursive=1","date":"2026-11-04T20:33:37.131Z"},"hash":{"alg":"sha256","hash":"e43c95e9a6f0f020ba2a4c998d85d9a0c0820581d639df1b4ce4be1cdbd89d20","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/devTest.js","format":"text/plain","relationship":"inputTo","dc":{"source":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/devTest.js","date":"2026-11-04T20:33:37.239Z"},"hash":{"alg":"sha256","hash":"8bdbba07149f6755f29a6836f01f0cb0ac14aad8a19196ea2c1eb0fb261b784b","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/package.json","format":"text/plain","relationship":"inputTo","dc":{"source":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/package.json","date":"2026-11-04T20:33:37.256Z"},"hash":{"alg":"sha256","hash":"49a697a13dcb6037bcd30929f6db6ede495891f6fa6b9b43a172f0ec8d8c6c96","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/package-lock.json","format":"text/plain","relationship":"inputTo","dc":{"source":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/package-lock.json","date":"2026-11-04T20:33:37.258Z"},"hash":{"alg":"sha256","hash":"cae9f93afe0eb691f0d9993ef3965dd0ee874941d9d752720351b08029dbd2ac","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/htq.js","format":"text/plain","relationship":"inputTo","dc":{"source":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/htq.js","date":"2026-11-04T20:33:37.273Z"},"hash":{"alg":"sha256","hash":"f6f0a6629d95887419be1b3d20386de5ab75b78ad778c7cf57fd79bca82a07af","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/api.js","format":"text/plain","relationship":"inputTo","dc":{"source":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/api.js","date":"2026-11-04T20:33:37.277Z"},"hash":{"alg":"sha256","hash":"2517602d0013ce7fc676e35478bf24f784db7fdd63eb5dedb07fe730d49b9f01","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/queue.js","format":"text/plain","relationship":"inputTo","dc":{"source":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/queue.js","date":"2026-11-04T20:33:37.293Z"},"hash":{"alg":"sha256","hash":"4c097347995d89c5897719c006e70464ca1f0bcf069f9fa71ab5ad80166b7b5f","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/connect-multiparty","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/connect-multiparty","date":"2026-11-04T20:33:37.691Z"},"hash":{"alg":"sha256","hash":"e444b757240c18510202e5eb0cfde1a6867534012a09a4e36dc2fab750ed81ce","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/async-redis","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/async-redis","date":"2026-11-04T20:33:37.693Z"},"hash":{"alg":"sha256","hash":"98fbf9af8643fd79cd96b8db2ed7bc78271308710972d12fe2085b575910ff91","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/cookie-parser","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/cookie-parser","date":"2026-11-04T20:33:37.693Z"},"hash":{"alg":"sha256","hash":"c17744552f5edb0fa36fa74e027082bb0db6539d16ef69c72d3b616a59fab257","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/body-parser","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/body-parser","date":"2026-11-04T20:33:37.693Z"},"hash":{"alg":"sha256","hash":"ab0f9d9e14ffd679ee17ac3f7a2fd118d48862a800e3f2fe9df1b1205b971eb1","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/node-fetch","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/node-fetch","date":"2026-11-04T20:33:37.693Z"},"hash":{"alg":"sha256","hash":"fe46670a3637bbb902ee8abfbfc160787cd30a7cac113d68e1570091cba441b7","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/express","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/express","date":"2026-11-04T20:33:37.693Z"},"hash":{"alg":"sha256","hash":"e002acff3c8a32b90d5d8a17ee2d267cf03c07ff5b1198a65cb45685bfea0733","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/connect-multiparty/versions/2.2.0","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/connect-multiparty/versions/2.2.0","date":"2026-11-04T20:33:37.720Z"},"hash":{"alg":"sha256","hash":"3410abf3a69a261d931c9d5a9955bd490704f1e53133f3ec4bc22a56fd21d348","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/cookie-parser/versions/1.4.4","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/cookie-parser/versions/1.4.4","date":"2026-11-04T20:33:37.726Z"},"hash":{"alg":"sha256","hash":"ba379a0e7084aaed7d3ad109e0713ee29bc797c81870470923dca361c7c3116b","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/async-redis/versions/1.1.7","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/async-redis/versions/1.1.7","date":"2026-11-04T20:33:37.733Z"},"hash":{"alg":"sha256","hash":"82a68a7d6903d60160cdc32c6c7677fee77bb041432e9f790890c0aed32cc39d","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/body-parser/versions/1.18.3","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/body-parser/versions/1.18.3","date":"2026-11-04T20:33:37.759Z"},"hash":{"alg":"sha256","hash":"908030dcdff25fb33c07ca19d2ecd6df7673e350e4914fb2d36c9ef540037f7f","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://registry.npmjs.org/connect-multiparty/2.2.0","format":"application/json","relationship":"inputTo","dc":{"source":"https://registry.npmjs.org/connect-multiparty/2.2.0","date":"2026-11-04T20:33:37.762Z"},"hash":{"alg":"sha256","hash":"ad9e0e5f511690d997d2f75f46eb92194220f6c02bc5ceb9861fe725ae0bef13","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://registry.npmjs.org/async-redis/1.1.7","format":"application/json","relationship":"inputTo","dc":{"source":"https://registry.npmjs.org/async-redis/1.1.7","date":"2026-11-04T20:33:37.767Z"},"hash":{"alg":"sha256","hash":"41ac78fa143250b21aa9e7664b0631300668b2cf72815a48074e71d7c107ef87","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://registry.npmjs.org/cookie-parser/1.4.4","format":"application/json","relationship":"inputTo","dc":{"source":"https://registry.npmjs.org/cookie-parser/1.4.4","date":"2026-11-04T20:33:37.768Z"},"hash":{"alg":"sha256","hash":"fdd76831befdd10e9fcb4563b706960b2a7bee1813f6c81b73dc91d42bfc8bd7","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/node-fetch/versions/2.6.1","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/node-fetch/versions/2.6.1","date":"2026-11-04T20:33:37.768Z"},"hash":{"alg":"sha256","hash":"215f28cff05c1363a2ddb9ff9498274819516512f2ce185925700f206611c32d","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/express/versions/4.16.4","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/express/versions/4.16.4","date":"2026-11-04T20:33:37.791Z"},"hash":{"alg":"sha256","hash":"313a6160db07ad06de12e618ed6799a7d6ae59b12241400d6dfae8764488ff12","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/request","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/request","date":"2026-11-04T20:33:37.809Z"},"hash":{"alg":"sha256","hash":"aca73075a9461205e636423047e5b05f772db825dc70c8efc15e9ff35156b4c8","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/redis","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/redis","date":"2026-11-04T20:33:37.815Z"},"hash":{"alg":"sha256","hash":"041ef9f49a6fbd712a7903afeada2c958628eb1b1430af81e65fd8fa0078d89c","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://registry.npmjs.org/body-parser/1.18.3","format":"application/json","relationship":"inputTo","dc":{"source":"https://registry.npmjs.org/body-parser/1.18.3","date":"2026-11-04T20:33:37.816Z"},"hash":{"alg":"sha256","hash":"c6e9569aa1868ffeb94a1daff37e5ad594086097d01a9efa6eb3edc133710153","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://registry.npmjs.org/node-fetch/2.6.1","format":"application/json","relationship":"inputTo","dc":{"source":"https://registry.npmjs.org/node-fetch/2.6.1","date":"2026-11-04T20:33:37.823Z"},"hash":{"alg":"sha256","hash":"0ac4e536ea4bb42c4cb22df1ecad5030491e75c792b4966044ee29daeb36290d","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/multer","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/multer","date":"2026-11-04T20:33:37.830Z"},"hash":{"alg":"sha256","hash":"01974b2a88d181f07b53d8af3b42035ab40a9cf58bf4e949d054e9862588d06b","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/request/versions/2.88.0","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/request/versions/2.88.0","date":"2026-11-04T20:33:37.844Z"},"hash":{"alg":"sha256","hash":"48da28d5c9699a7a4f31e88daa10a79aa520a79f3b14c24600c8a4e3f31bb850","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://registry.npmjs.org/express/4.16.4","format":"application/json","relationship":"inputTo","dc":{"source":"https://registry.npmjs.org/express/4.16.4","date":"2026-11-04T20:33:37.845Z"},"hash":{"alg":"sha256","hash":"0987d6364d11f75a4392624edfa6b77a7ae8198d89fceea05bc2d3aaba6fd2c9","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/redis/versions/2.6.5","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/redis/versions/2.6.5","date":"2026-11-04T20:33:37.853Z"},"hash":{"alg":"sha256","hash":"fa953d5100fbc1ecc70da3fccfba939370343fbbb6abca684f8b215dcecbdd41","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/multer/versions/1.2.1","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/multer/versions/1.2.1","date":"2026-11-04T20:33:37.871Z"},"hash":{"alg":"sha256","hash":"44ab8a4ab518a5368baaf2b0e069f6fcbc6ad8942a2b4f94d9bb4d7c036375ec","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://registry.npmjs.org/request/2.88.0","format":"application/json","relationship":"inputTo","dc":{"source":"https://registry.npmjs.org/request/2.88.0","date":"2026-11-04T20:33:37.894Z"},"hash":{"alg":"sha256","hash":"e98ef3d760dabb0e435af83da630fd88c1c09ecd4c671f55b66748dcc314d9e6","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://registry.npmjs.org/redis/2.6.5","format":"application/json","relationship":"inputTo","dc":{"source":"https://registry.npmjs.org/redis/2.6.5","date":"2026-11-04T20:33:37.911Z"},"hash":{"alg":"sha256","hash":"6589dab9c50553bccffe7bba310c7dee2c86bbfb031b76cf979c8b0472ff1eea","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://registry.npmjs.org/multer/1.2.1","format":"application/json","relationship":"inputTo","dc":{"source":"https://registry.npmjs.org/multer/1.2.1","date":"2026-11-04T20:33:37.927Z"},"hash":{"alg":"sha256","hash":"324ec51f740a8f92ee4d0399d7454efd225877911395db94fc1386eeef19cf71","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.osv.dev/v1/querybatch","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.osv.dev/v1/querybatch","date":"2026-11-04T20:33:38.667Z"},"hash":{"alg":"sha256","hash":"5596dfe48b242ad6434045f0312eb61c36b6730ab22541050b8380ed7457c4f7","basis":"decoded-text"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/advisories/GHSA-r683-j2x4-v87g","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/advisories/GHSA-r683-j2x4-v87g","date":"2026-11-04T20:33:38.706Z"},"hash":{"alg":"sha256","hash":"49ed303a6f820771336f94f4f9fba42a6a4360dfbe0a1e30390d9836b4ff022b","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/advisories/GHSA-w2xw-44r3-4v9g","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/advisories/GHSA-w2xw-44r3-4v9g","date":"2026-11-04T20:33:38.707Z"},"hash":{"alg":"sha256","hash":"b9de3c8962767649e623b135e6821456fe6990b8bd0c12f9934b09927a07cc82","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/advisories/GHSA-27r3-jxmh-p828","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/advisories/GHSA-27r3-jxmh-p828","date":"2026-11-04T20:33:38.707Z"},"hash":{"alg":"sha256","hash":"cde7275135ab8befa57350e66f9b43f326396f34f91a4978d67a030960e71fc3","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/advisories/GHSA-35q2-47q7-3pc3","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/advisories/GHSA-35q2-47q7-3pc3","date":"2026-11-04T20:33:38.707Z"},"hash":{"alg":"sha256","hash":"9a5e389e27af67ea4d0e3537ff39fe1823ad43f9b740488361ca5bb5c554d315","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/advisories/GHSA-p8p7-x288-28g6","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/advisories/GHSA-p8p7-x288-28g6","date":"2026-11-04T20:33:38.707Z"},"hash":{"alg":"sha256","hash":"e098312a6ff725d2636370e3eb68a8544cdc49da1bd88de48e81ab20b23a4171","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/advisories/GHSA-qw6h-vgh9-j6wx","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/advisories/GHSA-qw6h-vgh9-j6wx","date":"2026-11-04T20:33:38.710Z"},"hash":{"alg":"sha256","hash":"95f5d551985869715ba483152a1a804478a70bbfb569f3b9565dc6eb519b0a4c","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/advisories/GHSA-qwcr-r2fm-qrc7","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/advisories/GHSA-qwcr-r2fm-qrc7","date":"2026-11-04T20:33:38.745Z"},"hash":{"alg":"sha256","hash":"f373828b1623dee06223bf8e1165400624d6ecaf0f38438ba1de499371a9db67","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/advisories/GHSA-rv95-896h-c2vc","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/advisories/GHSA-rv95-896h-c2vc","date":"2026-11-04T20:33:38.747Z"},"hash":{"alg":"sha256","hash":"0b1c4a4d88c3e0389c4e17b82fa31e958e4143fc56189063ba69a23f97080591","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/advisories/GHSA-44fp-w29j-9vj5","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/advisories/GHSA-44fp-w29j-9vj5","date":"2026-11-04T20:33:38.747Z"},"hash":{"alg":"sha256","hash":"25bff1415ffad264831bf968f37c608047ed7d9f3020d5783f64faf813e651bd","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/advisories/GHSA-v422-hmwv-36x6","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/advisories/GHSA-v422-hmwv-36x6","date":"2026-11-04T20:33:38.785Z"},"hash":{"alg":"sha256","hash":"d9a8732f6a31f4882875106ff906c309575ac091a816d357e28a15d67a083a91","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/advisories/GHSA-535w-7cp7-47q4","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/advisories/GHSA-535w-7cp7-47q4","date":"2026-11-04T20:33:38.789Z"},"hash":{"alg":"sha256","hash":"cfde161bf04ab0fce53b6a764e33bc0e8b2ca3956186a3331eaef25546624399","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/advisories/GHSA-5528-5vmv-3xc2","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/advisories/GHSA-5528-5vmv-3xc2","date":"2026-11-04T20:33:38.831Z"},"hash":{"alg":"sha256","hash":"abc1d39967f086fe70dae5708e15dc64111f1c91710a93ec72c08556a118efdd","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3alpha/systems/npm/packages/connect-multiparty/versions/2.2.0:dependents","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3alpha/systems/npm/packages/connect-multiparty/versions/2.2.0:dependents","date":"2026-11-04T20:33:38.873Z"},"hash":{"alg":"sha256","hash":"0776605ddd876d51ddb129fd7e396c53ec424afdc35a984e65e5b18bc3d613b7","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3alpha/systems/npm/packages/body-parser/versions/1.18.3:dependents","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3alpha/systems/npm/packages/body-parser/versions/1.18.3:dependents","date":"2026-11-04T20:33:38.874Z"},"hash":{"alg":"sha256","hash":"495a794b90a2b55b51bc1fb9dc33426a96b1064709ba1c6c786423420d975b43","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3alpha/systems/npm/packages/request/versions/2.88.0:dependents","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3alpha/systems/npm/packages/request/versions/2.88.0:dependents","date":"2026-11-04T20:33:38.874Z"},"hash":{"alg":"sha256","hash":"338adcb94f1d8cf1b8fc6c0beffef2f18ed159a5d9bbff5d20342d993b9a6de5","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/projects/github.com%2Frequest%2Frequest","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/projects/github.com%2Frequest%2Frequest","date":"2026-11-04T20:33:38.878Z"},"hash":{"alg":"sha256","hash":"6f515083fc403ba175e0e134acb693fb78dcde49c127e9b9614e9a2ea3a5b78d","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/projects/github.com%2Fexpressjs%2Fconnect-multiparty","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/projects/github.com%2Fexpressjs%2Fconnect-multiparty","date":"2026-11-04T20:33:38.879Z"},"hash":{"alg":"sha256","hash":"29714eb1c187f4c7ed99b0af15dbbd2260ac3f3312fcf0f70fc3e767934c16cb","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/projects/github.com%2Fexpressjs%2Fbody-parser","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/projects/github.com%2Fexpressjs%2Fbody-parser","date":"2026-11-04T20:33:38.879Z"},"hash":{"alg":"sha256","hash":"ff9a50facddf46527792d3bc88230030f3734c7aef6ff9888b095369f70a5555","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3alpha/systems/npm/packages/redis/versions/2.6.5:dependents","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3alpha/systems/npm/packages/redis/versions/2.6.5:dependents","date":"2026-11-04T20:33:38.919Z"},"hash":{"alg":"sha256","hash":"05d3bf4dc5fdee5edcd655d58d0f6ca05ab23010c17d5006989fe699ce8d213c","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3alpha/systems/npm/packages/node-fetch/versions/2.6.1:dependents","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3alpha/systems/npm/packages/node-fetch/versions/2.6.1:dependents","date":"2026-11-04T20:33:38.921Z"},"hash":{"alg":"sha256","hash":"58c038f55e9fe203ea26f080331e41e3c1ea6be00174730d3aa816c366e5da76","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/projects/github.com%2Fbitinn%2Fnode-fetch","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/projects/github.com%2Fbitinn%2Fnode-fetch","date":"2026-11-04T20:33:38.922Z"},"hash":{"alg":"sha256","hash":"731202eaa335171b1475f25ade344c0bb09d63184d4413c6ab14be211d449d92","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3alpha/systems/npm/packages/express/versions/4.16.4:dependents","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3alpha/systems/npm/packages/express/versions/4.16.4:dependents","date":"2026-11-04T20:33:38.924Z"},"hash":{"alg":"sha256","hash":"db3ed9bd5943b26da6d3ff03897f375073ed95ba3c1f944ce7699fdd58465d87","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/projects/github.com%2Fexpressjs%2Fexpress","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/projects/github.com%2Fexpressjs%2Fexpress","date":"2026-11-04T20:33:38.927Z"},"hash":{"alg":"sha256","hash":"e3663f98f9aa6eb3523a455c8f1e1720a4273ce613338875489ad2b0484652ce","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/projects/github.com%2Fnoderedis%2Fnode_redis","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/projects/github.com%2Fnoderedis%2Fnode_redis","date":"2026-11-04T20:33:38.928Z"},"hash":{"alg":"sha256","hash":"95d3b04d76d56b223c72f9faaa00f3e3e07bd89879e7afd5adbe6136445063a2","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3alpha/systems/npm/packages/async-redis/versions/1.1.7:dependents","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3alpha/systems/npm/packages/async-redis/versions/1.1.7:dependents","date":"2026-11-04T20:33:38.958Z"},"hash":{"alg":"sha256","hash":"c4083cc9b3e0f9599b176a4243916c8a79be7ce4f04521ced91cd2409ebf6d92","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/projects/github.com%2Fmoaxaca%2Fasync-redis","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/projects/github.com%2Fmoaxaca%2Fasync-redis","date":"2026-11-04T20:33:38.966Z"},"hash":{"alg":"sha256","hash":"769d6cc43136f18306666c5fef93e5de6c7de2443dced4274935d0a1132f9495","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3alpha/systems/npm/packages/cookie-parser/versions/1.4.4:dependents","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3alpha/systems/npm/packages/cookie-parser/versions/1.4.4:dependents","date":"2026-11-04T20:33:38.971Z"},"hash":{"alg":"sha256","hash":"7c37d54c51cf5196fe48f2c4fc49b944f48430dac7cf1bde97f57c69d959fb83","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/projects/github.com%2Fexpressjs%2Fcookie-parser","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/projects/github.com%2Fexpressjs%2Fcookie-parser","date":"2026-11-04T20:33:38.973Z"},"hash":{"alg":"sha256","hash":"86aae815febaff863ca9e46fbea94a31b969152b0339427b6e9351a9480c9a30","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/ky","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/ky","date":"2026-11-04T20:33:39.015Z"},"hash":{"alg":"sha256","hash":"68b1019a08d8b859b05947dd4a56034e5e4c56e94fc4b648ade358d741b47ee1","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/axios","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/axios","date":"2026-11-04T20:33:39.016Z"},"hash":{"alg":"sha256","hash":"c696a05ebb0a533a02a2148a84e44678c6bca9338df07f6cb0d88edadc819f1a","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/got","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/got","date":"2026-11-04T20:33:39.016Z"},"hash":{"alg":"sha256","hash":"920311b28c1d51e2689a15147bdef1db0192510af48bc6887ee212ce0662ce4f","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/undici","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/undici","date":"2026-11-04T20:33:39.018Z"},"hash":{"alg":"sha256","hash":"6ceb72d2f5236c274f1d99fe23a4b0e6d9ab375383bfa4c17b1cd282118bcbb7","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://registry.npmjs.org/axios/1.21.0","format":"application/json","relationship":"inputTo","dc":{"source":"https://registry.npmjs.org/axios/1.21.0","date":"2026-11-04T20:33:39.026Z"},"hash":{"alg":"sha256","hash":"397df8d76614228b6c4f6e2bf5ad1ce1695540f757f7a488e7be1e1feab2f56f","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/axios/versions/1.21.0","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/axios/versions/1.21.0","date":"2026-11-04T20:33:39.050Z"},"hash":{"alg":"sha256","hash":"56cd1b16b353cf8f1a78f9fbd5d749dbff10a4006173d91473bde5b53d66dd22","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/ky/versions/2.2.0","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/ky/versions/2.2.0","date":"2026-11-04T20:33:39.052Z"},"hash":{"alg":"sha256","hash":"834715f354b4406a911692c24899ceebe3398d6489c8e1bf4dfad1125346937e","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/got/versions/16.2.0","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/got/versions/16.2.0","date":"2026-11-04T20:33:39.053Z"},"hash":{"alg":"sha256","hash":"ae5e05e41ed53937f6bd6c37df5fa03784ac2c4f494156de67b3161059c2b9ff","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/systems/npm/packages/undici/versions/8.12.3","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/systems/npm/packages/undici/versions/8.12.3","date":"2026-11-04T20:33:39.063Z"},"hash":{"alg":"sha256","hash":"8c6bf9f64f06b934c5ef09cd92be09912efcd54a75f624b41a1c67670f8e2387","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://registry.npmjs.org/ky/2.2.0","format":"application/json","relationship":"inputTo","dc":{"source":"https://registry.npmjs.org/ky/2.2.0","date":"2026-11-04T20:33:39.084Z"},"hash":{"alg":"sha256","hash":"d2711510fd0e4947171beeca1144703812c7506bd3e1a5710e4fe018a8543b46","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3alpha/systems/npm/packages/axios/versions/1.21.0:dependents","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3alpha/systems/npm/packages/axios/versions/1.21.0:dependents","date":"2026-11-04T20:33:39.091Z"},"hash":{"alg":"sha256","hash":"9bb6ab5e0ef74330cb271d620742f444a8c3dd661c9934020ea570c0629b1dc8","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/projects/github.com%2Faxios%2Faxios","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/projects/github.com%2Faxios%2Faxios","date":"2026-11-04T20:33:39.100Z"},"hash":{"alg":"sha256","hash":"0ac114195d5cc964d98e088a4b311490949927d894174aa52b6ed1181dd9e0e9","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3alpha/systems/npm/packages/ky/versions/2.2.0:dependents","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3alpha/systems/npm/packages/ky/versions/2.2.0:dependents","date":"2026-11-04T20:33:39.123Z"},"hash":{"alg":"sha256","hash":"edf3a024990078500fa66bc10ba6f6ac8f57b2020c4dd40265a7f4edc7dae2c4","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://registry.npmjs.org/got/16.2.0","format":"application/json","relationship":"inputTo","dc":{"source":"https://registry.npmjs.org/got/16.2.0","date":"2026-11-04T20:33:39.124Z"},"hash":{"alg":"sha256","hash":"b8cc2d8f9702755356503c0f299de9a7b7b3dc3f7e535b4abdf02aec8a2a9f4b","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://registry.npmjs.org/undici/8.12.3","format":"application/json","relationship":"inputTo","dc":{"source":"https://registry.npmjs.org/undici/8.12.3","date":"2026-11-04T20:33:39.131Z"},"hash":{"alg":"sha256","hash":"003b2f06075e1b319f62570652ea64c0d55ec16c3ec3c289ac41bc96e5f3f115","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/projects/github.com%2Fsindresorhus%2Fky","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/projects/github.com%2Fsindresorhus%2Fky","date":"2026-11-04T20:33:39.131Z"},"hash":{"alg":"sha256","hash":"2dab04ab99e6975f73d631aa3931485ad1a64e6386e0afcf116421fa08607528","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3alpha/systems/npm/packages/got/versions/16.2.0:dependents","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3alpha/systems/npm/packages/got/versions/16.2.0:dependents","date":"2026-11-04T20:33:39.163Z"},"hash":{"alg":"sha256","hash":"a7740e87396041e60156f2aaea092fcb757a0d3eeede9b0f3f9ad2c303d2dc9e","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3alpha/systems/npm/packages/undici/versions/8.12.3:dependents","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3alpha/systems/npm/packages/undici/versions/8.12.3:dependents","date":"2026-11-04T20:33:39.170Z"},"hash":{"alg":"sha256","hash":"0184cf94c122d7a4a51c5c0905278c84fd032ae14e8a3ac9ac2e60f47d5fb108","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/projects/github.com%2Fnodejs%2Fundici","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/projects/github.com%2Fnodejs%2Fundici","date":"2026-11-04T20:33:39.178Z"},"hash":{"alg":"sha256","hash":"bf5f676d1d2398e15582d1ef45ee662341ab1c4438f6ac86071c314683c91033","basis":"body"}}},{"label":"c2pa.ingredient.v3","data":{"title":"https://api.deps.dev/v3/projects/github.com%2Fsindresorhus%2Fgot","format":"application/json","relationship":"inputTo","dc":{"source":"https://api.deps.dev/v3/projects/github.com%2Fsindresorhus%2Fgot","date":"2026-11-04T20:33:39.178Z"},"hash":{"alg":"sha256","hash":"a1e437fef325a6057fce9e56428040ceafa05ad072c74f72092a0ae4fd0a60e6","basis":"body"}}}]},"credential":{"@context":["https://www.w3.org/ns/credentials/v2"],"id":"urn:uuid:deed797e-c9d0-43aa-a6a7-fc4bcabee1a6","type":["VerifiableCredential","AgentOutputCredential"],"issuer":"did:web:agents.writerslogic.com","validFrom":"2026-11-04T20:33:43.865Z","credentialSubject":{"id":"urn:sha256:dcfab7d7452c0e2f571525b0d85b0c119db070316b81a3031f950262b84bfa6f","agent":"dependency-advisor","endpoint":"POST /api/v1/audit-dependencies","outputDigest":{"alg":"sha256","value":"dcfab7d7452c0e2f571525b0d85b0c119db070316b81a3031f950262b84bfa6f","canonicalization":"JCS"},"inputDigest":{"alg":"sha256","value":"37c095cb60d6201d577c99d5034f0bbca358960f712c9b38f8b4d1a614736151","canonicalization":"JCS"},"manifestDigest":{"alg":"sha256","value":"07bf96c99ae85e67dd4a99f644d07268f101356a85e8ed9433ecdf5ccda62e28","canonicalization":"JCS"},"ingredients":[{"url":"https://api.github.com/repos/star7th/htq/commits/HEAD","sha256":"4bd55e22578cbe3b02e15b73bcb3d6f24c81e015ed9b9cfaddb1ca41f760e631"},{"url":"https://api.github.com/repos/star7th/htq/git/trees/c64ac96becf9d0003774094bc5ff192bec8c70be?recursive=1","sha256":"e43c95e9a6f0f020ba2a4c998d85d9a0c0820581d639df1b4ce4be1cdbd89d20"},{"url":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/devTest.js","sha256":"8bdbba07149f6755f29a6836f01f0cb0ac14aad8a19196ea2c1eb0fb261b784b"},{"url":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/package.json","sha256":"49a697a13dcb6037bcd30929f6db6ede495891f6fa6b9b43a172f0ec8d8c6c96"},{"url":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/package-lock.json","sha256":"cae9f93afe0eb691f0d9993ef3965dd0ee874941d9d752720351b08029dbd2ac"},{"url":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/htq.js","sha256":"f6f0a6629d95887419be1b3d20386de5ab75b78ad778c7cf57fd79bca82a07af"},{"url":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/api.js","sha256":"2517602d0013ce7fc676e35478bf24f784db7fdd63eb5dedb07fe730d49b9f01"},{"url":"https://raw.githubusercontent.com/star7th/htq/c64ac96becf9d0003774094bc5ff192bec8c70be/queue.js","sha256":"4c097347995d89c5897719c006e70464ca1f0bcf069f9fa71ab5ad80166b7b5f"},{"url":"https://api.deps.dev/v3/systems/npm/packages/connect-multiparty","sha256":"e444b757240c18510202e5eb0cfde1a6867534012a09a4e36dc2fab750ed81ce"},{"url":"https://api.deps.dev/v3/systems/npm/packages/async-redis","sha256":"98fbf9af8643fd79cd96b8db2ed7bc78271308710972d12fe2085b575910ff91"},{"url":"https://api.deps.dev/v3/systems/npm/packages/cookie-parser","sha256":"c17744552f5edb0fa36fa74e027082bb0db6539d16ef69c72d3b616a59fab257"},{"url":"https://api.deps.dev/v3/systems/npm/packages/body-parser","sha256":"ab0f9d9e14ffd679ee17ac3f7a2fd118d48862a800e3f2fe9df1b1205b971eb1"},{"url":"https://api.deps.dev/v3/systems/npm/packages/node-fetch","sha256":"fe46670a3637bbb902ee8abfbfc160787cd30a7cac113d68e1570091cba441b7"},{"url":"https://api.deps.dev/v3/systems/npm/packages/express","sha256":"e002acff3c8a32b90d5d8a17ee2d267cf03c07ff5b1198a65cb45685bfea0733"},{"url":"https://api.deps.dev/v3/systems/npm/packages/connect-multiparty/versions/2.2.0","sha256":"3410abf3a69a261d931c9d5a9955bd490704f1e53133f3ec4bc22a56fd21d348"},{"url":"https://api.deps.dev/v3/systems/npm/packages/cookie-parser/versions/1.4.4","sha256":"ba379a0e7084aaed7d3ad109e0713ee29bc797c81870470923dca361c7c3116b"},{"url":"https://api.deps.dev/v3/systems/npm/packages/async-redis/versions/1.1.7","sha256":"82a68a7d6903d60160cdc32c6c7677fee77bb041432e9f790890c0aed32cc39d"},{"url":"https://api.deps.dev/v3/systems/npm/packages/body-parser/versions/1.18.3","sha256":"908030dcdff25fb33c07ca19d2ecd6df7673e350e4914fb2d36c9ef540037f7f"},{"url":"https://registry.npmjs.org/connect-multiparty/2.2.0","sha256":"ad9e0e5f511690d997d2f75f46eb92194220f6c02bc5ceb9861fe725ae0bef13"},{"url":"https://registry.npmjs.org/async-redis/1.1.7","sha256":"41ac78fa143250b21aa9e7664b0631300668b2cf72815a48074e71d7c107ef87"},{"url":"https://registry.npmjs.org/cookie-parser/1.4.4","sha256":"fdd76831befdd10e9fcb4563b706960b2a7bee1813f6c81b73dc91d42bfc8bd7"},{"url":"https://api.deps.dev/v3/systems/npm/packages/node-fetch/versions/2.6.1","sha256":"215f28cff05c1363a2ddb9ff9498274819516512f2ce185925700f206611c32d"},{"url":"https://api.deps.dev/v3/systems/npm/packages/express/versions/4.16.4","sha256":"313a6160db07ad06de12e618ed6799a7d6ae59b12241400d6dfae8764488ff12"},{"url":"https://api.deps.dev/v3/systems/npm/packages/request","sha256":"aca73075a9461205e636423047e5b05f772db825dc70c8efc15e9ff35156b4c8"},{"url":"https://api.deps.dev/v3/systems/npm/packages/redis","sha256":"041ef9f49a6fbd712a7903afeada2c958628eb1b1430af81e65fd8fa0078d89c"},{"url":"https://registry.npmjs.org/body-parser/1.18.3","sha256":"c6e9569aa1868ffeb94a1daff37e5ad594086097d01a9efa6eb3edc133710153"},{"url":"https://registry.npmjs.org/node-fetch/2.6.1","sha256":"0ac4e536ea4bb42c4cb22df1ecad5030491e75c792b4966044ee29daeb36290d"},{"url":"https://api.deps.dev/v3/systems/npm/packages/multer","sha256":"01974b2a88d181f07b53d8af3b42035ab40a9cf58bf4e949d054e9862588d06b"},{"url":"https://api.deps.dev/v3/systems/npm/packages/request/versions/2.88.0","sha256":"48da28d5c9699a7a4f31e88daa10a79aa520a79f3b14c24600c8a4e3f31bb850"},{"url":"https://registry.npmjs.org/express/4.16.4","sha256":"0987d6364d11f75a4392624edfa6b77a7ae8198d89fceea05bc2d3aaba6fd2c9"},{"url":"https://api.deps.dev/v3/systems/npm/packages/redis/versions/2.6.5","sha256":"fa953d5100fbc1ecc70da3fccfba939370343fbbb6abca684f8b215dcecbdd41"},{"url":"https://api.deps.dev/v3/systems/npm/packages/multer/versions/1.2.1","sha256":"44ab8a4ab518a5368baaf2b0e069f6fcbc6ad8942a2b4f94d9bb4d7c036375ec"},{"url":"https://registry.npmjs.org/request/2.88.0","sha256":"e98ef3d760dabb0e435af83da630fd88c1c09ecd4c671f55b66748dcc314d9e6"},{"url":"https://registry.npmjs.org/redis/2.6.5","sha256":"6589dab9c50553bccffe7bba310c7dee2c86bbfb031b76cf979c8b0472ff1eea"},{"url":"https://registry.npmjs.org/multer/1.2.1","sha256":"324ec51f740a8f92ee4d0399d7454efd225877911395db94fc1386eeef19cf71"},{"url":"https://api.osv.dev/v1/querybatch","sha256":"5596dfe48b242ad6434045f0312eb61c36b6730ab22541050b8380ed7457c4f7"},{"url":"https://api.deps.dev/v3/advisories/GHSA-r683-j2x4-v87g","sha256":"49ed303a6f820771336f94f4f9fba42a6a4360dfbe0a1e30390d9836b4ff022b"},{"url":"https://api.deps.dev/v3/advisories/GHSA-w2xw-44r3-4v9g","sha256":"b9de3c8962767649e623b135e6821456fe6990b8bd0c12f9934b09927a07cc82"},{"url":"https://api.deps.dev/v3/advisories/GHSA-27r3-jxmh-p828","sha256":"cde7275135ab8befa57350e66f9b43f326396f34f91a4978d67a030960e71fc3"},{"url":"https://api.deps.dev/v3/advisories/GHSA-35q2-47q7-3pc3","sha256":"9a5e389e27af67ea4d0e3537ff39fe1823ad43f9b740488361ca5bb5c554d315"},{"url":"https://api.deps.dev/v3/advisories/GHSA-p8p7-x288-28g6","sha256":"e098312a6ff725d2636370e3eb68a8544cdc49da1bd88de48e81ab20b23a4171"},{"url":"https://api.deps.dev/v3/advisories/GHSA-qw6h-vgh9-j6wx","sha256":"95f5d551985869715ba483152a1a804478a70bbfb569f3b9565dc6eb519b0a4c"},{"url":"https://api.deps.dev/v3/advisories/GHSA-qwcr-r2fm-qrc7","sha256":"f373828b1623dee06223bf8e1165400624d6ecaf0f38438ba1de499371a9db67"},{"url":"https://api.deps.dev/v3/advisories/GHSA-rv95-896h-c2vc","sha256":"0b1c4a4d88c3e0389c4e17b82fa31e958e4143fc56189063ba69a23f97080591"},{"url":"https://api.deps.dev/v3/advisories/GHSA-44fp-w29j-9vj5","sha256":"25bff1415ffad264831bf968f37c608047ed7d9f3020d5783f64faf813e651bd"},{"url":"https://api.deps.dev/v3/advisories/GHSA-v422-hmwv-36x6","sha256":"d9a8732f6a31f4882875106ff906c309575ac091a816d357e28a15d67a083a91"},{"url":"https://api.deps.dev/v3/advisories/GHSA-535w-7cp7-47q4","sha256":"cfde161bf04ab0fce53b6a764e33bc0e8b2ca3956186a3331eaef25546624399"},{"url":"https://api.deps.dev/v3/advisories/GHSA-5528-5vmv-3xc2","sha256":"abc1d39967f086fe70dae5708e15dc64111f1c91710a93ec72c08556a118efdd"},{"url":"https://api.deps.dev/v3alpha/systems/npm/packages/connect-multiparty/versions/2.2.0:dependents","sha256":"0776605ddd876d51ddb129fd7e396c53ec424afdc35a984e65e5b18bc3d613b7"},{"url":"https://api.deps.dev/v3alpha/systems/npm/packages/body-parser/versions/1.18.3:dependents","sha256":"495a794b90a2b55b51bc1fb9dc33426a96b1064709ba1c6c786423420d975b43"},{"url":"https://api.deps.dev/v3alpha/systems/npm/packages/request/versions/2.88.0:dependents","sha256":"338adcb94f1d8cf1b8fc6c0beffef2f18ed159a5d9bbff5d20342d993b9a6de5"},{"url":"https://api.deps.dev/v3/projects/github.com%2Frequest%2Frequest","sha256":"6f515083fc403ba175e0e134acb693fb78dcde49c127e9b9614e9a2ea3a5b78d"},{"url":"https://api.deps.dev/v3/projects/github.com%2Fexpressjs%2Fconnect-multiparty","sha256":"29714eb1c187f4c7ed99b0af15dbbd2260ac3f3312fcf0f70fc3e767934c16cb"},{"url":"https://api.deps.dev/v3/projects/github.com%2Fexpressjs%2Fbody-parser","sha256":"ff9a50facddf46527792d3bc88230030f3734c7aef6ff9888b095369f70a5555"},{"url":"https://api.deps.dev/v3alpha/systems/npm/packages/redis/versions/2.6.5:dependents","sha256":"05d3bf4dc5fdee5edcd655d58d0f6ca05ab23010c17d5006989fe699ce8d213c"},{"url":"https://api.deps.dev/v3alpha/systems/npm/packages/node-fetch/versions/2.6.1:dependents","sha256":"58c038f55e9fe203ea26f080331e41e3c1ea6be00174730d3aa816c366e5da76"},{"url":"https://api.deps.dev/v3/projects/github.com%2Fbitinn%2Fnode-fetch","sha256":"731202eaa335171b1475f25ade344c0bb09d63184d4413c6ab14be211d449d92"},{"url":"https://api.deps.dev/v3alpha/systems/npm/packages/express/versions/4.16.4:dependents","sha256":"db3ed9bd5943b26da6d3ff03897f375073ed95ba3c1f944ce7699fdd58465d87"},{"url":"https://api.deps.dev/v3/projects/github.com%2Fexpressjs%2Fexpress","sha256":"e3663f98f9aa6eb3523a455c8f1e1720a4273ce613338875489ad2b0484652ce"},{"url":"https://api.deps.dev/v3/projects/github.com%2Fnoderedis%2Fnode_redis","sha256":"95d3b04d76d56b223c72f9faaa00f3e3e07bd89879e7afd5adbe6136445063a2"},{"url":"https://api.deps.dev/v3alpha/systems/npm/packages/async-redis/versions/1.1.7:dependents","sha256":"c4083cc9b3e0f9599b176a4243916c8a79be7ce4f04521ced91cd2409ebf6d92"},{"url":"https://api.deps.dev/v3/projects/github.com%2Fmoaxaca%2Fasync-redis","sha256":"769d6cc43136f18306666c5fef93e5de6c7de2443dced4274935d0a1132f9495"},{"url":"https://api.deps.dev/v3alpha/systems/npm/packages/cookie-parser/versions/1.4.4:dependents","sha256":"7c37d54c51cf5196fe48f2c4fc49b944f48430dac7cf1bde97f57c69d959fb83"},{"url":"https://api.deps.dev/v3/projects/github.com%2Fexpressjs%2Fcookie-parser","sha256":"86aae815febaff863ca9e46fbea94a31b969152b0339427b6e9351a9480c9a30"},{"url":"https://api.deps.dev/v3/systems/npm/packages/ky","sha256":"68b1019a08d8b859b05947dd4a56034e5e4c56e94fc4b648ade358d741b47ee1"},{"url":"https://api.deps.dev/v3/systems/npm/packages/axios","sha256":"c696a05ebb0a533a02a2148a84e44678c6bca9338df07f6cb0d88edadc819f1a"},{"url":"https://api.deps.dev/v3/systems/npm/packages/got","sha256":"920311b28c1d51e2689a15147bdef1db0192510af48bc6887ee212ce0662ce4f"},{"url":"https://api.deps.dev/v3/systems/npm/packages/undici","sha256":"6ceb72d2f5236c274f1d99fe23a4b0e6d9ab375383bfa4c17b1cd282118bcbb7"},{"url":"https://registry.npmjs.org/axios/1.21.0","sha256":"397df8d76614228b6c4f6e2bf5ad1ce1695540f757f7a488e7be1e1feab2f56f"},{"url":"https://api.deps.dev/v3/systems/npm/packages/axios/versions/1.21.0","sha256":"56cd1b16b353cf8f1a78f9fbd5d749dbff10a4006173d91473bde5b53d66dd22"},{"url":"https://api.deps.dev/v3/systems/npm/packages/ky/versions/2.2.0","sha256":"834715f354b4406a911692c24899ceebe3398d6489c8e1bf4dfad1125346937e"},{"url":"https://api.deps.dev/v3/systems/npm/packages/got/versions/16.2.0","sha256":"ae5e05e41ed53937f6bd6c37df5fa03784ac2c4f494156de67b3161059c2b9ff"},{"url":"https://api.deps.dev/v3/systems/npm/packages/undici/versions/8.12.3","sha256":"8c6bf9f64f06b934c5ef09cd92be09912efcd54a75f624b41a1c67670f8e2387"},{"url":"https://registry.npmjs.org/ky/2.2.0","sha256":"d2711510fd0e4947171beeca1144703812c7506bd3e1a5710e4fe018a8543b46"},{"url":"https://api.deps.dev/v3alpha/systems/npm/packages/axios/versions/1.21.0:dependents","sha256":"9bb6ab5e0ef74330cb271d620742f444a8c3dd661c9934020ea570c0629b1dc8"},{"url":"https://api.deps.dev/v3/projects/github.com%2Faxios%2Faxios","sha256":"0ac114195d5cc964d98e088a4b311490949927d894174aa52b6ed1181dd9e0e9"},{"url":"https://api.deps.dev/v3alpha/systems/npm/packages/ky/versions/2.2.0:dependents","sha256":"edf3a024990078500fa66bc10ba6f6ac8f57b2020c4dd40265a7f4edc7dae2c4"},{"url":"https://registry.npmjs.org/got/16.2.0","sha256":"b8cc2d8f9702755356503c0f299de9a7b7b3dc3f7e535b4abdf02aec8a2a9f4b"},{"url":"https://registry.npmjs.org/undici/8.12.3","sha256":"003b2f06075e1b319f62570652ea64c0d55ec16c3ec3c289ac41bc96e5f3f115"},{"url":"https://api.deps.dev/v3/projects/github.com%2Fsindresorhus%2Fky","sha256":"2dab04ab99e6975f73d631aa3931485ad1a64e6386e0afcf116421fa08607528"},{"url":"https://api.deps.dev/v3alpha/systems/npm/packages/got/versions/16.2.0:dependents","sha256":"a7740e87396041e60156f2aaea092fcb757a0d3eeede9b0f3f9ad2c303d2dc9e"},{"url":"https://api.deps.dev/v3alpha/systems/npm/packages/undici/versions/8.12.3:dependents","sha256":"0184cf94c122d7a4a51c5c0905278c84fd032ae14e8a3ac9ac2e60f47d5fb108"},{"url":"https://api.deps.dev/v3/projects/github.com%2Fnodejs%2Fundici","sha256":"bf5f676d1d2398e15582d1ef45ee662341ab1c4438f6ac86071c314683c91033"},{"url":"https://api.deps.dev/v3/projects/github.com%2Fsindresorhus%2Fgot","sha256":"a1e437fef325a6057fce9e56428040ceafa05ad072c74f72092a0ae4fd0a60e6"}],"payment":{"scheme":"api-key","network":"eip155:8453","payer":"sample"}},"proof":{"type":"DataIntegrityProof","cryptosuite":"eddsa-jcs-2022","created":"2026-11-04T20:33:43.865Z","verificationMethod":"did:web:agents.writerslogic.com#key-1","proofPurpose":"assertionMethod","proofValue":"z5oAD6Mdk6kHJ2KhBczLJjtWQs9TLZhpmpUP7ZMcoA4z4GBy3z98dQH2hXSv6F39BzYx6tNXka65urrDLMBq1Wxhn"}},"ethSignature":{"type":"EIP-191","signer":"did:pkh:eip155:8453:0x3DBd42560cA7a7E448A2c7DfC9E785526189411f","address":"0x3DBd42560cA7a7E448A2c7DfC9E785526189411f","message":"writerslogic-provenance:897109e7992244cb34d6d405bcf91758b2951138e7d3ab0b26d92358d60680d5","signature":"0x839dd153b3c1d52383365240fd79e55b671231a34cc1fe935232d06c6c8d99453c1150714afaf9aa305a34f0cf7d9a35ae7dd537468daba225f59d382f8de6da1c"}}}