Bump bazel-contrib/setup-bazel from 0.9.0 to 0.9.1 · eisop/checker-framework@3932203

Triggered via pull request October 31, 2024 20:53

opened #965

Status Failure

Total duration 10m 49s

Artifacts –

dependency-review.yml

on: pull_request

1 error and 7 warnings

Dependency review detected vulnerable packages.

maven/com.diffplug.durian:durian-collect has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.

maven/com.diffplug.durian:durian-core has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.

maven/com.diffplug.durian:durian-io has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.

maven/org.jetbrains.kotlin:kotlin-stdlib has an OpenSSF Scorecard of 2.4, which is less than this repository's threshold of 3.

maven/org.jetbrains.kotlin:kotlin-stdlib-common has an OpenSSF Scorecard of 2.4, which is less than this repository's threshold of 3.

maven/org.jetbrains.kotlin:kotlin-stdlib-jdk7 has an OpenSSF Scorecard of 2.4, which is less than this repository's threshold of 3.

maven/org.jetbrains.kotlin:kotlin-stdlib-jdk8 has an OpenSSF Scorecard of 2.4, which is less than this repository's threshold of 3.