Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 12.1.9
Report Generated On: Thu, 27 Nov 2025 22:51:12 +0100
Dependencies Scanned: 6 (6 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
NVD API Last Checked: 2025-11-27T22:19:20+01
NVD API Last Modified: 2025-11-27T18:15:46Z

Summary

Summary of Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Confidence	Evidence Count
@datapos/datapos-shared:0.3.252		pkg:npm/%40datapos%2Fdatapos-shared@0.3.252		7
csv-parse:6.1.0	cpe:2.3:a:csv-parse_project:csv-parse:6.1.0:::::::*	pkg:npm/csv-parse@6.1.0	Highest	7
date-fns:4.1.0		pkg:npm/date-fns@4.1.0		5
highcharts:12.4.0	cpe:2.3:a:highcharts:highcharts:12.4.0:::::::*	pkg:npm/highcharts@12.4.0	Highest	8
nanoid:5.1.6	cpe:2.3:a:nanoid_project:nanoid:5.1.6:::::::*	pkg:npm/nanoid@5.1.6	Highest	6
zod:4.1.13	cpe:2.3:a:zod:zod:4.1.13:::::::*	pkg:npm/zod@4.1.13	Highest	8

Dependencies (vulnerable)

@datapos/datapos-shared:0.3.252

Description:

A TypeScript library containing common declarations and utilities used across other Data Positioning repositories.

License:

MIT

File Path: /Users/jonathanterrell/Data Positioning/GitHub/tools/datapos-tool-highcharts/package-lock.json?datapos-tool-highcharts:0.0.47/@datapos/datapos-shared:0.3.252

Referenced In Project/Scope: @datapos/datapos-tool-highcharts:0.0.47

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/data-positioning/datapos-shared/issues	Highest
Vendor	package.json	description	A TypeScript library containing common declarations and utilities used across other Data Positioning repositories.	Highest
Vendor	package.json	homepage	https://www.datapos.app	Highest
Vendor	package.json	name	@datapos/datapos-shared	Highest
Vendor	package.json	name	@datapos/datapos-shared_project	Highest
Product	package.json	name	@datapos/datapos-shared	Highest
Version	package.json	version	0.3.252	Highest

Identifiers

pkg:npm/%40datapos%2Fdatapos-shared@0.3.252 (Confidence:Highest)

csv-parse:6.1.0

Description:

CSV parsing implementing the Node.js `stream.Transform` API

License:

MIT

File Path: /Users/jonathanterrell/Data Positioning/GitHub/tools/datapos-tool-highcharts/package-lock.json?datapos-tool-highcharts:0.0.47/csv-parse:6.1.0

Referenced In Project/Scope: @datapos/datapos-tool-highcharts:0.0.47

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	David Worms <david@adaltas.com> (https://www.adaltas.com)	Highest
Vendor	package.json	description	CSV parsing implementing the Node.js `stream.Transform` API	Highest
Vendor	package.json	homepage	https://csv.js.org/parse	Highest
Vendor	package.json	name	csv-parse	Highest
Vendor	package.json	name	csv-parse_project	Highest
Product	package.json	name	csv-parse	Highest
Version	package.json	version	6.1.0	Highest

Identifiers

pkg:npm/csv-parse@6.1.0 (Confidence:Highest)
cpe:2.3:a:csv-parse_project:csv-parse:6.1.0:*:*:*:*:*:*:* (Confidence:Highest)

date-fns:4.1.0

Description:

Modern JavaScript date utility library

License:

MIT

File Path: /Users/jonathanterrell/Data Positioning/GitHub/tools/datapos-tool-highcharts/package-lock.json?datapos-tool-highcharts:0.0.47/date-fns:4.1.0

Referenced In Project/Scope: @datapos/datapos-tool-highcharts:0.0.47

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	Modern JavaScript date utility library	Highest
Vendor	package.json	name	date-fns	Highest
Vendor	package.json	name	date-fns_project	Highest
Product	package.json	name	date-fns	Highest
Version	package.json	version	4.1.0	Highest

Identifiers

pkg:npm/date-fns@4.1.0 (Confidence:Highest)

highcharts:12.4.0

Description:

JavaScript charting framework

License:

https://www.highcharts.com/license

File Path: /Users/jonathanterrell/Data Positioning/GitHub/tools/datapos-tool-highcharts/package-lock.json?datapos-tool-highcharts:0.0.47/highcharts:12.4.0

Referenced In Project/Scope: @datapos/datapos-tool-highcharts:0.0.47

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Highsoft AS <support@highcharts.com> (http://www.highcharts.com/about)	Highest
Vendor	package.json	bugs	https://github.com/highcharts/highcharts/issues	Highest
Vendor	package.json	description	JavaScript charting framework	Highest
Vendor	package.json	homepage	http://www.highcharts.com	Highest
Vendor	package.json	name	highcharts	Highest
Vendor	package.json	name	highcharts_project	Highest
Product	package.json	name	highcharts	Highest
Version	package.json	version	12.4.0	Highest

Identifiers

pkg:npm/highcharts@12.4.0 (Confidence:Highest)
cpe:2.3:a:highcharts:highcharts:12.4.0:*:*:*:*:*:*:* (Confidence:Highest)

nanoid:5.1.6

Description:

A tiny (118 bytes), secure URL-friendly unique string ID generator

License:

MIT

File Path: /Users/jonathanterrell/Data Positioning/GitHub/tools/datapos-tool-highcharts/package-lock.json?datapos-tool-highcharts:0.0.47/nanoid:5.1.6

Referenced In Project/Scope: @datapos/datapos-tool-highcharts:0.0.47

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Andrey Sitnik <andrey@sitnik.ru>	Highest
Vendor	package.json	description	A tiny (118 bytes), secure URL-friendly unique string ID generator	Highest
Vendor	package.json	name	nanoid	Highest
Vendor	package.json	name	nanoid_project	Highest
Product	package.json	name	nanoid	Highest
Version	package.json	version	5.1.6	Highest

Identifiers

pkg:npm/nanoid@5.1.6 (Confidence:Highest)
cpe:2.3:a:nanoid_project:nanoid:5.1.6:*:*:*:*:*:*:* (Confidence:Highest)

zod:4.1.13

Description:

TypeScript-first schema declaration and validation library with static type inference

License:

MIT

File Path: /Users/jonathanterrell/Data Positioning/GitHub/tools/datapos-tool-highcharts/package-lock.json?datapos-tool-highcharts:0.0.47/zod:4.1.13

Referenced In Project/Scope: @datapos/datapos-tool-highcharts:0.0.47

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Colin McDonnell <zod@colinhacks.com>	Highest
Vendor	package.json	bugs.url	https://github.com/colinhacks/zod/issues	Highest
Vendor	package.json	description	TypeScript-first schema declaration and validation library with static type inference	Highest
Vendor	package.json	homepage	https://zod.dev	Highest
Vendor	package.json	name	zod	Highest
Vendor	package.json	name	zod_project	Highest
Product	package.json	name	zod	Highest
Version	package.json	version	4.1.13	Highest

Identifiers

pkg:npm/zod@4.1.13 (Confidence:Highest)
cpe:2.3:a:zod:zod:4.1.13:*:*:*:*:*:*:* (Confidence:Highest)

How to read the report | Suppressing false positives | Getting Help: github issues

Project: @datapos/datapos-tool-highcharts

Summary

Dependencies (vulnerable)

@datapos/datapos-shared:0.3.252

Evidence

Identifiers

csv-parse:6.1.0

Evidence

Identifiers

date-fns:4.1.0

Evidence

Identifiers

highcharts:12.4.0

Evidence

Identifiers

nanoid:5.1.6

Evidence

Identifiers

zod:4.1.13

Evidence

Identifiers