xiaoshu-app/docs/qa/launch-fixes-2026-10-13/dependency-summary.json

{
  "production": {
    "info": 0,
    "low": 0,
    "moderate": 0,
    "high": 0,
    "critical": 0,
    "total": 0
  },
  "fullTree": {
    "info": 0,
    "low": 0,
    "moderate": 0,
    "high": 12,
    "critical": 0,
    "total": 12
  },
  "advisories": [
    {
      "name": "braces",
      "title": "braces vulnerable to stack-exhaustion denial of service through deeply nested patterns",
      "url": "https://github.com/advisories/GHSA-vfj7-8cjw-p6xm",
      "severity": "high",
      "range": "<=3.0.3"
    }
  ],
  "scope": "Remaining braces entries are build/test dependencies; no fixed release in registry at review time. Local dev/test servers bind loopback; only trusted repository glob patterns used."
}