failRisk: Vulnerabilities

Scanned:

GitHub Copilot app modernization

Artifact:

latest

Top 10k

Upgrade and migrate your Java applications to Azure

License: unknown

Published:

Publisher: vscjava

Visit Github

See on Visual Studio Code

SAFE Assessment

Compliance

Licenses

No license compliance issues

Secrets

2 plaintext private keys found

Security

Vulnerabilities

6 severe vulnerabilities exploited

Hardening

4 execution hijacking concerns

Threats

Tampering

No evidence of software tampering

Malware

No evidence of malware inclusion

Spectra Assure analysis detects 6 more components

Learn more about Spectra Assure

Below is the list of direct dependencies declared by the software package through its manifest.

Name

Version

@azure/identity

^4.4.1

@azure/keyvault-secrets

^4.9.0

@langchain/core

^0.2.27

@langchain/openai

^0.3.14

@microsoft/vscode-azext-utils

^2.6.4

^20.0.2

^1.1.12

^0.2.7

^10.0.0

@vscode-elements/elements

^1.16.0

Did you know...

... that you can use ReversingLabs’ Spectra Assure platform to perform regular risk assessments of packages you develop in-house?

We recommend continuous software safeness monitoring through CI/CD integrations and pre-release/deployment checks. In addition to basic package information found on this page our platform offers rich reports for developers and DevSecOps that help them remediate all reported issues.