[Snyk] Security upgrade @openfga/sdk from 0.7.0 to 0.8.0

[poovamraj]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Cross-site Scripting (XSS) SNYK-JS-AXIOS-6671926	75

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)

[stacklok-cloud]

Minder Vulnerability Report ✅

Minder analyzed this PR and found it does not add any new vulnerable dependencies.

Vulnerability scan of 68038105:

• 🐞 vulnerable packages: 0
• 🛠 fixes available for: 0

[stacklok-cloud]

Dependency Information

Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.

📦 Dependency: @openfga/sdk

Trusty Score: 0

📦 Dependency: axios

Trusty Score: 0

Scoring details

Component	Score
Package activity	9
Repository activity	9.7
User activity	8.2
Provenance	verified_provenance_match

Proof of Origin (Provenance)

This package can be linked back to its source code using a historical provenance map.

We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.

Published package versions	107
Number of git tags or releases	150
Versions matched to tags or releases	80

This package has been digitally signed using sigtore.

Source repository	https://github.com/axios/axios
Cerificate Issuer	CN=sigstore-intermediate,O=sigstore.dev
GitHub action workflow	.github/workflows/publish.yml
Rekor (public ledger) entry	https://search.sigstore.dev/?logIndex=153252145

Alternatives

Package	Score	Description
got	0
http	0
fetch	0

[github-actions]

PR Preview Action v1.4.8
Preview removed because the pull request was closed.
2025-01-15 14:20 UTC