Dependency review detected vulnerable packages.

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/dependency-review-action@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261, step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

maven/com.vladsch.flexmark:flexmark-ext-attributes has an OpenSSF Scorecard of 1.2, which is less than this repository's threshold of 3.

maven/com.vladsch.flexmark:flexmark-ext-aside has an OpenSSF Scorecard of 1.2, which is less than this repository's threshold of 3.

maven/com.vladsch.flexmark:flexmark-ext-anchorlink has an OpenSSF Scorecard of 1.2, which is less than this repository's threshold of 3.

maven/com.vladsch.flexmark:flexmark-ext-admonition has an OpenSSF Scorecard of 1.2, which is less than this repository's threshold of 3.

maven/com.vladsch.flexmark:flexmark-ext-abbreviation has an OpenSSF Scorecard of 1.2, which is less than this repository's threshold of 3.

maven/com.vladsch.flexmark:flexmark-all has an OpenSSF Scorecard of 1.2, which is less than this repository's threshold of 3.

maven/com.vladsch.flexmark:flexmark has an OpenSSF Scorecard of 1.2, which is less than this repository's threshold of 3.

maven/com.openhtmltopdf:openhtmltopdf-rtl-support has an OpenSSF Scorecard of 2.4, which is less than this repository's threshold of 3.

maven/com.openhtmltopdf:openhtmltopdf-pdfbox has an OpenSSF Scorecard of 2.4, which is less than this repository's threshold of 3.