Maybe good to ignore test from Security and quality since this dir it will not be published

[helio-frota]

Currently it shows 649 vulnerabilities mostly (if not all) are based on test directory.
According to files in package.json, test will not be published, then makes no much sense to have those kind of warnings/alerts, unless team want to fix them from time to time

➜  trustify-da-javascript-client git:(main) ✗ tar -tzf trustify-da-trustify-da-javascript-client-0.3.0.tgz 
package/LICENSE
package/dist/src/analysis.js
package/dist/src/providers/base_java.js
package/dist/src/providers/base_javascript.js
package/dist/src/providers/base_pyproject.js
package/dist/src/batch_opts.js
package/dist/src/cli.js
package/dist/src/cyclone_dx_sbom.js
package/dist/src/providers/golang_gomodules.js
package/dist/src/providers/gomod_parser.js
package/dist/src/oci_image/images.js
package/dist/src/index.js
package/dist/src/license/index.js
package/dist/src/providers/java_gradle_groovy.js
package/dist/src/providers/java_gradle_kotlin.js
package/dist/src/providers/java_gradle.js
package/dist/src/providers/java_maven.js
package/dist/src/providers/javascript_npm.js
package/dist/src/providers/javascript_pnpm.js
package/dist/src/providers/javascript_yarn.js
package/dist/src/license/license_utils.js
package/dist/src/license/licenses_api.js
package/dist/src/providers/manifest.js
package/dist/src/oci_image/platform.js
package/dist/src/license/project_license.js
package/dist/src/provider.js
package/dist/src/providers/python_controller.js
package/dist/src/providers/python_pip.js
package/dist/src/providers/python_poetry.js
package/dist/src/providers/python_uv.js
package/dist/src/providers/requirements_parser.js
package/dist/src/providers/rust_cargo.js
package/dist/src/sbom.js
package/dist/src/tools.js
package/dist/src/oci_image/utils.js
package/dist/src/workspace.js
package/dist/src/providers/processors/yarn_berry_processor.js
package/dist/src/providers/processors/yarn_classic_processor.js
package/dist/src/providers/processors/yarn_processor.js
package/dist/package.json
package/package.json
package/README.md
package/config/config.properties
package/dist/src/analysis.d.ts
package/dist/src/providers/base_java.d.ts
package/dist/src/providers/base_javascript.d.ts
package/dist/src/providers/base_pyproject.d.ts
package/dist/src/batch_opts.d.ts
package/dist/src/cli.d.ts
package/dist/src/cyclone_dx_sbom.d.ts
package/dist/src/providers/golang_gomodules.d.ts
package/dist/src/providers/gomod_parser.d.ts
package/dist/src/oci_image/images.d.ts
package/dist/src/index.d.ts
package/dist/src/license/index.d.ts
package/dist/src/providers/java_gradle_groovy.d.ts
package/dist/src/providers/java_gradle_kotlin.d.ts
package/dist/src/providers/java_gradle.d.ts
package/dist/src/providers/java_maven.d.ts
package/dist/src/providers/javascript_npm.d.ts
package/dist/src/providers/javascript_pnpm.d.ts
package/dist/src/providers/javascript_yarn.d.ts
package/dist/src/license/license_utils.d.ts
package/dist/src/license/licenses_api.d.ts
package/dist/src/providers/manifest.d.ts
package/dist/src/oci_image/platform.d.ts
package/dist/src/license/project_license.d.ts
package/dist/src/provider.d.ts
package/dist/src/providers/python_controller.d.ts
package/dist/src/providers/python_pip.d.ts
package/dist/src/providers/python_poetry.d.ts
package/dist/src/providers/python_uv.d.ts
package/dist/src/providers/requirements_parser.d.ts
package/dist/src/providers/rust_cargo.d.ts
package/dist/src/sbom.d.ts
package/dist/src/tools.d.ts
package/dist/src/oci_image/utils.d.ts
package/dist/src/workspace.d.ts
package/dist/src/providers/processors/yarn_berry_processor.d.ts
package/dist/src/providers/processors/yarn_classic_processor.d.ts
package/dist/src/providers/processors/yarn_processor.d.ts
package/dist/src/providers/tree-sitter-gomod.wasm
package/dist/src/providers/tree-sitter-requirements.wasm

[helio-frota]

alright I noticed the code already have https://github.com/guacsec/trustify-da-javascript-client/blob/main/.github/dependabot.yml#L8C5-L8C18

for some reason this is not working ... maybe this is related to other sub-paths probably