possibility of considering Bulma 1.0.0 instead of 0.9.4?

[ElectricNroff]

cve-website/package.json

Line 24 in 7bfa321

"bulma": "^0.9.4",

specifies major version 0 of Bulma, but 1.0.0 exists: https://github.com/jgthms/bulma/releases/tag/1.0.0

In some cases, a release of 1.0.0 means that 0.x versions are deprecated and will not receive security updates, and thus there may be a nonzero value if 1.0.0 could be adopted at some point in the future. However, there is no known specific announcement of 0.x deprecation, and Bulma is not the type of package for which security issues are frequent.