Scorecard is not listing Node and NodeRED versions which are present in package.json

Just uploaded an updated node. The scorecard says node and NodeRED versions are missing. But the package.json lists(only relevant parts:

  "name": "@insectos/ssh-exec",
  "version": "0.3.2",
  "engines": {
    "node": ">=18.0.0"
  "node-red": {
    "version": ">=3.0.0",
    "nodes": {
      "ssh-exec": "ssh-exec/ssh-exec.js"

What do I miss here?

I have no experience using scorecard, but could it be that it expects node and node-red to be present as dependencies entries?

No - that is not it works.

@Stwissel there is a lingering bug where the scorecard appears to evaluate an older version of a module than the one just published. I suspect it's a timing issue between all the moving parts, but I haven't been able to reproduce locally to figure out.