Scorecard is not listing Node and NodeRED versions which are present in package.json

[Stwissel]

Just uploaded an updated node. The scorecard says node and NodeRED versions are missing. But the package.json lists(only relevant parts:

{
  "name": "@insectos/ssh-exec",
  "version": "0.3.2",
  "engines": {
    "node": ">=18.0.0"
  },
  "node-red": {
    "version": ">=3.0.0",
    "nodes": {
      "ssh-exec": "ssh-exec/ssh-exec.js"
    }
  }
}

What do I miss here?

[hlovdal]

I have no experience using scorecard, but could it be that it expects node and node-red to be present as dependencies entries?

[knolleary]

@hlovdal

but could it be that it expects node and node-red to be present as dependencies entries?

No - that is not it works.

@Stwissel there is a lingering bug where the scorecard appears to evaluate an older version of a module than the one just published. I suspect it's a timing issue between all the moving parts, but I haven't been able to reproduce locally to figure out.