Add JSON support

[felickz]

This pull request adds several new package dependencies to the project, specifically focusing on libraries that are known to have vulnerabilities. These additions are reflected in both the central package version management file and the VulnerableLibrary project file.

[github-actions]

Dependency Review

The following issues were found:

• ❌ 1 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ✅ 0 package(s) with unknown licenses.

See the Details below.

Vulnerabilities

VulnerableLibrary/VulnerableLibrary.csproj

Name	Version	Vulnerability	Severity
RestSharp	111.4.1	CRLF Injection in RestSharp's `RestRequest.AddHeader` method	moderate

OpenSSF Scorecard

Package	Version	Score	Details
nuget/System.Text.Json	8.0.0	🟢 5.6	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 10 30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Packaging ⚠️ -1 packaging workflow not detected Security-Policy 🟢 10 security policy file detected License 🟢 10 license file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Signed-Releases ⚠️ -1 no releases found Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches Fuzzing ⚠️ 0 project is not fuzzed Vulnerabilities 🟢 10 0 existing vulnerabilities detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Binary-Artifacts ⚠️ 0 binaries present in source code Pinned-Dependencies ⚠️ 2 dependency not pinned by hash detected -- score normalized to 2
nuget/RestSharp	111.4.1	🟢 4.5	Details Check Score Reason Code-Review 🟢 3 Found 9/25 approved changesets -- score normalized to 3 Maintained 🟢 9 4 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 9 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Binary-Artifacts 🟢 10 no binaries found in the repo Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Pinned-Dependencies ⚠️ 1 dependency not pinned by hash detected -- score normalized to 1 Signed-Releases ⚠️ -1 no releases found Packaging 🟢 10 packaging workflow detected Security-Policy ⚠️ 0 security policy file not detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Vulnerabilities ⚠️ 0 22 existing vulnerabilities detected
nuget/System.Text.Encodings.Web	8.0.0	🟢 5.6	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Maintained 🟢 10 30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Packaging ⚠️ -1 packaging workflow not detected Security-Policy 🟢 10 security policy file detected License 🟢 10 license file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Signed-Releases ⚠️ -1 no releases found Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches Fuzzing ⚠️ 0 project is not fuzzed Vulnerabilities 🟢 10 0 existing vulnerabilities detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Binary-Artifacts ⚠️ 0 binaries present in source code Pinned-Dependencies ⚠️ 2 dependency not pinned by hash detected -- score normalized to 2

Scanned Files

• VulnerableLibrary/VulnerableLibrary.csproj

[felickz]

Dependency Review

The following issues were found:

• ❌ 1 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ✅ 0 package(s) with unknown licenses.

See the Details below.

Vulnerabilities

VulnerableLibrary/VulnerableLibrary.csproj

Name Version Vulnerability Severity
RestSharp 111.4.1 CRLF Injection in RestSharp's RestRequest.AddHeader method moderate

OpenSSF Scorecard

Package Version Score Details
nuget/System.Text.Json 8.0.0 🟢 5.6
Details
nuget/RestSharp 111.4.1 🟢 4.5
Details
nuget/System.Text.Encodings.Web 8.0.0 🟢 5.6
Details

Scanned Files

• VulnerableLibrary/VulnerableLibrary.csproj

@copilot 👀

[Copilot]

@felickz I've opened a new pull request, #4, to work on those changes. Once the pull request is ready, I'll request review from you.