repository for vulnerability check bootstrap: CVE-2018-14041 jQuery: CVE-2015-9251 prototype.js: CVE-2008-7220 and CVE-2007-2383 maybe GitHub can't detect prototype.js's vulnerabilities