Worked on the ossf/malicious-packages repository to refine security advisories for open source package management. Focused on improving the accuracy of alerts by narrowing the SEMVER scope for the @snapon/design-system-react advisory, ensuring that only compromised versions are flagged and reducing false positives. This change was implemented through a targeted bug fix using JSON to update advisory metadata, with careful tracking of related issues and pull requests. Applied skills in security auditing and package management to enhance the quality of security signals and streamline remediation processes, contributing to more efficient and reliable OSS security monitoring within the project’s monthly cycle.