{"date":"2026-10-12T21:59:12Z","repo":{"name":"github.com/awslabs/mcp","commit":"e1abc4b3b16a6da4c86ccbfc89de7bd864c5679e"},"scorecard":{"version":"v5.5.0","commit":"c395761df6afe1a69e476bc60a013a94bcbc153f"},"score":8.5,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained","short":"Determines if the project is \"actively maintained\"."}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review","short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged."}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yml:1"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool","short":"Determines if the project uses a dependency update tool."}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow","short":"Determines if the project's GitHub Action workflows avoid dangerous patterns."}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Warn: jobLevel 'contents' permission set to 'write': .github/workflows/aws-api-mcp-upgrade-version.yml:33","Info: jobLevel 'contents' permission set to 'read': .github/workflows/bandit.yml:26","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/bandit.yml:27","Info: jobLevel 'contents' permission set to 'read': .github/workflows/cfn_nag.yml:19","Info: jobLevel 'contents' permission set to 'read': .github/workflows/check-gh-pages-builds.yml:14","Info: jobLevel 'contents' permission set to 'read': .github/workflows/check-license-header.yml:12","Info: jobLevel 'contents' permission set to 'read': .github/workflows/checkov.yml:19","Info: jobLevel 'packages' permission set to 'read': .github/workflows/codeql.yml:36","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:39","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:40","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dependency-review-action.yml:10","Info: jobLevel 'contents' permission set to 'read': .github/workflows/gh-pages.yml:18","Info: jobLevel 'contents' permission set to 'read': .github/workflows/merge-prevention.yml:38","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/merge-prevention.yml:39","Info: jobLevel 'contents' permission set to 'read': .github/workflows/powershell.yml:25","Info: jobLevel 'contents' permission set to 'read': .github/workflows/pre-commit.yml:11","Info: jobLevel 'contents' permission set to 'read': .github/workflows/pre-commit.yml:37","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/pull-request-lint.yml:22","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/pull-request-lint.yml:45","Info: jobLevel 'contents' permission set to 'read': .github/workflows/python.yml:14","Info: jobLevel 'contents' permission set to 'read': .github/workflows/python.yml:73","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/python.yml:74","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/python.yml:75","Info: jobLevel 'actions' permission set to 'read': .github/workflows/python.yml:76","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release-initiate-branch.yml:172","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release-initiate-branch.yml:273","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release-initiate-branch.yml:36","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release-initiate-branch.yml:116","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release-merge-tag.yml:39","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/release-merge-tag.yml:62","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release-merge-tag.yml:61","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yml:84","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:138","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:266","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:299","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yml:412","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:35","Info: jobLevel 'contents' permission set to 'read': .github/workflows/scanners.yml:15","Info: jobLevel 'contents' permission set to 'read': .github/workflows/scorecard-analysis.yml:18","Info: jobLevel 'contents' permission set to 'read': .github/workflows/semgrep.yml:19","Info: jobLevel 'contents' permission set to 'read': .github/workflows/stale.yml:11","Info: jobLevel 'contents' permission set to 'read': .github/workflows/trivy.yml:43","Info: jobLevel 'contents' permission set to 'read': .github/workflows/trivy.yml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/typescript.yml:12","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:14","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:15","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:16","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:24","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:26","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:18","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:19","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:21","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:22","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:12","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:13","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:20","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:25","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:17","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:23","Info: found token with 'none' permissions: .github/workflows/bandit.yml:1","Info: found token with 'none' permissions: .github/workflows/cfn_nag.yml:1","Info: found token with 'none' permissions: .github/workflows/check-gh-pages-builds.yml:1","Info: found token with 'none' permissions: .github/workflows/check-license-header.yml:1","Info: found token with 'none' permissions: .github/workflows/checkov.yml:1","Info: found token with 'none' permissions: .github/workflows/codeql.yml:1","Info: found token with 'none' permissions: .github/workflows/dependency-review-action.yml:1","Info: found token with 'none' permissions: .github/workflows/gh-pages.yml:1","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:28","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:31","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:20","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:22","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:24","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:25","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:17","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:21","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:23","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:27","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:30","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:18","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:29","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:19","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:26","Info: found token with 'none' permissions: .github/workflows/powershell.yml:1","Info: found token with 'none' permissions: .github/workflows/pre-commit.yml:1","Info: found token with 'none' permissions: .github/workflows/pull-request-lint.yml:1","Info: found token with 'none' permissions: .github/workflows/python.yml:1","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:17","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:18","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:19","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:21","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:24","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:14","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:15","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:26","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:13","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:20","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:22","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:27","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:16","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:23","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:25","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:22","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:25","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:27","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:31","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:17","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:18","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:19","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:20","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:23","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:24","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:29","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:30","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:21","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:26","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:28","Info: found token with 'none' permissions: .github/workflows/release.yml:15","Info: found token with 'none' permissions: .github/workflows/release.yml:23","Info: found token with 'none' permissions: .github/workflows/release.yml:26","Info: found token with 'none' permissions: .github/workflows/release.yml:27","Info: found token with 'none' permissions: .github/workflows/release.yml:28","Info: found token with 'none' permissions: .github/workflows/release.yml:14","Info: found token with 'none' permissions: .github/workflows/release.yml:16","Info: found token with 'none' permissions: .github/workflows/release.yml:18","Info: found token with 'none' permissions: .github/workflows/release.yml:17","Info: found token with 'none' permissions: .github/workflows/release.yml:19","Info: found token with 'none' permissions: .github/workflows/release.yml:20","Info: found token with 'none' permissions: .github/workflows/release.yml:22","Info: found token with 'none' permissions: .github/workflows/release.yml:25","Info: found token with 'none' permissions: .github/workflows/release.yml:21","Info: found token with 'none' permissions: .github/workflows/release.yml:24","Info: found token with 'none' permissions: .github/workflows/scanners.yml:1","Info: found token with 'none' permissions: .github/workflows/scorecard-analysis.yml:1","Info: found token with 'none' permissions: .github/workflows/semgrep.yml:1","Info: found token with 'none' permissions: .github/workflows/stale.yml:1","Info: found token with 'none' permissions: .github/workflows/trivy.yml:1","Info: found token with 'none' permissions: .github/workflows/typescript.yml:1"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions","short":"Determines if the project's workflows follow the principle of least privilege."}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license","short":"Determines if the project has defined a license."}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts","short":"Determines if the project has generated executable (binary) artifacts in the source repository."}},{"name":"CII-Best-Practices","score":5,"reason":"badge detected: Passing","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices","short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge."}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:  62 out of  62 GitHub-owned GitHubAction dependencies pinned","Info:  15 out of  15 third-party GitHubAction dependencies pinned","Info:  96 out of  96 containerImage dependencies pinned","Info:  52 out of  52 pipCommand dependencies pinned","Info:   3 out of   3 npmCommand dependencies pinned"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies","short":"Determines if the project has declared and pinned the dependencies of its build process."}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:283"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging","short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall."}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing","short":"Determines if the project uses fuzzing."}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases","short":"Determines if the project cryptographically signs release artifacts."}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 24 commits out of 30 are checked with a SAST tool"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast","short":"Determines if the project uses static code analysis."}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/awslabs/.github/SECURITY.md:1","Info: Found linked content: github.com/awslabs/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/awslabs/.github/SECURITY.md:1","Info: Found text in security policy: github.com/awslabs/.github/SECURITY.md:1"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy","short":"Determines if the project has published a security policy."}},{"name":"Branch-Protection","score":10,"reason":"branch protection is fully enabled on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Info: 'stale review dismissal' is required to merge on branch 'main'","Info: required approving review count is 2 on branch 'main'","Info: codeowner review is required on branch 'main'","Info: 'last push approval' is required to merge on branch 'main'","Info: 'up-to-date branches' is required to merge on branch 'main'","Info: status check found to merge onto on branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection","short":"Determines if the default and release branches are protected with GitHub's branch protection settings."}},{"name":"Vulnerabilities","score":0,"reason":"179 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2987","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3447","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-215","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2275","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-141","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-142","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4175","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4176","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4177","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4011","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4012","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4013","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4014","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-1805","Warn: Project is vulnerable to: https://osv.dev/GHSA-2g4f-4pwh-qvx6","Warn: Project is vulnerable to: https://osv.dev/GHSA-6j4f-fj2g-mc7p","Warn: Project is vulnerable to: https://osv.dev/GHSA-q2hr-2g5m-vwhr","Warn: Project is vulnerable to: https://osv.dev/GHSA-qhr7-859c-m2p7","Warn: Project is vulnerable to: https://osv.dev/GHSA-vfj7-8cjw-p6xm","Warn: Project is vulnerable to: https://osv.dev/GHSA-2wm5-q62r-hmrv","Warn: Project is vulnerable to: https://osv.dev/GHSA-vc2v-76pw-4v95","Warn: Project is vulnerable to: https://osv.dev/GHSA-hrr3-gc8f-f4qj","Warn: Project is vulnerable to: https://osv.dev/GHSA-ch52-4w7c-c8xp","Warn: Project is vulnerable to: https://osv.dev/GHSA-64mm-vxmg-q3vj","Warn: Project is vulnerable to: https://osv.dev/GHSA-5p2g-fcmc-qvqq","Warn: Project is vulnerable to: https://osv.dev/GHSA-w3rx-r6r6-pgpr","Warn: Project is vulnerable to: https://osv.dev/GHSA-6h2x-m376-mqjq","Warn: Project is vulnerable to: https://osv.dev/GHSA-6w3j-5fw6-r9vr","Warn: Project is vulnerable to: https://osv.dev/GHSA-gg4h-3hg2-grpc","Warn: Project is vulnerable to: https://osv.dev/GHSA-q7cg-457f-vx79","Warn: Project is vulnerable to: https://osv.dev/GHSA-wr44-6hxh-3jwq","Warn: Project is vulnerable to: https://osv.dev/GHSA-2883-xcg3-v3hh","Warn: Project is vulnerable to: https://osv.dev/GHSA-2v37-7h3g-55p8","Warn: Project is vulnerable to: https://osv.dev/GHSA-37ch-88jc-xwx2","Warn: Project is vulnerable to: https://osv.dev/GHSA-3v7f-55p6-f55p","Warn: Project is vulnerable to: https://osv.dev/GHSA-c2c7-rcm5-vvqj","Warn: Project is vulnerable to: https://osv.dev/GHSA-rj75-hqrm-r3gf","Warn: Project is vulnerable to: https://osv.dev/GHSA-jqcg-44mw-7w3h","Warn: Project is vulnerable to: https://osv.dev/GHSA-4mjr-xmp4-gh2g","Warn: Project is vulnerable to: https://osv.dev/GHSA-x5fp-wj9c-mxmx","Warn: Project is vulnerable to: https://osv.dev/GHSA-5c6j-r48x-rmvq","Warn: Project is vulnerable to: https://osv.dev/GHSA-qj8w-gfj5-8c6v","Warn: Project is vulnerable to: https://osv.dev/GHSA-pqg4-j6r4-53mv","Warn: Project is vulnerable to: https://osv.dev/GHSA-68fv-2mgg-jv7q","Warn: Project is vulnerable to: https://osv.dev/GHSA-4vpr-x523-8j87","Warn: Project is vulnerable to: https://osv.dev/GHSA-w27v-7q3p-w38r","Warn: Project is vulnerable to: https://osv.dev/GHSA-5gmw-xhrv-c9v3","Warn: Project is vulnerable to: https://osv.dev/GHSA-85c8-ppgw-ccpr","Warn: Project is vulnerable to: https://osv.dev/GHSA-w5hq-g745-h8pq","Warn: Project is vulnerable to: https://osv.dev/GHSA-g84c-rxfj-3j2c","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4024","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4025","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3783","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3784","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3785","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3786","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3787","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3788","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3837","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3838","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3840","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3841","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3843","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3948","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3949","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3950","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3951","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3982","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3984","Warn: Project is vulnerable to: https://osv.dev/GHSA-59cr-6r3x-644w","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2192","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2555","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2193","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2562","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2563","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2564","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-77","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2583","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2584","Warn: Project is vulnerable to: https://osv.dev/GHSA-f4xh-w4cj-qxq8","Warn: Project is vulnerable to: https://osv.dev/GHSA-54p9-h82j-f925","Warn: Project is vulnerable to: https://osv.dev/GHSA-hx9q-6w63-j58v","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-113","Warn: Project is vulnerable to: https://osv.dev/GHSA-4xgf-cpjx-pc3j","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4140","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4141","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4142","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4143","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4144","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4145","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4146","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4147","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4148","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4149","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4150","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4151","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4152","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4183","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2270","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3036","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3037","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3038","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3039","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3040","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3041","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-161","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2280","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2281","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-248","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-249","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-140","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2287","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3387","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3388","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3389","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3928","Warn: Project is vulnerable to: https://osv.dev/GHSA-3hv7-mjh2-fv65","Warn: Project is vulnerable to: https://osv.dev/GHSA-8423-8fgw-73vq","Warn: Project is vulnerable to: https://osv.dev/GHSA-c2m8-h5v5-343r","Warn: Project is vulnerable to: https://osv.dev/GHSA-chx6-46f5-w4vp","Warn: Project is vulnerable to: https://osv.dev/GHSA-pw6j-qg29-8w7f","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-212","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2285","Warn: Project is vulnerable to: https://osv.dev/GHSA-4gg8-gxpx-9rph","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3846","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3848","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3849","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-1845","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3844","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3847","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-87","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3906","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3071","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3072","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4170","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4171","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2528","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2530","Warn: Project is vulnerable to: https://osv.dev/GHSA-g6x2-hccm-hh4m","Warn: Project is vulnerable to: https://osv.dev/GHSA-8rfp-98v4-mmr6","Warn: Project is vulnerable to: https://osv.dev/GHSA-gj48-438w-jh9v","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-168","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2206","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2207","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2208","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2209","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2210","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2211","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2212","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2213","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2214","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2215","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2216","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2217","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2218","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2651","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2652","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3625","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2320","Warn: Project is vulnerable to: https://osv.dev/GHSA-r95x-qfjj-fjj2","Warn: Project is vulnerable to: https://osv.dev/GHSA-w8p2-r796-3vmq","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3807","Warn: Project is vulnerable to: https://osv.dev/GHSA-9w56-46f6-3qhx","Warn: Project is vulnerable to: https://osv.dev/GHSA-8fvv-fgr5-f8ch","Warn: Project is vulnerable to: https://osv.dev/GHSA-qx36-8mw2-4r3x","Warn: Project is vulnerable to: https://osv.dev/GHSA-v4x9-3549-crwv","Warn: Project is vulnerable to: https://osv.dev/GHSA-vp6j-j7w5-5xjj","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-286","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3548","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3627","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3549","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3481","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3482","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3483","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4113","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4114","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-4023","Warn: Project is vulnerable to: https://osv.dev/GHSA-27vj-qcqg-25rc","Warn: Project is vulnerable to: https://osv.dev/GHSA-pjjw-68hj-v9mw"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities","short":"Determines if the project has open, known unfixed vulnerabilities."}},{"name":"CI-Tests","score":10,"reason":"30 out of 30 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests","short":"Determines if the project runs tests before pull requests are merged."}},{"name":"Contributors","score":10,"reason":"project has 7 contributing companies or organizations","details":["Info: found contributions from: amazon, amazon web services, aws, aws-solutions-library-samples, awslabs, coreweave, whaam"],"documentation":{"url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors","short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies)."}}]}