{"date":"2026-08-21T14:29:57Z","repo":{"name":"github.com/awslabs/mcp","commit":"100b55b6d92f731bc8d23486ce9efd5bbf90c606"},"scorecard":{"version":"v5.5.0","commit":"c395761df6afe1a69e476bc60a013a94bcbc153f"},"score":8.5,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Warn: jobLevel 'contents' permission set to 'write': .github/workflows/aws-api-mcp-upgrade-version.yml:33","Info: jobLevel 'contents' permission set to 'read': .github/workflows/bandit.yml:26","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/bandit.yml:27","Info: jobLevel 'contents' permission set to 'read': .github/workflows/cfn_nag.yml:19","Info: jobLevel 'contents' permission set to 'read': .github/workflows/check-gh-pages-builds.yml:14","Info: jobLevel 'contents' permission set to 'read': .github/workflows/check-license-header.yml:12","Info: jobLevel 'contents' permission set to 'read': .github/workflows/checkov.yml:19","Info: jobLevel 'packages' permission set to 'read': .github/workflows/codeql.yml:36","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:39","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:40","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dependency-review-action.yml:10","Info: jobLevel 'contents' permission set to 'read': .github/workflows/gh-pages.yml:18","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/merge-prevention.yml:39","Info: jobLevel 'contents' permission set to 'read': .github/workflows/merge-prevention.yml:38","Info: jobLevel 'contents' permission set to 'read': .github/workflows/powershell.yml:25","Info: jobLevel 'contents' permission set to 'read': .github/workflows/pre-commit.yml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/pre-commit.yml:11","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/pull-request-lint.yml:22","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/pull-request-lint.yml:45","Info: jobLevel 'contents' permission set to 'read': .github/workflows/python.yml:14","Info: jobLevel 'contents' permission set to 'read': .github/workflows/python.yml:73","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/python.yml:74","Warn: jobLevel 'security-events' permission set to 'write': .github/workflows/python.yml:75","Info: jobLevel 'actions' permission set to 'read': .github/workflows/python.yml:76","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release-initiate-branch.yml:273","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release-initiate-branch.yml:36","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release-initiate-branch.yml:116","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release-initiate-branch.yml:172","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release-merge-tag.yml:39","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release-merge-tag.yml:61","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/release-merge-tag.yml:62","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:299","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yml:412","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:35","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yml:84","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:138","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:266","Info: jobLevel 'contents' permission set to 'read': .github/workflows/scanners.yml:15","Info: jobLevel 'contents' permission set to 'read': .github/workflows/scorecard-analysis.yml:18","Info: jobLevel 'contents' permission set to 'read': .github/workflows/semgrep.yml:19","Info: jobLevel 'contents' permission set to 'read': .github/workflows/stale.yml:11","Info: jobLevel 'contents' permission set to 'read': .github/workflows/trivy.yml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/trivy.yml:43","Info: jobLevel 'contents' permission set to 'read': .github/workflows/typescript.yml:12","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:25","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:12","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:15","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:18","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:19","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:22","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:23","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:26","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:13","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:16","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:17","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:14","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:20","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:21","Info: found token with 'none' permissions: .github/workflows/aws-api-mcp-upgrade-version.yml:24","Info: found token with 'none' permissions: .github/workflows/bandit.yml:1","Info: found token with 'none' permissions: .github/workflows/cfn_nag.yml:1","Info: found token with 'none' permissions: .github/workflows/check-gh-pages-builds.yml:1","Info: found token with 'none' permissions: .github/workflows/check-license-header.yml:1","Info: found token with 'none' permissions: .github/workflows/checkov.yml:1","Info: found token with 'none' permissions: .github/workflows/codeql.yml:1","Info: found token with 'none' permissions: .github/workflows/dependency-review-action.yml:1","Info: found token with 'none' permissions: .github/workflows/gh-pages.yml:1","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:18","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:19","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:26","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:29","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:17","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:20","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:21","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:22","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:31","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:23","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:24","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:25","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:28","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:30","Info: found token with 'none' permissions: .github/workflows/merge-prevention.yml:27","Info: found token with 'none' permissions: .github/workflows/powershell.yml:1","Info: found token with 'none' permissions: .github/workflows/pre-commit.yml:1","Info: found token with 'none' permissions: .github/workflows/pull-request-lint.yml:1","Info: found token with 'none' permissions: .github/workflows/python.yml:1","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:14","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:17","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:19","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:21","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:18","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:15","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:20","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:22","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:23","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:24","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:26","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:13","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:16","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:25","Info: found token with 'none' permissions: .github/workflows/release-initiate-branch.yml:27","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:18","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:19","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:20","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:21","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:25","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:26","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:27","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:29","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:24","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:28","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:17","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:23","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:22","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:30","Info: found token with 'none' permissions: .github/workflows/release-merge-tag.yml:31","Info: found token with 'none' permissions: .github/workflows/release.yml:25","Info: found token with 'none' permissions: .github/workflows/release.yml:27","Info: found token with 'none' permissions: .github/workflows/release.yml:15","Info: found token with 'none' permissions: .github/workflows/release.yml:17","Info: found token with 'none' permissions: .github/workflows/release.yml:18","Info: found token with 'none' permissions: .github/workflows/release.yml:20","Info: found token with 'none' permissions: .github/workflows/release.yml:22","Info: found token with 'none' permissions: .github/workflows/release.yml:26","Info: found token with 'none' permissions: .github/workflows/release.yml:14","Info: found token with 'none' permissions: .github/workflows/release.yml:16","Info: found token with 'none' permissions: .github/workflows/release.yml:19","Info: found token with 'none' permissions: .github/workflows/release.yml:23","Info: found token with 'none' permissions: .github/workflows/release.yml:28","Info: found token with 'none' permissions: .github/workflows/release.yml:21","Info: found token with 'none' permissions: .github/workflows/release.yml:24","Info: found token with 'none' permissions: .github/workflows/scanners.yml:1","Info: found token with 'none' permissions: .github/workflows/scorecard-analysis.yml:1","Info: found token with 'none' permissions: .github/workflows/semgrep.yml:1","Info: found token with 'none' permissions: .github/workflows/stale.yml:1","Info: found token with 'none' permissions: .github/workflows/trivy.yml:1","Info: found token with 'none' permissions: .github/workflows/typescript.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:  62 out of  62 GitHub-owned GitHubAction dependencies pinned","Info:  15 out of  15 third-party GitHubAction dependencies pinned","Info:  94 out of  94 containerImage dependencies pinned","Info:  51 out of  51 pipCommand dependencies pinned","Info:   3 out of   3 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 26 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"}},{"name":"CII-Best-Practices","score":5,"reason":"badge detected: Passing","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:283"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/awslabs/.github/SECURITY.md:1","Info: Found linked content: github.com/awslabs/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/awslabs/.github/SECURITY.md:1","Info: Found text in security policy: github.com/awslabs/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":10,"reason":"branch protection is fully enabled on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'main'","Info: 'force pushes' disabled on branch 'main'","Info: 'branch protection settings apply to administrators' is required to merge on branch 'main'","Info: 'stale review dismissal' is required to merge on branch 'main'","Info: required approving review count is 2 on branch 'main'","Info: codeowner review is required on branch 'main'","Info: 'last push approval' is required to merge on branch 'main'","Info: 'up-to-date branches' is required to merge on branch 'main'","Info: status check found to merge onto on branch 'main'","Info: PRs are required in order to make changes on branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":0,"reason":"124 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2987","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3447","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-215","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2275","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-141","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-142","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2132","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-1805","Warn: Project is vulnerable to: https://osv.dev/GHSA-2g4f-4pwh-qvx6","Warn: Project is vulnerable to: https://osv.dev/GHSA-64mm-vxmg-q3vj","Warn: Project is vulnerable to: https://osv.dev/GHSA-5p2g-fcmc-qvqq","Warn: Project is vulnerable to: https://osv.dev/GHSA-w3rx-r6r6-pgpr","Warn: Project is vulnerable to: https://osv.dev/GHSA-q7cg-457f-vx79","Warn: Project is vulnerable to: https://osv.dev/GHSA-2v37-7h3g-55p8","Warn: Project is vulnerable to: https://osv.dev/GHSA-37ch-88jc-xwx2","Warn: Project is vulnerable to: https://osv.dev/GHSA-3v7f-55p6-f55p","Warn: Project is vulnerable to: https://osv.dev/GHSA-c2c7-rcm5-vvqj","Warn: Project is vulnerable to: https://osv.dev/GHSA-5c6j-r48x-rmvq","Warn: Project is vulnerable to: https://osv.dev/GHSA-qj8w-gfj5-8c6v","Warn: Project is vulnerable to: https://osv.dev/GHSA-w5hq-g745-h8pq","Warn: Project is vulnerable to: https://osv.dev/GHSA-3f7w-8rr8-f37f","Warn: Project is vulnerable to: https://osv.dev/GHSA-4gmw-gg2m-w46p","Warn: Project is vulnerable to: https://osv.dev/GHSA-539m-9xh6-q6rr","Warn: Project is vulnerable to: https://osv.dev/GHSA-94p4-4cq8-9g67","Warn: Project is vulnerable to: https://osv.dev/GHSA-9rj7-rf2p-w77r","Warn: Project is vulnerable to: https://osv.dev/GHSA-hh9p-6wh2-4mfc","Warn: Project is vulnerable to: https://osv.dev/GHSA-hmq2-w58f-27jc","Warn: Project is vulnerable to: https://osv.dev/GHSA-jm78-9fvv-mhgr","Warn: Project is vulnerable to: https://osv.dev/GHSA-p538-c434-8v24","Warn: Project is vulnerable to: https://osv.dev/GHSA-wvpp-8hx9-p66j","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2192","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2555","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2193","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2562","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2563","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2564","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-77","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2583","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2584","Warn: Project is vulnerable to: https://osv.dev/GHSA-f4xh-w4cj-qxq8","Warn: Project is vulnerable to: https://osv.dev/GHSA-hx9q-6w63-j58v","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-113","Warn: Project is vulnerable to: https://osv.dev/GHSA-4xgf-cpjx-pc3j","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2270","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3036","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3037","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3038","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3039","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3040","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3041","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-161","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2280","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2281","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-248","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-249","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-140","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2287","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3387","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3388","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3389","Warn: Project is vulnerable to: https://osv.dev/GHSA-pw6j-qg29-8w7f","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-212","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2285","Warn: Project is vulnerable to: https://osv.dev/GHSA-4gg8-gxpx-9rph","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-1845","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-87","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3071","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3072","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2528","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2530","Warn: Project is vulnerable to: https://osv.dev/GHSA-8rfp-98v4-mmr6","Warn: Project is vulnerable to: https://osv.dev/GHSA-gj48-438w-jh9v","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-168","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2206","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2207","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2208","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2209","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2210","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2211","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2212","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2213","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2214","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2215","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2216","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2217","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2218","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2651","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2652","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3625","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2320","Warn: Project is vulnerable to: https://osv.dev/GHSA-r95x-qfjj-fjj2","Warn: Project is vulnerable to: https://osv.dev/GHSA-w8p2-r796-3vmq","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2025-183","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-120","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-175","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-176","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-177","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-178","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-179","Warn: Project is vulnerable to: https://osv.dev/GHSA-89v8-rhwq-hf77","Warn: Project is vulnerable to: https://osv.dev/GHSA-9w56-46f6-3qhx","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3481","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3482","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3483","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-286","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3548","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3627","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3549","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2120","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2121","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-2141","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-35","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3552","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3553","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3554","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-36","Warn: Project is vulnerable to: https://osv.dev/GHSA-537c-gmf6-5ccf","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3696","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3697","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3698","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3699","Warn: Project is vulnerable to: https://osv.dev/PYSEC-2026-3628","Warn: Project is vulnerable to: https://osv.dev/GHSA-27jp-wm6q-gp25","Warn: Project is vulnerable to: https://osv.dev/GHSA-pjjw-68hj-v9mw"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"}},{"name":"CI-Tests","score":10,"reason":"30 out of 30 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"}},{"name":"Contributors","score":10,"reason":"project has 8 contributing companies or organizations","details":["Info: found contributions from: amazon, amazon web services, aws, aws-solutions-library-samples, awslabs, coreweave, remla25-team6, whaam"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"}}]}