{"date":"2026-04-21T08:52:15Z","repo":{"name":"github.com/intelowlproject/IntelOwl","commit":"38ebe10eba87e6f9de3fde81d3ff31ff6df70604"},"scorecard":{"version":"v5.0.0","commit":"ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4"},"score":6.8,"checks":[{"name":"Binary-Artifacts","score":8,"reason":"binaries present in source code","details":["Warn: binary detected: docker/bin/osslsigncode:1","Warn: binary detected: integrations/tor_analyzers/bundled/onionscan:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#binary-artifacts"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during GetBranch(develop): error during branchesHandler.query: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#branch-protection"}},{"name":"CI-Tests","score":10,"reason":"20 out of 20 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#ci-tests"}},{"name":"CII-Best-Practices","score":5,"reason":"badge detected: Passing","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#cii-best-practices"}},{"name":"Code-Review","score":8,"reason":"Found 14/16 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#code-review"}},{"name":"Contributors","score":10,"reason":"project has 25 contributing companies or organizations","details":["Info: abs0lut3pwn4g3 contributor org/company found, MLH-Fellowship contributor org/company found, RevereLabs contributor org/company found, iit (ism) dhanbad contributor org/company found, Memboro contributor org/company found, bennett university contributor org/company found, honeynet contributor org/company found, intelowlproject contributor org/company found, certego contributor org/company found, conduitxyz contributor org/company found, GDG-OnCampus-BU contributor org/company found, PotentioDev contributor org/company found, AlkyneFi contributor org/company found, blocsoc iitr contributor org/company found, Shuffle contributor org/company found, bedrocksystems @codesnag @hackershala-github contributor org/company found, google contributor org/company found, Spark-IITR contributor org/company found, iit roorkee contributor org/company found, BITS-SU-Tech-Team contributor org/company found, HousewareHQ contributor org/company found, launchdarkly contributor org/company found, collabamigo contributor org/company found, indraprastha institute of information technology contributor org/company found, S1thLords contributor org/company found, "],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#contributors"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#dangerous-workflow"}},{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#dependency-update-tool"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: GNU Affero General Public License v3.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#license"}},{"name":"Maintained","score":10,"reason":"30 commit(s) and 23 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#maintained"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-build-cache.yml:16"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#packaging"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check_dependency_updates.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/check_dependency_updates.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/check_dependency_updates.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/check_dependency_updates.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check_dependency_updates.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/check_dependency_updates.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/check_dependency_updates.yml:173: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/check_dependency_updates.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check_dependency_updates.yml:196: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/check_dependency_updates.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/check_dependency_updates.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/check_dependency_updates.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check_dependency_updates.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/check_dependency_updates.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/check_dependency_updates.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/check_dependency_updates.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/codeql-analysis.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dependency_review.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/dependency_review.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dependency_review.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/dependency_review.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-build-cache.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/docker-build-cache.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-cache.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/docker-build-cache.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-cache.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/docker-build-cache.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-build-cache.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/docker-build-cache.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull_request_automation.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/pull_request_automation.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull_request_automation.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/pull_request_automation.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull_request_automation.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/pull_request_automation.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull_request_automation.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/pull_request_automation.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pull_request_automation.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/pull_request_automation.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull_request_automation.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/pull_request_automation.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pull_request_automation.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/pull_request_automation.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull_request_automation.yml:134: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/pull_request_automation.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull_request_automation.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/pull_request_automation.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull_request_automation.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/pull_request_automation.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/scorecard.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/scorecard.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/intelowlproject/IntelOwl/stale.yml/master?enable=pin","Warn: containerImage not pinned by hash: docker/Dockerfile:3","Warn: containerImage not pinned by hash: docker/Dockerfile:17","Warn: containerImage not pinned by hash: docker/Dockerfile:75","Warn: containerImage not pinned by hash: docker/Dockerfile_nginx:1: pin your Docker image by updating library/nginx:1.29.2-alpine to library/nginx:1.29.2-alpine@sha256:61e01287e546aac28a3f56839c136b31f590273f3b41187a36f46f6a03bbfe22","Warn: containerImage not pinned by hash: integrations/bbot/Dockerfile:1: pin your Docker image by updating python:3.12-slim to python:3.12-slim@sha256:804ddf3251a60bbf9c92e73b7566c40428d54d0e79d3428194edf40da6521286","Warn: containerImage not pinned by hash: integrations/cyberchef/Dockerfile:2: pin your Docker image by updating node:lts-alpine3.21 to node:lts-alpine3.21@sha256:b8f7c9056af700568c1ce76173f1c93743fb64ca1343e18cdf3a6ded8985ad3d","Warn: containerImage not pinned by hash: integrations/malware_tools_analyzers/Dockerfile:1: pin your Docker image by updating python:3.11-slim to python:3.11-slim@sha256:233de06753d30d120b1a3ce359d8d3be8bda78524cd8f520c99883bfe33964cf","Warn: containerImage not pinned by hash: integrations/nuclei_analyzer/Dockerfile:1: pin your Docker image by updating projectdiscovery/nuclei:v3.7.0 to projectdiscovery/nuclei:v3.7.0@sha256:0b2e74b4968adf36109d64592a2b1cca6e573620b8738fbc4b4f2f949215be6d","Warn: containerImage not pinned by hash: integrations/pcap_analyzers/Dockerfile:2: pin your Docker image by updating jasonish/suricata:7.0 to jasonish/suricata:7.0@sha256:511f835d80ff9ceac409a5c6dc53aa7d89b3797e0b2ab8d71bcda246eb432c80","Warn: containerImage not pinned by hash: integrations/phishing_analyzers/Dockerfile:1: pin your Docker image by updating python:3.12.3 to python:3.12.3@sha256:3966b81808d864099f802080d897cef36c01550472ab3955fdd716d1c665acd6","Warn: containerImage not pinned by hash: integrations/phunter/Dockerfile:1: pin your Docker image by updating python:3.12-slim to python:3.12-slim@sha256:804ddf3251a60bbf9c92e73b7566c40428d54d0e79d3428194edf40da6521286","Warn: containerImage not pinned by hash: integrations/thug/Dockerfile:3: pin your Docker image by updating thughoneyclient/thug:v6.20 to thughoneyclient/thug:v6.20@sha256:e580421a7c82dcb8e77fbf5b31f0742674b8b911f3d8d782d91b692fca21bc2d","Warn: containerImage not pinned by hash: integrations/tor_analyzers/Dockerfile:1: pin your Docker image by updating python:3.14-slim to python:3.14-slim@sha256:bc389f7dfcb21413e72a28f491985326994795e34d2b86c8ae2f417b4e7818aa","Warn: npmCommand not pinned by hash: docker/Dockerfile:8","Warn: npmCommand not pinned by hash: docker/Dockerfile:8","Warn: pipCommand not pinned by hash: docker/Dockerfile:42-48","Warn: pipCommand not pinned by hash: docker/Dockerfile:54-56","Warn: pipCommand not pinned by hash: docker/Dockerfile:54-56","Warn: pipCommand not pinned by hash: docker/Dockerfile:54-56","Warn: pipCommand not pinned by hash: integrations/bbot/Dockerfile:21-22","Warn: pipCommand not pinned by hash: integrations/bbot/Dockerfile:21-22","Warn: npmCommand not pinned by hash: integrations/cyberchef/Dockerfile:10-11","Warn: npmCommand not pinned by hash: integrations/malware_tools_analyzers/Dockerfile:26-28","Warn: pipCommand not pinned by hash: integrations/malware_tools_analyzers/Dockerfile:45-47","Warn: pipCommand not pinned by hash: integrations/malware_tools_analyzers/Dockerfile:45-47","Warn: pipCommand not pinned by hash: integrations/malware_tools_analyzers/Dockerfile:53-57","Warn: pipCommand not pinned by hash: integrations/malware_tools_analyzers/Dockerfile:53-57","Warn: pipCommand not pinned by hash: integrations/malware_tools_analyzers/Dockerfile:64-68","Warn: pipCommand not pinned by hash: integrations/malware_tools_analyzers/Dockerfile:64-68","Warn: pipCommand not pinned by hash: integrations/malware_tools_analyzers/Dockerfile:73-79","Warn: pipCommand not pinned by hash: integrations/malware_tools_analyzers/Dockerfile:73-79","Warn: pipCommand not pinned by hash: integrations/malware_tools_analyzers/Dockerfile:84-87","Warn: pipCommand not pinned by hash: integrations/malware_tools_analyzers/Dockerfile:84-87","Warn: pipCommand not pinned by hash: integrations/malware_tools_analyzers/Dockerfile:92-109","Warn: pipCommand not pinned by hash: integrations/malware_tools_analyzers/Dockerfile:92-109","Warn: pipCommand not pinned by hash: integrations/malware_tools_analyzers/Dockerfile:115-121","Warn: pipCommand not pinned by hash: integrations/malware_tools_analyzers/Dockerfile:115-121","Warn: pipCommand not pinned by hash: integrations/malware_tools_analyzers/Dockerfile:133-137","Warn: pipCommand not pinned by hash: integrations/malware_tools_analyzers/Dockerfile:133-137","Warn: pipCommand not pinned by hash: integrations/nuclei_analyzer/Dockerfile:18-22","Warn: pipCommand not pinned by hash: integrations/nuclei_analyzer/Dockerfile:18-22","Warn: pipCommand not pinned by hash: integrations/pcap_analyzers/Dockerfile:21-26","Warn: pipCommand not pinned by hash: integrations/phishing_analyzers/Dockerfile:13-22","Warn: pipCommand not pinned by hash: integrations/phishing_analyzers/Dockerfile:28-31","Warn: pipCommand not pinned by hash: integrations/phunter/Dockerfile:16-18","Warn: pipCommand not pinned by hash: integrations/phunter/Dockerfile:16-18","Warn: pipCommand not pinned by hash: integrations/phunter/Dockerfile:16-18","Warn: pipCommand not pinned by hash: integrations/thug/Dockerfile:19-22","Warn: pipCommand not pinned by hash: integrations/tor_analyzers/Dockerfile:31-33","Warn: downloadThenRun not pinned by hash: .github/workflows/check_dependency_updates.yml:31","Warn: downloadThenRun not pinned by hash: .github/workflows/check_dependency_updates.yml:90","Warn: downloadThenRun not pinned by hash: .github/workflows/check_dependency_updates.yml:151","Warn: downloadThenRun not pinned by hash: .github/workflows/check_dependency_updates.yml:208","Warn: pipCommand not pinned by hash: .github/workflows/codeql-analysis.yml:55","Warn: pipCommand not pinned by hash: .github/workflows/codeql-analysis.yml:57","Warn: pipCommand not pinned by hash: .github/workflows/codeql-analysis.yml:60","Warn: pipCommand not pinned by hash: .github/workflows/pull_request_automation.yml:46","Warn: pipCommand not pinned by hash: .github/workflows/pull_request_automation.yml:47","Warn: downloadThenRun not pinned by hash: .github/workflows/pull_request_automation.yml:59","Warn: npmCommand not pinned by hash: .github/workflows/pull_request_automation.yml:150","Info:   2 out of  23 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of  10 third-party GitHubAction dependencies pinned","Info:   0 out of   5 downloadThenRun dependencies pinned","Info:   0 out of  13 containerImage dependencies pinned","Info:   0 out of   5 npmCommand dependencies pinned","Info:   0 out of  37 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#sast"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#security-policy"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#signed-releases"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:27","Warn: topLevel 'contents' permission set to 'write': .github/workflows/check_dependency_updates.yml:10","Info: topLevel permissions set to 'read-all': .github/workflows/codeql-analysis.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/dependency_review.yml:7","Info: topLevel 'contents' permission set to 'read': .github/workflows/docker-build-cache.yml:2","Warn: topLevel 'packages' permission set to 'write': .github/workflows/docker-build-cache.yml:3","Info: topLevel permissions set to 'read-all': .github/workflows/pull_request_automation.yml:1","Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yml:18","Warn: no topLevel permission defined: .github/workflows/stale.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#token-permissions"}},{"name":"Vulnerabilities","score":0,"reason":"70 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-2w69-qvjg-hvjx","Warn: Project is vulnerable to: GHSA-vpq2-c234-7xj6","Warn: Project is vulnerable to: GHSA-2g4f-4pwh-qvx6","Warn: Project is vulnerable to: GHSA-3p68-rc4w-qgx5","Warn: Project is vulnerable to: GHSA-43fc-jf86-j433","Warn: Project is vulnerable to: GHSA-4hjh-wcwx-xvwj","Warn: Project is vulnerable to: GHSA-fvcv-3m26-pcqx","Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7","Warn: Project is vulnerable to: GHSA-f886-m6hf-6m8v","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-73rr-hh4g-fpgx","Warn: Project is vulnerable to: GHSA-ghr5-ch3p-vcr6","Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx","Warn: Project is vulnerable to: GHSA-rv95-896h-c2vc","Warn: Project is vulnerable to: GHSA-25h7-pfq9-p65f","Warn: Project is vulnerable to: GHSA-rf6f-7fwh-wjgh","Warn: Project is vulnerable to: GHSA-r4q5-vmmm-2653","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-wf6x-7x77-mvgw","Warn: Project is vulnerable to: GHSA-mh29-5h37-fv8m","Warn: Project is vulnerable to: GHSA-f23m-r3pf-42rh","Warn: Project is vulnerable to: GHSA-r5fr-rjxr-66jc","Warn: Project is vulnerable to: GHSA-xxjr-mmjv-4gpg","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-23c5-xmqv-rm74","Warn: Project is vulnerable to: GHSA-3ppc-4f35-3m26","Warn: Project is vulnerable to: GHSA-7r86-cg39-jmmj","Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55","Warn: Project is vulnerable to: GHSA-2328-f5f3-gj25","Warn: Project is vulnerable to: GHSA-554w-wpv2-vw27","Warn: Project is vulnerable to: GHSA-5gfm-wpxj-wjgq","Warn: Project is vulnerable to: GHSA-5m6q-g25r-mvwx","Warn: Project is vulnerable to: GHSA-65ch-62r8-g69g","Warn: Project is vulnerable to: GHSA-ppp5-5v6c-4jwp","Warn: Project is vulnerable to: GHSA-q67f-28xg-22rw","Warn: Project is vulnerable to: GHSA-rp65-9cf3-cjxr","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-37ch-88jc-xwx2","Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-3v7f-55p6-f55p","Warn: Project is vulnerable to: GHSA-c2c7-rcm5-vvqj","Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j","Warn: Project is vulnerable to: GHSA-6rw7-vpxm-498p","Warn: Project is vulnerable to: GHSA-w7fw-mjwx-w883","Warn: Project is vulnerable to: GHSA-9jcx-v3wj-wh4m","Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm","Warn: Project is vulnerable to: GHSA-mw96-cpmx-2vgc","Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg","Warn: Project is vulnerable to: GHSA-5c6j-r48x-rmvq","Warn: Project is vulnerable to: GHSA-qj8w-gfj5-8c6v","Warn: Project is vulnerable to: GHSA-76p7-773f-r4q5","Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p","Warn: Project is vulnerable to: GHSA-xpqw-6gx7-v673","Warn: Project is vulnerable to: GHSA-38r7-794h-5758","Warn: Project is vulnerable to: GHSA-4vvj-4cpr-p986","Warn: Project is vulnerable to: GHSA-8fgc-7cc6-rx7x","Warn: Project is vulnerable to: GHSA-wr3j-pwj9-hqq6","Warn: Project is vulnerable to: GHSA-4v9v-hfq4-rm2v","Warn: Project is vulnerable to: GHSA-9jgg-88mc-972h","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q","Warn: Project is vulnerable to: GHSA-48c2-rrv3-qjmp","Warn: Project is vulnerable to: GHSA-68rp-wp8r-4726"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#vulnerabilities"}}]}