{
  "history": [
    {
      "added": 0,
      "commit": "2b20a2cfb50d07ab35ed1b5a47309d91b9ef5890",
      "date": "2026-11-01",
      "dependencies": 0,
      "errors": [],
      "fixable": 0,
      "go_version": null,
      "in_binary": null,
      "new_vulnerabilities": 0,
      "osv_confirmed": 0,
      "osv_only": 0,
      "ref": "v1.6.0",
      "release_changed": false,
      "release_integrity": "no-assets",
      "removed": 0,
      "resolved_vulnerabilities": 0,
      "scorecard": 3.8,
      "upgraded": 0,
      "vulnerabilities": {
        "Critical": 0,
        "High": 0,
        "Low": 0,
        "Medium": 0,
        "Negligible": 0,
        "Unknown": 0
      },
      "workflow": {
        "High": 0,
        "Low": 0,
        "Medium": 0,
        "files": 0
      }
    },
    {
      "added": 0,
      "commit": "2b20a2cfb50d07ab35ed1b5a47309d91b9ef5890",
      "date": "2026-11-02",
      "dependencies": 0,
      "errors": [],
      "fixable": 0,
      "go_version": null,
      "in_binary": null,
      "kev": null,
      "kev_new": 0,
      "new_vulnerabilities": 0,
      "osv_confirmed": 0,
      "osv_only": 0,
      "ref": "v1.6.0",
      "release_changed": false,
      "release_integrity": "no-assets",
      "removed": 0,
      "resolved_vulnerabilities": 0,
      "scorecard": 3.8,
      "scorecard_date": "2026-11-01",
      "scorecard_note": null,
      "scorecard_source": "carried-forward",
      "upgraded": 0,
      "vulnerabilities": {
        "Critical": 0,
        "High": 0,
        "Low": 0,
        "Medium": 0,
        "Negligible": 0,
        "Unknown": 0
      },
      "vulnerable_packages": 0,
      "workflow": {
        "High": 0,
        "Low": 0,
        "Medium": 0,
        "files": 0
      }
    }
  ],
  "latest": {
    "archived": false,
    "category": "API & Dynamic Testing (DAST)",
    "changes": {
      "added": [],
      "any": false,
      "baseline": false,
      "integrity_drift": 0,
      "license_changes": [],
      "new_vulnerabilities": [],
      "previous_ref": "v1.6.0",
      "release_changed": false,
      "removed": [],
      "resolved_vulnerabilities": [],
      "upgraded": [],
      "workflow_new": 0,
      "workflow_resolved": 0
    },
    "commit": "2b20a2cfb50d07ab35ed1b5a47309d91b9ef5890",
    "compliance": {
      "overall_score": 0,
      "standards": {}
    },
    "components": [],
    "description": "Autonomous AI penetration testing platform that exercises running web, API, Active Directory and Kubernetes targets with proof of exploitation",
    "errors": [],
    "id": "ASCIT31__Dark-Moon",
    "manifests": [
      "mcp/requirements.txt"
    ],
    "name": "Dark-Moon",
    "osv": {
      "advisories": 0,
      "available": true,
      "confirmed": 0,
      "osv_only": [],
      "warning": null
    },
    "ref": "v1.6.0",
    "ref_kind": "release",
    "release_integrity": {
      "assets": 0,
      "checksums_published": false,
      "methods": [],
      "provenance_published": false,
      "sbom_published": false,
      "signatures_published": false,
      "verdict": "no-assets"
    },
    "released_at": "2026-10-25T12:10:25Z",
    "repository": "ASCIT31/Dark-Moon",
    "sbomlyze_diff": {
      "added": 0,
      "changed": 0,
      "drift": {},
      "findings": [],
      "removed": 0
    },
    "scanned_at": "2026-11-02T03:06:54+00:00",
    "scorecard": {
      "carried_forward": true,
      "checks": [
        {
          "name": "Branch-Protection",
          "reason": "branch protection not enabled on development/release branches",
          "score": 0
        },
        {
          "name": "CI-Tests",
          "reason": "0 out of 5 merged PRs checked by a CI test -- score normalized to 0",
          "score": 0
        },
        {
          "name": "CII-Best-Practices",
          "reason": "no effort to earn an OpenSSF best practices badge detected",
          "score": 0
        },
        {
          "name": "Dependency-Update-Tool",
          "reason": "no update tool detected",
          "score": 0
        },
        {
          "name": "Fuzzing",
          "reason": "project is not fuzzed",
          "score": 0
        },
        {
          "name": "Pinned-Dependencies",
          "reason": "dependency not pinned by hash detected -- score normalized to 0",
          "score": 0
        },
        {
          "name": "SAST",
          "reason": "SAST tool is not run on all commits -- score normalized to 0",
          "score": 0
        },
        {
          "name": "Token-Permissions",
          "reason": "detected GitHub workflow tokens with excessive permissions",
          "score": 0
        },
        {
          "name": "Vulnerabilities",
          "reason": "23 existing vulnerabilities detected",
          "score": 0
        },
        {
          "name": "Code-Review",
          "reason": "Found 3/25 approved changesets -- score normalized to 1",
          "score": 1
        },
        {
          "name": "Contributors",
          "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
          "score": 6
        },
        {
          "name": "Binary-Artifacts",
          "reason": "no binaries found in the repo",
          "score": 10
        },
        {
          "name": "Dangerous-Workflow",
          "reason": "no dangerous workflow patterns detected",
          "score": 10
        },
        {
          "name": "License",
          "reason": "license file detected",
          "score": 10
        },
        {
          "name": "Maintained",
          "reason": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
          "score": 10
        },
        {
          "name": "Security-Policy",
          "reason": "security policy file detected",
          "score": 10
        },
        {
          "name": "Packaging",
          "reason": "packaging workflow not detected",
          "score": -1
        },
        {
          "name": "Signed-Releases",
          "reason": "no releases found",
          "score": -1
        }
      ],
      "date": "2026-11-01",
      "score": 3.8,
      "source": "scorecard-cli",
      "version": "v5.6.0"
    },
    "scorecard_note": "the project is not in the OpenSSF public dataset; the Scorecard CLI fallback was skipped because this shard's weekly budget was used",
    "vulnerabilities": [],
    "workflow_audit": {
      "files": 0,
      "findings": []
    }
  },
  "updated": "2026-11-02"
}