{
  "history": [
    {
      "added": 0,
      "commit": "66ead780c590c2db63947286fa8d5131f44697f8",
      "date": "2026-11-01",
      "dependencies": 262,
      "errors": [],
      "fixable": 22,
      "go_version": null,
      "in_binary": null,
      "new_vulnerabilities": 0,
      "osv_confirmed": 22,
      "osv_only": 0,
      "ref": "0.144.0",
      "release_changed": false,
      "release_integrity": "no-assets",
      "removed": 0,
      "resolved_vulnerabilities": 0,
      "scorecard": 8.1,
      "upgraded": 0,
      "vulnerabilities": {
        "Critical": 0,
        "High": 6,
        "Low": 5,
        "Medium": 11,
        "Negligible": 0,
        "Unknown": 0
      },
      "workflow": {
        "High": 0,
        "Low": 0,
        "Medium": 0,
        "files": 6
      }
    },
    {
      "added": 0,
      "commit": "66ead780c590c2db63947286fa8d5131f44697f8",
      "date": "2026-11-02",
      "dependencies": 262,
      "errors": [],
      "fixable": 22,
      "go_version": null,
      "in_binary": null,
      "kev": 0,
      "kev_new": 0,
      "new_vulnerabilities": 0,
      "osv_confirmed": 22,
      "osv_only": 0,
      "ref": "0.144.0",
      "release_changed": false,
      "release_integrity": "no-assets",
      "removed": 0,
      "resolved_vulnerabilities": 0,
      "scorecard": 8.1,
      "scorecard_date": "2026-10-26",
      "scorecard_note": null,
      "scorecard_source": "openssf-api",
      "upgraded": 0,
      "vulnerabilities": {
        "Critical": 0,
        "High": 6,
        "Low": 5,
        "Medium": 11,
        "Negligible": 0,
        "Unknown": 0
      },
      "vulnerable_packages": 5,
      "workflow": {
        "High": 0,
        "Low": 0,
        "Medium": 0,
        "files": 6
      }
    }
  ],
  "latest": {
    "archived": false,
    "category": "Cloud Security",
    "changes": {
      "added": [],
      "any": false,
      "baseline": false,
      "integrity_drift": 0,
      "license_changes": [],
      "new_vulnerabilities": [],
      "previous_ref": "0.144.0",
      "release_changed": false,
      "removed": [],
      "resolved_vulnerabilities": [],
      "upgraded": [],
      "workflow_new": 0,
      "workflow_resolved": 0
    },
    "commit": "66ead780c590c2db63947286fa8d5131f44697f8",
    "compliance": {
      "overall_score": 55,
      "standards": {
        "bsi_tr03183": {
          "failed_checks": [
            "Component Creator",
            "Distribution Licences",
            "SHA-512 Hash",
            "Dependency Relationship",
            "SBOM Creator Contact"
          ],
          "passed": 4,
          "score": 44,
          "total": 9
        },
        "cisa": {
          "failed_checks": [
            "Software Producer",
            "Dependency Relationship",
            "License Information",
            "Component Hash",
            "SBOM Author"
          ],
          "passed": 5,
          "score": 50,
          "total": 10
        },
        "ntia": {
          "failed_checks": [
            "Supplier Name",
            "Dependency Relationship"
          ],
          "passed": 5,
          "score": 71,
          "total": 7
        }
      }
    },
    "components": [
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/ossf-scorecard.yml",
        "name": "actions/checkout",
        "purl": "pkg:github/actions/checkout@v7.0.1",
        "version": "v7.0.1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/sphinx.yml",
        "name": "actions/download-artifact",
        "purl": "pkg:github/actions/download-artifact@v8.0.2",
        "version": "v8.0.2"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/publish-to-ghcr-and-pypi.yml",
        "name": "actions/setup-python",
        "purl": "pkg:github/actions/setup-python@v7.0.0",
        "version": "v7.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/stale.yml",
        "name": "actions/stale",
        "purl": "pkg:github/actions/stale@v11.0.0",
        "version": "v11.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/ossf-scorecard.yml",
        "name": "actions/upload-artifact",
        "purl": "pkg:github/actions/upload-artifact@v7.0.2",
        "version": "v7.0.2"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/publish-to-ghcr-and-pypi.yml",
        "name": "astral-sh/setup-uv",
        "purl": "pkg:github/astral-sh/setup-uv@v10.3.0",
        "version": "v10.3.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/publish-to-ghcr-and-pypi.yml",
        "name": "docker/build-push-action",
        "purl": "pkg:github/docker/build-push-action@v7.4.0",
        "version": "v7.4.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/publish-to-ghcr-and-pypi.yml",
        "name": "docker/login-action",
        "purl": "pkg:github/docker/login-action@v4.6.0",
        "version": "v4.6.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/publish-to-ghcr-and-pypi.yml",
        "name": "docker/metadata-action",
        "purl": "pkg:github/docker/metadata-action@v6.2.0",
        "version": "v6.2.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/publish-to-ghcr-and-pypi.yml",
        "name": "docker/setup-buildx-action",
        "purl": "pkg:github/docker/setup-buildx-action@v4.4.1",
        "version": "v4.4.1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/publish-to-ghcr-and-pypi.yml",
        "name": "docker/setup-docker-action",
        "purl": "pkg:github/docker/setup-docker-action@v5.5.0",
        "version": "v5.5.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/publish-to-ghcr-and-pypi.yml",
        "name": "docker/setup-qemu-action",
        "purl": "pkg:github/docker/setup-qemu-action@v4.4.0",
        "version": "v4.4.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/ossf-scorecard.yml",
        "name": "github/codeql-action/upload-sarif",
        "purl": "pkg:github/github/codeql-action@v3.29.5#upload-sarif",
        "version": "v3.29.5"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/ossf-scorecard.yml",
        "name": "ossf/scorecard-action",
        "purl": "pkg:github/ossf/scorecard-action@v2.5.0",
        "version": "v2.5.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/sphinx.yml",
        "name": "peaceiris/actions-gh-pages",
        "purl": "pkg:github/peaceiris/actions-gh-pages@v4.1.0",
        "version": "v4.1.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/test_suite.yml",
        "name": "pre-commit/action",
        "purl": "pkg:github/pre-commit/action@v3.0.1",
        "version": "v3.0.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "adal",
        "purl": "pkg:pypi/adal@1.2.7",
        "version": "1.2.7"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "aenum",
        "purl": "pkg:pypi/aenum@3.1.17",
        "version": "3.1.17"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "aioboto3",
        "purl": "pkg:pypi/aioboto3@15.5.0",
        "version": "15.5.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "aiobotocore",
        "purl": "pkg:pypi/aiobotocore@2.25.1",
        "version": "2.25.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "aiofiles",
        "purl": "pkg:pypi/aiofiles@25.1.0",
        "version": "25.1.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "aiohappyeyeballs",
        "purl": "pkg:pypi/aiohappyeyeballs@2.6.1",
        "version": "2.6.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "aiohttp",
        "purl": "pkg:pypi/aiohttp@3.14.4",
        "version": "3.14.4"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "aioitertools",
        "purl": "pkg:pypi/aioitertools@0.13.0",
        "version": "0.13.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "aiosignal",
        "purl": "pkg:pypi/aiosignal@1.4.0",
        "version": "1.4.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "alabaster",
        "purl": "pkg:pypi/alabaster@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "annotated-doc",
        "purl": "pkg:pypi/annotated-doc@0.0.4",
        "version": "0.0.4"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "annotated-types",
        "purl": "pkg:pypi/annotated-types@0.7.0",
        "version": "0.7.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "anyio",
        "purl": "pkg:pypi/anyio@4.14.2",
        "version": "4.14.2"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "asn1crypto",
        "purl": "pkg:pypi/asn1crypto@1.5.1",
        "version": "1.5.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "attrs",
        "purl": "pkg:pypi/attrs@25.4.0",
        "version": "25.4.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-common",
        "purl": "pkg:pypi/azure-common@1.1.28",
        "version": "1.1.28"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-core",
        "purl": "pkg:pypi/azure-core@1.39.0",
        "version": "1.39.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-identity",
        "purl": "pkg:pypi/azure-identity@1.26.0",
        "version": "1.26.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-keyvault-certificates",
        "purl": "pkg:pypi/azure-keyvault-certificates@4.11.3",
        "version": "4.11.3"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-keyvault-keys",
        "purl": "pkg:pypi/azure-keyvault-keys@4.11.3",
        "version": "4.11.3"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-keyvault-secrets",
        "purl": "pkg:pypi/azure-keyvault-secrets@4.11.3",
        "version": "4.11.3"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-mgmt-authorization",
        "purl": "pkg:pypi/azure-mgmt-authorization@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-mgmt-compute",
        "purl": "pkg:pypi/azure-mgmt-compute@38.4.0",
        "version": "38.4.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-mgmt-containerinstance",
        "purl": "pkg:pypi/azure-mgmt-containerinstance@10.1.0",
        "version": "10.1.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-mgmt-containerservice",
        "purl": "pkg:pypi/azure-mgmt-containerservice@41.7.0",
        "version": "41.7.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-mgmt-core",
        "purl": "pkg:pypi/azure-mgmt-core@1.6.0",
        "version": "1.6.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-mgmt-cosmosdb",
        "purl": "pkg:pypi/azure-mgmt-cosmosdb@10.0.0",
        "version": "10.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-mgmt-datafactory",
        "purl": "pkg:pypi/azure-mgmt-datafactory@10.0.0",
        "version": "10.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-mgmt-eventgrid",
        "purl": "pkg:pypi/azure-mgmt-eventgrid@10.4.0",
        "version": "10.4.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-mgmt-eventhub",
        "purl": "pkg:pypi/azure-mgmt-eventhub@12.0.0",
        "version": "12.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-mgmt-keyvault",
        "purl": "pkg:pypi/azure-mgmt-keyvault@14.1.0",
        "version": "14.1.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-mgmt-logic",
        "purl": "pkg:pypi/azure-mgmt-logic@10.0.0",
        "version": "10.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-mgmt-managementgroups",
        "purl": "pkg:pypi/azure-mgmt-managementgroups@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-mgmt-monitor",
        "purl": "pkg:pypi/azure-mgmt-monitor@7.0.0",
        "version": "7.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-mgmt-network",
        "purl": "pkg:pypi/azure-mgmt-network@33.0.0",
        "version": "33.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-mgmt-resource",
        "purl": "pkg:pypi/azure-mgmt-resource@26.0.0",
        "version": "26.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-mgmt-resource-subscriptions",
        "purl": "pkg:pypi/azure-mgmt-resource-subscriptions@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-mgmt-security",
        "purl": "pkg:pypi/azure-mgmt-security@7.0.0",
        "version": "7.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-mgmt-sql",
        "purl": "pkg:pypi/azure-mgmt-sql@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-mgmt-storage",
        "purl": "pkg:pypi/azure-mgmt-storage@25.2.0",
        "version": "25.2.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-mgmt-synapse",
        "purl": "pkg:pypi/azure-mgmt-synapse@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-mgmt-web",
        "purl": "pkg:pypi/azure-mgmt-web@11.0.1",
        "version": "11.0.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-storage-blob",
        "purl": "pkg:pypi/azure-storage-blob@12.31.0",
        "version": "12.31.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "azure-synapse-artifacts",
        "purl": "pkg:pypi/azure-synapse-artifacts@0.22.0",
        "version": "0.22.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "babel",
        "purl": "pkg:pypi/babel@2.18.0",
        "version": "2.18.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "backoff",
        "purl": "pkg:pypi/backoff@2.2.1",
        "version": "2.2.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "black",
        "purl": "pkg:pypi/black@26.10.1",
        "version": "26.10.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "blinker",
        "purl": "pkg:pypi/blinker@1.9.0",
        "version": "1.9.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "boto3",
        "purl": "pkg:pypi/boto3@1.40.61",
        "version": "1.40.61"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "botocore",
        "purl": "pkg:pypi/botocore@1.40.61",
        "version": "1.40.61"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "cartography",
        "purl": "pkg:pypi/cartography",
        "version": "UNKNOWN"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "cbor2",
        "purl": "pkg:pypi/cbor2@6.1.3",
        "version": "6.1.3"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "certifi",
        "purl": "pkg:pypi/certifi@2026.10.19",
        "version": "2026.10.19"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "cffi",
        "purl": "pkg:pypi/cffi@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "cfgv",
        "purl": "pkg:pypi/cfgv@3.5.0",
        "version": "3.5.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "charset-normalizer",
        "purl": "pkg:pypi/charset-normalizer@3.4.4",
        "version": "3.4.4"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "circuitbreaker",
        "purl": "pkg:pypi/circuitbreaker@2.1.3",
        "version": "2.1.3"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "click",
        "purl": "pkg:pypi/click@8.3.1",
        "version": "8.3.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "cloudflare",
        "purl": "pkg:pypi/cloudflare@5.9.0",
        "version": "5.9.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "colorama",
        "purl": "pkg:pypi/colorama@0.4.6",
        "version": "0.4.6"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "coverage",
        "purl": "pkg:pypi/coverage@7.13.3",
        "version": "7.13.3"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "crc32c",
        "purl": "pkg:pypi/crc32c@2.8",
        "version": "2.8"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "crowdstrike-falconpy",
        "purl": "pkg:pypi/crowdstrike-falconpy@1.6.6",
        "version": "1.6.6"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "cryptography",
        "purl": "pkg:pypi/cryptography@50.0.2",
        "version": "50.0.2"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "distlib",
        "purl": "pkg:pypi/distlib@0.4.4",
        "version": "0.4.4"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "distro",
        "purl": "pkg:pypi/distro@1.9.0",
        "version": "1.9.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "dnspython",
        "purl": "pkg:pypi/dnspython@2.9.0",
        "version": "2.9.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "docker",
        "purl": "pkg:pypi/docker@7.1.0",
        "version": "7.1.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "docstring-parser",
        "purl": "pkg:pypi/docstring-parser@0.18.0",
        "version": "0.18.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "docutils",
        "purl": "pkg:pypi/docutils@0.22.4",
        "version": "0.22.4"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "duo-client",
        "purl": "pkg:pypi/duo-client@5.7.0",
        "version": "5.7.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "durationpy",
        "purl": "pkg:pypi/durationpy@0.10",
        "version": "0.10"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "execnet",
        "purl": "pkg:pypi/execnet@2.1.2",
        "version": "2.1.2"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "filelock",
        "purl": "pkg:pypi/filelock@3.32.7",
        "version": "3.32.7"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "frozenlist",
        "purl": "pkg:pypi/frozenlist@1.8.0",
        "version": "1.8.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "google-api-core",
        "purl": "pkg:pypi/google-api-core@2.42.0",
        "version": "2.42.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "google-api-python-client",
        "purl": "pkg:pypi/google-api-python-client@2.201.0",
        "version": "2.201.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "google-auth",
        "purl": "pkg:pypi/google-auth@2.62.0",
        "version": "2.62.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "google-auth-httplib2",
        "purl": "pkg:pypi/google-auth-httplib2@0.3.0",
        "version": "0.3.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "google-cloud-access-context-manager",
        "purl": "pkg:pypi/google-cloud-access-context-manager@0.3.0",
        "version": "0.3.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "google-cloud-aiplatform",
        "purl": "pkg:pypi/google-cloud-aiplatform@2.5.0",
        "version": "2.5.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "google-cloud-artifact-registry",
        "purl": "pkg:pypi/google-cloud-artifact-registry@1.23.0",
        "version": "1.23.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "google-cloud-asset",
        "purl": "pkg:pypi/google-cloud-asset@4.5.0",
        "version": "4.5.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "google-cloud-bigquery",
        "purl": "pkg:pypi/google-cloud-bigquery@3.41.0",
        "version": "3.41.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "google-cloud-core",
        "purl": "pkg:pypi/google-cloud-core@2.5.1",
        "version": "2.5.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "google-cloud-org-policy",
        "purl": "pkg:pypi/google-cloud-org-policy@1.16.0",
        "version": "1.16.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "google-cloud-os-config",
        "purl": "pkg:pypi/google-cloud-os-config@1.23.0",
        "version": "1.23.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "google-cloud-resource-manager",
        "purl": "pkg:pypi/google-cloud-resource-manager@1.19.0",
        "version": "1.19.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "google-cloud-run",
        "purl": "pkg:pypi/google-cloud-run@0.16.2",
        "version": "0.16.2"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "google-cloud-storage",
        "purl": "pkg:pypi/google-cloud-storage@3.17.1",
        "version": "3.17.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "google-crc32c",
        "purl": "pkg:pypi/google-crc32c@1.8.0",
        "version": "1.8.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "google-genai",
        "purl": "pkg:pypi/google-genai@1.73.1",
        "version": "1.73.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "google-resumable-media",
        "purl": "pkg:pypi/google-resumable-media@2.8.2",
        "version": "2.8.2"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "googleapis-common-protos",
        "purl": "pkg:pypi/googleapis-common-protos@1.72.0",
        "version": "1.72.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "grpc-google-iam-v1",
        "purl": "pkg:pypi/grpc-google-iam-v1@0.14.3",
        "version": "0.14.3"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "grpcio",
        "purl": "pkg:pypi/grpcio@1.76.0",
        "version": "1.76.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "grpcio-status",
        "purl": "pkg:pypi/grpcio-status@1.76.0",
        "version": "1.76.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "grpclib",
        "purl": "pkg:pypi/grpclib@0.4.9",
        "version": "0.4.9"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "h11",
        "purl": "pkg:pypi/h11@0.16.0",
        "version": "0.16.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "h2",
        "purl": "pkg:pypi/h2@4.4.1",
        "version": "4.4.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "hpack",
        "purl": "pkg:pypi/hpack@4.2.0",
        "version": "4.2.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "httpcore",
        "purl": "pkg:pypi/httpcore@1.0.9",
        "version": "1.0.9"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "httpcore2",
        "purl": "pkg:pypi/httpcore2@2.13.1",
        "version": "2.13.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "httplib2",
        "purl": "pkg:pypi/httplib2@0.32.0",
        "version": "0.32.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "httpx",
        "purl": "pkg:pypi/httpx@0.28.1",
        "version": "0.28.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "httpx2",
        "purl": "pkg:pypi/httpx2@2.13.1",
        "version": "2.13.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "httpx2-jsfetch",
        "purl": "pkg:pypi/httpx2-jsfetch@1.0",
        "version": "1.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "hyperframe",
        "purl": "pkg:pypi/hyperframe@6.1.0",
        "version": "6.1.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "identify",
        "purl": "pkg:pypi/identify@2.6.16",
        "version": "2.6.16"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "idna",
        "purl": "pkg:pypi/idna@3.19",
        "version": "3.19"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "imagesize",
        "purl": "pkg:pypi/imagesize@1.4.1",
        "version": "1.4.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "iniconfig",
        "purl": "pkg:pypi/iniconfig@2.3.0",
        "version": "2.3.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "isodate",
        "purl": "pkg:pypi/isodate@0.7.2",
        "version": "0.7.2"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "jinja2",
        "purl": "pkg:pypi/jinja2@3.1.6",
        "version": "3.1.6"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "jmespath",
        "purl": "pkg:pypi/jmespath@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "jwcrypto",
        "purl": "pkg:pypi/jwcrypto@1.5.9",
        "version": "1.5.9"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "kubernetes",
        "purl": "pkg:pypi/kubernetes@36.0.3",
        "version": "36.0.3"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "linkify-it-py",
        "purl": "pkg:pypi/linkify-it-py@2.0.3",
        "version": "2.0.3"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "markdown-it-py",
        "purl": "pkg:pypi/markdown-it-py@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "markupsafe",
        "purl": "pkg:pypi/markupsafe@3.0.3",
        "version": "3.0.3"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "marshmallow",
        "purl": "pkg:pypi/marshmallow@4.3.1",
        "version": "4.3.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "mdit-py-plugins",
        "purl": "pkg:pypi/mdit-py-plugins@0.5.0",
        "version": "0.5.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "mdurl",
        "purl": "pkg:pypi/mdurl@0.1.2",
        "version": "0.1.2"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "microsoft-kiota-abstractions",
        "purl": "pkg:pypi/microsoft-kiota-abstractions@1.11.7",
        "version": "1.11.7"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "microsoft-kiota-authentication-azure",
        "purl": "pkg:pypi/microsoft-kiota-authentication-azure@1.11.7",
        "version": "1.11.7"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "microsoft-kiota-http",
        "purl": "pkg:pypi/microsoft-kiota-http@1.11.7",
        "version": "1.11.7"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "microsoft-kiota-serialization-form",
        "purl": "pkg:pypi/microsoft-kiota-serialization-form@1.11.7",
        "version": "1.11.7"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "microsoft-kiota-serialization-json",
        "purl": "pkg:pypi/microsoft-kiota-serialization-json@1.11.7",
        "version": "1.11.7"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "microsoft-kiota-serialization-multipart",
        "purl": "pkg:pypi/microsoft-kiota-serialization-multipart@1.11.7",
        "version": "1.11.7"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "microsoft-kiota-serialization-text",
        "purl": "pkg:pypi/microsoft-kiota-serialization-text@1.11.7",
        "version": "1.11.7"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "modal",
        "purl": "pkg:pypi/modal@1.6.2",
        "version": "1.6.2"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "moto",
        "purl": "pkg:pypi/moto@5.2.4",
        "version": "5.2.4"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "msal",
        "purl": "pkg:pypi/msal@1.39.0",
        "version": "1.39.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "msal-extensions",
        "purl": "pkg:pypi/msal-extensions@1.3.1",
        "version": "1.3.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "msgraph-core",
        "purl": "pkg:pypi/msgraph-core@1.5.1",
        "version": "1.5.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "msgraph-sdk",
        "purl": "pkg:pypi/msgraph-sdk@1.64.0",
        "version": "1.64.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "msrest",
        "purl": "pkg:pypi/msrest@0.7.1",
        "version": "0.7.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "msrestazure",
        "purl": "pkg:pypi/msrestazure@0.6.4.post1",
        "version": "0.6.4.post1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "multidict",
        "purl": "pkg:pypi/multidict@6.9.1",
        "version": "6.9.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "mypy-extensions",
        "purl": "pkg:pypi/mypy-extensions@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "myst-parser",
        "purl": "pkg:pypi/myst-parser@5.0.0",
        "version": "5.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "neo4j",
        "purl": "pkg:pypi/neo4j@6.4.1",
        "version": "6.4.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "neo4j-rust-ext",
        "purl": "pkg:pypi/neo4j-rust-ext@6.4.1.0",
        "version": "6.4.1.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "nodeenv",
        "purl": "pkg:pypi/nodeenv@1.10.0",
        "version": "1.10.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "oauthlib",
        "purl": "pkg:pypi/oauthlib@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "oci",
        "purl": "pkg:pypi/oci@2.188.0",
        "version": "2.188.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "okta",
        "purl": "pkg:pypi/okta@3.4.4",
        "version": "3.4.4"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "opentelemetry-api",
        "purl": "pkg:pypi/opentelemetry-api@1.45.1",
        "version": "1.45.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "opentelemetry-sdk",
        "purl": "pkg:pypi/opentelemetry-sdk@1.45.1",
        "version": "1.45.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "opentelemetry-semantic-conventions",
        "purl": "pkg:pypi/opentelemetry-semantic-conventions@0.66b1",
        "version": "0.66b1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "packageurl-python",
        "purl": "pkg:pypi/packageurl-python@0.17.6",
        "version": "0.17.6"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "packaging",
        "purl": "pkg:pypi/packaging@26.3",
        "version": "26.3"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "pagerduty",
        "purl": "pkg:pypi/pagerduty@7.0.1",
        "version": "7.0.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "pathspec",
        "purl": "pkg:pypi/pathspec@1.0.4",
        "version": "1.0.4"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "platformdirs",
        "purl": "pkg:pypi/platformdirs@4.5.1",
        "version": "4.5.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "pluggy",
        "purl": "pkg:pypi/pluggy@1.6.0",
        "version": "1.6.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "policyuniverse",
        "purl": "pkg:pypi/policyuniverse@1.5.1.20231109",
        "version": "1.5.1.20231109"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "pre-commit",
        "purl": "pkg:pypi/pre-commit@4.7.0",
        "version": "4.7.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "propcache",
        "purl": "pkg:pypi/propcache@0.4.1",
        "version": "0.4.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "proto-plus",
        "purl": "pkg:pypi/proto-plus@1.27.1",
        "version": "1.27.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "protobuf",
        "purl": "pkg:pypi/protobuf@6.33.5",
        "version": "6.33.5"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "pyasn1",
        "purl": "pkg:pypi/pyasn1@0.6.4",
        "version": "0.6.4"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "pyasn1-modules",
        "purl": "pkg:pypi/pyasn1-modules@0.4.2",
        "version": "0.4.2"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "pycparser",
        "purl": "pkg:pypi/pycparser@3.0",
        "version": "3.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "pycryptodomex",
        "purl": "pkg:pypi/pycryptodomex@3.23.0",
        "version": "3.23.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "pydantic",
        "purl": "pkg:pypi/pydantic@2.12.5",
        "version": "2.12.5"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "pydantic-core",
        "purl": "pkg:pypi/pydantic-core@2.41.5",
        "version": "2.41.5"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "pydash",
        "purl": "pkg:pypi/pydash@8.1.0",
        "version": "8.1.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "pydo",
        "purl": "pkg:pypi/pydo@0.44.0",
        "version": "0.44.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "pygments",
        "purl": "pkg:pypi/pygments@2.19.2",
        "version": "2.19.2"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "pygments-styles",
        "purl": "pkg:pypi/pygments-styles@0.3.0",
        "version": "0.3.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "pyjwt",
        "purl": "pkg:pypi/pyjwt@2.15.0",
        "version": "2.15.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "pyopenssl",
        "purl": "pkg:pypi/pyopenssl@26.4.0",
        "version": "26.4.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "pyparsing",
        "purl": "pkg:pypi/pyparsing@3.3.2",
        "version": "3.3.2"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "pytest",
        "purl": "pkg:pypi/pytest@9.1.1",
        "version": "9.1.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "pytest-asyncio",
        "purl": "pkg:pypi/pytest-asyncio@1.4.0",
        "version": "1.4.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "pytest-cov",
        "purl": "pkg:pypi/pytest-cov@7.1.0",
        "version": "7.1.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "pytest-mock",
        "purl": "pkg:pypi/pytest-mock@3.16.1",
        "version": "3.16.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "pytest-rerunfailures",
        "purl": "pkg:pypi/pytest-rerunfailures@16.7",
        "version": "16.7"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "pytest-xdist",
        "purl": "pkg:pypi/pytest-xdist@3.8.0",
        "version": "3.8.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "python-dateutil",
        "purl": "pkg:pypi/python-dateutil@2.9.0.post0",
        "version": "2.9.0.post0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "python-discovery",
        "purl": "pkg:pypi/python-discovery@1.6.1",
        "version": "1.6.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "python-dotenv",
        "purl": "pkg:pypi/python-dotenv@1.2.2",
        "version": "1.2.2"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "python-pkcs11",
        "purl": "pkg:pypi/python-pkcs11@0.9.4",
        "version": "0.9.4"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "pytokens",
        "purl": "pkg:pypi/pytokens@0.4.1",
        "version": "0.4.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "pytz",
        "purl": "pkg:pypi/pytz@2025.2",
        "version": "2025.2"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "pywin32",
        "purl": "pkg:pypi/pywin32@311",
        "version": "311"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "pyyaml",
        "purl": "pkg:pypi/pyyaml@6.0.3",
        "version": "6.0.3"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "requests",
        "purl": "pkg:pypi/requests@2.34.2",
        "version": "2.34.2"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "requests-oauthlib",
        "purl": "pkg:pypi/requests-oauthlib@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "responses",
        "purl": "pkg:pypi/responses@0.25.8",
        "version": "0.25.8"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "rich",
        "purl": "pkg:pypi/rich@14.3.2",
        "version": "14.3.2"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "roman-numerals",
        "purl": "pkg:pypi/roman-numerals@4.1.0",
        "version": "4.1.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "s3transfer",
        "purl": "pkg:pypi/s3transfer@0.14.0",
        "version": "0.14.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "scaleway",
        "purl": "pkg:pypi/scaleway@2.12.0",
        "version": "2.12.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "scaleway-core",
        "purl": "pkg:pypi/scaleway-core@2.12.0",
        "version": "2.12.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "setuptools",
        "purl": "pkg:pypi/setuptools@80.10.2",
        "version": "80.10.2"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "shellingham",
        "purl": "pkg:pypi/shellingham@1.5.4",
        "version": "1.5.4"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "shibuya",
        "purl": "pkg:pypi/shibuya@2026.7.12",
        "version": "2026.7.12"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "six",
        "purl": "pkg:pypi/six@1.17.0",
        "version": "1.17.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "slack-sdk",
        "purl": "pkg:pypi/slack-sdk@3.45.0",
        "version": "3.45.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "sniffio",
        "purl": "pkg:pypi/sniffio@1.3.1",
        "version": "1.3.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "snowballstemmer",
        "purl": "pkg:pypi/snowballstemmer@3.0.1",
        "version": "3.0.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "sphinx",
        "purl": "pkg:pypi/sphinx@9.0.4",
        "version": "9.0.4"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "sphinx",
        "purl": "pkg:pypi/sphinx@9.1.0",
        "version": "9.1.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "sphinx-autobuild",
        "purl": "pkg:pypi/sphinx-autobuild@2025.8.25",
        "version": "2025.8.25"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "sphinx-copybutton",
        "purl": "pkg:pypi/sphinx-copybutton@0.5.2",
        "version": "0.5.2"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "sphinx-last-updated-by-git",
        "purl": "pkg:pypi/sphinx-last-updated-by-git@0.3.8",
        "version": "0.3.8"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "sphinx-sitemap",
        "purl": "pkg:pypi/sphinx-sitemap@2.9.0",
        "version": "2.9.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "sphinxcontrib-applehelp",
        "purl": "pkg:pypi/sphinxcontrib-applehelp@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "sphinxcontrib-devhelp",
        "purl": "pkg:pypi/sphinxcontrib-devhelp@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "sphinxcontrib-htmlhelp",
        "purl": "pkg:pypi/sphinxcontrib-htmlhelp@2.1.0",
        "version": "2.1.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "sphinxcontrib-jsmath",
        "purl": "pkg:pypi/sphinxcontrib-jsmath@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "sphinxcontrib-mermaid",
        "purl": "pkg:pypi/sphinxcontrib-mermaid@2.1.1",
        "version": "2.1.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "sphinxcontrib-qthelp",
        "purl": "pkg:pypi/sphinxcontrib-qthelp@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "sphinxcontrib-serializinghtml",
        "purl": "pkg:pypi/sphinxcontrib-serializinghtml@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "starlette",
        "purl": "pkg:pypi/starlette@1.3.1",
        "version": "1.3.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "statsd",
        "purl": "pkg:pypi/statsd@4.0.1",
        "version": "4.0.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "std-uritemplate",
        "purl": "pkg:pypi/std-uritemplate@2.0.8",
        "version": "2.0.8"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "synchronicity",
        "purl": "pkg:pypi/synchronicity@0.12.6",
        "version": "0.12.6"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "tenacity",
        "purl": "pkg:pypi/tenacity@9.1.4",
        "version": "9.1.4"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "testcontainers",
        "purl": "pkg:pypi/testcontainers@4.15.0",
        "version": "4.15.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "toml",
        "purl": "pkg:pypi/toml@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "tomli",
        "purl": "pkg:pypi/tomli@2.4.0",
        "version": "2.4.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "truststore",
        "purl": "pkg:pypi/truststore@0.10.4",
        "version": "0.10.4"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "typer",
        "purl": "pkg:pypi/typer@0.27.3",
        "version": "0.27.3"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "types-aiobotocore-ecr",
        "purl": "pkg:pypi/types-aiobotocore-ecr@3.9.2",
        "version": "3.9.2"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "types-certifi",
        "purl": "pkg:pypi/types-certifi@2021.10.8.3",
        "version": "2021.10.8.3"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "types-pyyaml",
        "purl": "pkg:pypi/types-pyyaml@6.0.12.20260906",
        "version": "6.0.12.20260906"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "types-requests",
        "purl": "pkg:pypi/types-requests@2.33.0.20261006",
        "version": "2.33.0.20261006"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "types-toml",
        "purl": "pkg:pypi/types-toml@0.10.8.20260518",
        "version": "0.10.8.20260518"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "typing-extensions",
        "purl": "pkg:pypi/typing-extensions@4.15.0",
        "version": "4.15.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "typing-inspection",
        "purl": "pkg:pypi/typing-inspection@0.4.2",
        "version": "0.4.2"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "uc-micro-py",
        "purl": "pkg:pypi/uc-micro-py@1.0.3",
        "version": "1.0.3"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "uritemplate",
        "purl": "pkg:pypi/uritemplate@4.2.0",
        "version": "4.2.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "urllib3",
        "purl": "pkg:pypi/urllib3@2.8.0",
        "version": "2.8.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "uvicorn",
        "purl": "pkg:pypi/uvicorn@0.40.0",
        "version": "0.40.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "virtualenv",
        "purl": "pkg:pypi/virtualenv@21.14.9",
        "version": "21.14.9"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "watchfiles",
        "purl": "pkg:pypi/watchfiles@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "websocket-client",
        "purl": "pkg:pypi/websocket-client@1.9.0",
        "version": "1.9.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "websockets",
        "purl": "pkg:pypi/websockets@16.0",
        "version": "16.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "werkzeug",
        "purl": "pkg:pypi/werkzeug@3.1.9",
        "version": "3.1.9"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "workos",
        "purl": "pkg:pypi/workos@10.5.0",
        "version": "10.5.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "wrapt",
        "purl": "pkg:pypi/wrapt@1.17.3",
        "version": "1.17.3"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "xmltodict",
        "purl": "pkg:pypi/xmltodict@1.0.4",
        "version": "1.0.4"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "uv.lock",
        "name": "yarl",
        "purl": "pkg:pypi/yarl@1.25.1",
        "version": "1.25.1"
      }
    ],
    "description": "Map infrastructure relationships and attack surface",
    "errors": [],
    "id": "lyft__cartography",
    "manifests": [
      ".github/workflows/ossf-scorecard.yml",
      ".github/workflows/publish-to-ghcr-and-pypi.yml",
      ".github/workflows/refresh_shard_durations.yml",
      ".github/workflows/sphinx.yml",
      ".github/workflows/stale.yml",
      ".github/workflows/test_suite.yml",
      "pyproject.toml",
      "setup.cfg",
      "setup.py",
      "uv.lock"
    ],
    "name": "cartography",
    "osv": {
      "advisories": 22,
      "available": true,
      "confirmed": 22,
      "osv_only": [],
      "warning": null
    },
    "ref": "0.144.0",
    "ref_kind": "release",
    "release_integrity": {
      "assets": 0,
      "checksums_published": false,
      "methods": [],
      "provenance_published": false,
      "sbom_published": false,
      "signatures_published": false,
      "verdict": "no-assets"
    },
    "released_at": "2026-10-29T20:05:46Z",
    "repository": "lyft/cartography",
    "sbomlyze_diff": {
      "added": 0,
      "changed": 0,
      "drift": {},
      "findings": [
        "0 version changes among 285 shared packages \u2014 no actual upgrades",
        "Core system packages stable: pypi (246), github (32) unchanged"
      ],
      "removed": 0
    },
    "scanned_at": "2026-11-02T03:07:39+00:00",
    "scorecard": {
      "checks": [
        {
          "name": "CII-Best-Practices",
          "reason": "no effort to earn an OpenSSF best practices badge detected",
          "score": 0
        },
        {
          "name": "Fuzzing",
          "reason": "project is not fuzzed",
          "score": 0
        },
        {
          "name": "SAST",
          "reason": "SAST tool is not run on all commits -- score normalized to 0",
          "score": 0
        },
        {
          "name": "Code-Review",
          "reason": "Found 21/22 approved changesets -- score normalized to 9",
          "score": 9
        },
        {
          "name": "Binary-Artifacts",
          "reason": "no binaries found in the repo",
          "score": 10
        },
        {
          "name": "Dangerous-Workflow",
          "reason": "no dangerous workflow patterns detected",
          "score": 10
        },
        {
          "name": "License",
          "reason": "license file detected",
          "score": 10
        },
        {
          "name": "Maintained",
          "reason": "30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10",
          "score": 10
        },
        {
          "name": "Packaging",
          "reason": "packaging workflow detected",
          "score": 10
        },
        {
          "name": "Pinned-Dependencies",
          "reason": "all dependencies are pinned",
          "score": 10
        },
        {
          "name": "Security-Policy",
          "reason": "security policy file detected",
          "score": 10
        },
        {
          "name": "Token-Permissions",
          "reason": "GitHub workflow tokens follow principle of least privilege",
          "score": 10
        },
        {
          "name": "Branch-Protection",
          "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
          "score": -1
        },
        {
          "name": "Signed-Releases",
          "reason": "no releases found",
          "score": -1
        }
      ],
      "date": "2026-10-26",
      "score": 8.1,
      "source": "openssf-api",
      "version": "v5.6.0"
    },
    "vulnerabilities": [
      {
        "aliases": [
          "CVE-2026-112940"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2026-112940",
          "percentile": 0.08746,
          "score": 0.0019
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.2.1"
        ],
        "id": "GHSA-v4x8-3wr5-3wq8",
        "kev": null,
        "location": "uv.lock",
        "osv_confirmed": true,
        "package": "filelock",
        "severity": "High",
        "summary": "filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files",
        "url": "https://github.com/advisories/GHSA-v4x8-3wr5-3wq8",
        "version": "3.32.7"
      },
      {
        "aliases": [
          "CVE-2026-119196"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2026-119196",
          "percentile": 0.36816,
          "score": 0.00425
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.6.5"
        ],
        "id": "GHSA-2qm8-x737-gmw5",
        "kev": null,
        "location": "uv.lock",
        "osv_confirmed": true,
        "package": "pyasn1",
        "severity": "High",
        "summary": "pyasn1 has quadratic CPU consumption in constructed BIT STRING decoding",
        "url": "https://github.com/advisories/GHSA-2qm8-x737-gmw5",
        "version": "0.6.4"
      },
      {
        "aliases": [
          "CVE-2026-119195"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2026-119195",
          "percentile": 0.4464,
          "score": 0.00527
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.6.5"
        ],
        "id": "GHSA-9m75-vc3g-4x39",
        "kev": null,
        "location": "uv.lock",
        "osv_confirmed": true,
        "package": "pyasn1",
        "severity": "High",
        "summary": "pyasn1 has quadratic-time denial of service in constructed string and indefinite-length ANY decoding",
        "url": "https://github.com/advisories/GHSA-9m75-vc3g-4x39",
        "version": "0.6.4"
      },
      {
        "aliases": [
          "CVE-2026-119194"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2026-119194",
          "percentile": 0.36816,
          "score": 0.00425
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.6.5"
        ],
        "id": "GHSA-fm9c-5rcf-2q5p",
        "kev": null,
        "location": "uv.lock",
        "osv_confirmed": true,
        "package": "pyasn1",
        "severity": "High",
        "summary": "pyasn1 has quadratic CPU use in schemaless BER/CER/DER container decoding",
        "url": "https://github.com/advisories/GHSA-fm9c-5rcf-2q5p",
        "version": "0.6.4"
      },
      {
        "aliases": [
          "CVE-2026-119197"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2026-119197",
          "percentile": 0.36817,
          "score": 0.00425
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.6.5"
        ],
        "id": "GHSA-mm57-4v3p-rchx",
        "kev": null,
        "location": "uv.lock",
        "osv_confirmed": true,
        "package": "pyasn1",
        "severity": "High",
        "summary": "pyasn1 has quadratic-complexity denial of service in binary REAL decoding",
        "url": "https://github.com/advisories/GHSA-mm57-4v3p-rchx",
        "version": "0.6.4"
      },
      {
        "aliases": [
          "CVE-2026-115586"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2026-115586",
          "percentile": 0.19365,
          "score": 0.00271
        },
        "fix_state": "fixed",
        "fixed_in": [
          "21.14.13"
        ],
        "id": "GHSA-cx6f-vjhg-g3cc",
        "kev": null,
        "location": "uv.lock",
        "osv_confirmed": true,
        "package": "virtualenv",
        "severity": "High",
        "summary": "virtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regression in 21.14.9)",
        "url": "https://github.com/advisories/GHSA-cx6f-vjhg-g3cc",
        "version": "21.14.9"
      },
      {
        "aliases": [
          "CVE-2026-112908"
        ],
        "ecosystem": "pypi",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "4.2.1"
        ],
        "id": "GHSA-6627-m3xw-93mp",
        "kev": null,
        "location": "uv.lock",
        "osv_confirmed": true,
        "package": "filelock",
        "severity": "Medium",
        "summary": "filelock: StrictSoftFileLock creates its claim directories without the lock mode, so another local user with a write bit on them can end a live hold",
        "url": "https://github.com/advisories/GHSA-6627-m3xw-93mp",
        "version": "3.32.7"
      },
      {
        "aliases": [
          "CVE-2026-112909"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2026-112909",
          "percentile": 0.12637,
          "score": 0.0022
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.2.1"
        ],
        "id": "GHSA-69hj-f68j-2879",
        "kev": null,
        "location": "uv.lock",
        "osv_confirmed": true,
        "package": "filelock",
        "severity": "Medium",
        "summary": "filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path",
        "url": "https://github.com/advisories/GHSA-69hj-f68j-2879",
        "version": "3.32.7"
      },
      {
        "aliases": [
          "CVE-2026-112910"
        ],
        "ecosystem": "pypi",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "4.2.1"
        ],
        "id": "GHSA-8mx5-7m5m-r77g",
        "kev": null,
        "location": "uv.lock",
        "osv_confirmed": true,
        "package": "filelock",
        "severity": "Medium",
        "summary": "filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACL",
        "url": "https://github.com/advisories/GHSA-8mx5-7m5m-r77g",
        "version": "3.32.7"
      },
      {
        "aliases": [
          "CVE-2026-112911"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2026-112911",
          "percentile": 0.03966,
          "score": 0.00148
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.2.1"
        ],
        "id": "GHSA-9c4x-gm8v-wgc4",
        "kev": null,
        "location": "uv.lock",
        "osv_confirmed": true,
        "package": "filelock",
        "severity": "Medium",
        "summary": "filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual exclusion",
        "url": "https://github.com/advisories/GHSA-9c4x-gm8v-wgc4",
        "version": "3.32.7"
      },
      {
        "aliases": [
          "CVE-2026-112915"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2026-112915",
          "percentile": 0.1226,
          "score": 0.00218
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.2.1"
        ],
        "id": "GHSA-cwqr-hh33-gh44",
        "kev": null,
        "location": "uv.lock",
        "osv_confirmed": true,
        "package": "filelock",
        "severity": "Medium",
        "summary": "filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeout",
        "url": "https://github.com/advisories/GHSA-cwqr-hh33-gh44",
        "version": "3.32.7"
      },
      {
        "aliases": [
          "CVE-2026-112935"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2026-112935",
          "percentile": 0.02761,
          "score": 0.00132
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.2.1"
        ],
        "id": "GHSA-fq56-3cx3-fjxp",
        "kev": null,
        "location": "uv.lock",
        "osv_confirmed": true,
        "package": "filelock",
        "severity": "Medium",
        "summary": "filelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holders",
        "url": "https://github.com/advisories/GHSA-fq56-3cx3-fjxp",
        "version": "3.32.7"
      },
      {
        "aliases": [
          "CVE-2026-112936"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2026-112936",
          "percentile": 0.14138,
          "score": 0.00232
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.0.9"
        ],
        "id": "GHSA-j8f7-rjxc-mr56",
        "kev": null,
        "location": "uv.lock",
        "osv_confirmed": true,
        "package": "filelock",
        "severity": "Medium",
        "summary": "filelock: ReadWriteLock follows a symlink at the lock path into SQLite",
        "url": "https://github.com/advisories/GHSA-j8f7-rjxc-mr56",
        "version": "3.32.7"
      },
      {
        "aliases": [
          "CVE-2026-112938"
        ],
        "ecosystem": "pypi",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "4.2.1"
        ],
        "id": "GHSA-m462-7rxw-wvpg",
        "kev": null,
        "location": "uv.lock",
        "osv_confirmed": true,
        "package": "filelock",
        "severity": "Medium",
        "summary": "filelock: StrictSoftFileLock follows a symbolic link swapped in at <path>.filelock and creates claim files in a directory another local user chooses",
        "url": "https://github.com/advisories/GHSA-m462-7rxw-wvpg",
        "version": "3.32.7"
      },
      {
        "aliases": [
          "CVE-2026-112939"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2026-112939",
          "percentile": 0.03305,
          "score": 0.0014
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.2.1"
        ],
        "id": "GHSA-rfpc-qcw5-3pc4",
        "kev": null,
        "location": "uv.lock",
        "osv_confirmed": true,
        "package": "filelock",
        "severity": "Medium",
        "summary": "filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable marker",
        "url": "https://github.com/advisories/GHSA-rfpc-qcw5-3pc4",
        "version": "3.32.7"
      },
      {
        "aliases": [
          "CVE-2026-59890"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2026-59890",
          "percentile": 0.34795,
          "score": 0.00405
        },
        "fix_state": "fixed",
        "fixed_in": [
          "83.0.0"
        ],
        "id": "GHSA-h35f-9h28-mq5c",
        "kev": null,
        "location": "uv.lock",
        "osv_confirmed": true,
        "package": "setuptools",
        "severity": "Medium",
        "summary": "setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+",
        "url": "https://github.com/advisories/GHSA-h35f-9h28-mq5c",
        "version": "80.10.2"
      },
      {
        "aliases": [
          "CVE-2026-113713"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2026-113713",
          "percentile": 0.10364,
          "score": 0.00204
        },
        "fix_state": "fixed",
        "fixed_in": [
          "21.14.10"
        ],
        "id": "GHSA-4f8h-vr72-p32c",
        "kev": null,
        "location": "uv.lock",
        "osv_confirmed": true,
        "package": "virtualenv",
        "severity": "Medium",
        "summary": "virtualenv: Temporary app-data can leave dangling seed package links",
        "url": "https://github.com/advisories/GHSA-4f8h-vr72-p32c",
        "version": "21.14.9"
      },
      {
        "aliases": [
          "CVE-2026-112907"
        ],
        "ecosystem": "pypi",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "4.2.1"
        ],
        "id": "GHSA-567q-5qvw-pf92",
        "kev": null,
        "location": "uv.lock",
        "osv_confirmed": true,
        "package": "filelock",
        "severity": "Low",
        "summary": "filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break",
        "url": "https://github.com/advisories/GHSA-567q-5qvw-pf92",
        "version": "3.32.7"
      },
      {
        "aliases": [
          "CVE-2026-112912"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2026-112912",
          "percentile": 0.11672,
          "score": 0.00213
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.2.1"
        ],
        "id": "GHSA-9j6q-wvj5-jgjg",
        "kev": null,
        "location": "uv.lock",
        "osv_confirmed": true,
        "package": "filelock",
        "severity": "Low",
        "summary": "filelock: Symlink swap during SoftFileLock's writability check leaks whether a path exists and is writable by the lock taker",
        "url": "https://github.com/advisories/GHSA-9j6q-wvj5-jgjg",
        "version": "3.32.7"
      },
      {
        "aliases": [
          "CVE-2026-112913"
        ],
        "ecosystem": "pypi",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "4.2.1"
        ],
        "id": "GHSA-9vhv-jxww-xfm5",
        "kev": null,
        "location": "uv.lock",
        "osv_confirmed": true,
        "package": "filelock",
        "severity": "Low",
        "summary": "filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database",
        "url": "https://github.com/advisories/GHSA-9vhv-jxww-xfm5",
        "version": "3.32.7"
      },
      {
        "aliases": [
          "CVE-2026-4539"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2026-4539",
          "percentile": 0.05024,
          "score": 0.00159
        },
        "fix_state": "fixed",
        "fixed_in": [
          "2.20.0"
        ],
        "id": "GHSA-5239-wwwm-4pmq",
        "kev": null,
        "location": "uv.lock",
        "osv_confirmed": true,
        "package": "pygments",
        "severity": "Low",
        "summary": "Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching",
        "url": "https://github.com/advisories/GHSA-5239-wwwm-4pmq",
        "version": "2.19.2"
      },
      {
        "aliases": [],
        "ecosystem": "pypi",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "84.1.0"
        ],
        "id": "GHSA-xmj3-9gf7-h52w",
        "kev": null,
        "location": "uv.lock",
        "osv_confirmed": true,
        "package": "setuptools",
        "severity": "Low",
        "summary": "setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description",
        "url": "https://github.com/advisories/GHSA-xmj3-9gf7-h52w",
        "version": "80.10.2"
      }
    ],
    "workflow_audit": {
      "files": 6,
      "findings": [
        {
          "confidence": "High",
          "description": "prefer trusted publishing for authentication",
          "file": ".github/workflows/publish-to-ghcr-and-pypi.yml",
          "line": 59,
          "note": "this step",
          "rule": "use-trusted-publishing",
          "severity": "Informational",
          "url": "https://docs.zizmor.sh/audits/#use-trusted-publishing"
        }
      ]
    }
  },
  "updated": "2026-11-02"
}