{"data":{"slug":"ai4finance-foundation-fingpt","name":"FinGPT","trust":{"provenance":{"is_fork":false,"github_id":600544354,"owner_type":"Organization","methodology":"github_public_v1","parent_repo":null,"near_duplicate_slugs":[]},"computed_at":"2026-08-17T00:02:02.986Z","maintenance":{"label":"Active","score":82,"methodology":"github_public_v1","releases_90d":0,"days_since_push":14,"last_release_at":"2026-04-08T15:21:23Z","stars_delta_30d":205,"open_issues_delta_30d":-9},"security_summary":{"status":"findings","scanner":"osv@v1","low_count":8,"high_count":0,"last_scan_at":"2026-07-11T11:00:40.419Z","medium_count":0,"scan_profile":"deps","critical_count":0}},"findings":[{"id":"GHSA-5rjg-fvgr-3xxf","severity":"low","title":"GHSA-5rjg-fvgr-3xxf","package":"setuptools@41.4.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-cx63-2mw6-8hw5","severity":"low","title":"GHSA-cx63-2mw6-8hw5","package":"setuptools@41.4.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-r9hx-vwmv-q579","severity":"low","title":"GHSA-r9hx-vwmv-q579","package":"setuptools@41.4.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2022-43012","severity":"low","title":"PYSEC-2022-43012","package":"setuptools@41.4.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2025-49","severity":"low","title":"PYSEC-2025-49","package":"setuptools@41.4.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-1918","severity":"low","title":"PYSEC-2026-1918","package":"setuptools@41.4.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-qwmp-2cf2-g9g6","severity":"low","title":"GHSA-qwmp-2cf2-g9g6","package":"wheel@0.33.6","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2022-43017","severity":"low","title":"PYSEC-2022-43017","package":"wheel@0.33.6","location":"requirements.txt","sources":["osv@v1"]}],"security_intelligence":{"sources":[{"profile":"deps","scanner":"osv@v1","label":"OSV dependency advisories","status":"findings","status_label":"Published findings","scanned_at":"2026-07-11T11:00:42.047874+00:00","findings_count":8,"evidence_url":"https://osv.dev/","error":null,"caveat":null},{"profile":"deps_dev","scanner":"deps.dev@v1","label":"deps.dev advisories","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://deps.dev/","error":null,"caveat":null},{"profile":"openssf_scorecard","scanner":"openssf-scorecard@v1","label":"OpenSSF Scorecard","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://api.securityscorecards.dev/projects/github.com/AI4Finance-Foundation/FinGPT","error":null,"caveat":"Weekly public scans omit some checks at scale."}],"dependency_findings":[{"id":"GHSA-5rjg-fvgr-3xxf","severity":"low","title":"GHSA-5rjg-fvgr-3xxf","package":"setuptools@41.4.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-cx63-2mw6-8hw5","severity":"low","title":"GHSA-cx63-2mw6-8hw5","package":"setuptools@41.4.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-r9hx-vwmv-q579","severity":"low","title":"GHSA-r9hx-vwmv-q579","package":"setuptools@41.4.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2022-43012","severity":"low","title":"PYSEC-2022-43012","package":"setuptools@41.4.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2025-49","severity":"low","title":"PYSEC-2025-49","package":"setuptools@41.4.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-1918","severity":"low","title":"PYSEC-2026-1918","package":"setuptools@41.4.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-qwmp-2cf2-g9g6","severity":"low","title":"GHSA-qwmp-2cf2-g9g6","package":"wheel@0.33.6","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2022-43017","severity":"low","title":"PYSEC-2022-43017","package":"wheel@0.33.6","location":"requirements.txt","sources":["osv@v1"]}],"scorecard_findings":[]},"methodology":"github_public_v1"}}