{"data":{"slug":"chroma-core-chroma","name":"chroma","trust":{"provenance":{"is_fork":false,"github_id":546206616,"owner_type":"Organization","methodology":"github_public_v1","parent_repo":null,"near_duplicate_slugs":[]},"computed_at":"2026-07-28T18:00:33.309Z","maintenance":{"label":"Very active","score":96,"methodology":"github_public_v1","releases_90d":3,"days_since_push":0,"last_release_at":"2026-05-05T05:55:40Z"},"security_summary":{"status":"findings","scanner":"osv@v1","low_count":8,"high_count":0,"last_scan_at":"2026-07-11T10:27:47.229Z","medium_count":0,"scan_profile":"deps","critical_count":0}},"findings":[{"id":"GHSA-hx9q-6w63-j58v","severity":"low","title":"GHSA-hx9q-6w63-j58v","package":"orjson@3.9.12","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-pwr2-4v36-6qpr","severity":"low","title":"GHSA-pwr2-4v36-6qpr","package":"orjson@3.9.12","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2024-40","severity":"low","title":"PYSEC-2024-40","package":"orjson@3.9.12","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-107","severity":"low","title":"PYSEC-2026-107","package":"orjson@3.9.12","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-mr82-8j83-vxmv","severity":"low","title":"GHSA-mr82-8j83-vxmv","package":"pydantic@2.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-1812","severity":"low","title":"PYSEC-2026-1812","package":"pydantic@2.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-g7vv-2v7x-gj9p","severity":"low","title":"GHSA-g7vv-2v7x-gj9p","package":"tqdm@4.65.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-1976","severity":"low","title":"PYSEC-2026-1976","package":"tqdm@4.65.0","location":"requirements.txt","sources":["osv@v1"]}],"security_intelligence":{"sources":[{"profile":"deps","scanner":"osv@v1","label":"OSV dependency advisories","status":"findings","status_label":"Published findings","scanned_at":"2026-07-11T10:27:48.847877+00:00","findings_count":8,"evidence_url":"https://osv.dev/","error":null,"caveat":null},{"profile":"deps_dev","scanner":"deps.dev@v1","label":"deps.dev advisories","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://deps.dev/","error":null,"caveat":null},{"profile":"openssf_scorecard","scanner":"openssf-scorecard@v1","label":"OpenSSF Scorecard","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://api.securityscorecards.dev/projects/github.com/chroma-core/chroma","error":null,"caveat":"Weekly public scans omit some checks at scale."}],"dependency_findings":[{"id":"GHSA-hx9q-6w63-j58v","severity":"low","title":"GHSA-hx9q-6w63-j58v","package":"orjson@3.9.12","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-pwr2-4v36-6qpr","severity":"low","title":"GHSA-pwr2-4v36-6qpr","package":"orjson@3.9.12","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2024-40","severity":"low","title":"PYSEC-2024-40","package":"orjson@3.9.12","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-107","severity":"low","title":"PYSEC-2026-107","package":"orjson@3.9.12","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-mr82-8j83-vxmv","severity":"low","title":"GHSA-mr82-8j83-vxmv","package":"pydantic@2.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-1812","severity":"low","title":"PYSEC-2026-1812","package":"pydantic@2.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-g7vv-2v7x-gj9p","severity":"low","title":"GHSA-g7vv-2v7x-gj9p","package":"tqdm@4.65.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-1976","severity":"low","title":"PYSEC-2026-1976","package":"tqdm@4.65.0","location":"requirements.txt","sources":["osv@v1"]}],"scorecard_findings":[]},"methodology":"github_public_v1"}}