{"data":{"slug":"control-theory-gonzo","name":"gonzo","trust":{"provenance":{"is_fork":false,"github_id":1040280323,"owner_type":"Organization","methodology":"github_public_v1","parent_repo":null,"near_duplicate_slugs":[]},"computed_at":"2026-07-15T11:17:43.357Z","maintenance":{"label":"Active","score":82,"methodology":"github_public_v1","releases_90d":4,"days_since_push":14,"last_release_at":"2026-05-15T19:51:07Z"},"security_summary":{"status":"findings","scanner":"osv@v1","low_count":14,"high_count":0,"last_scan_at":"2026-07-15T11:17:43.701Z","medium_count":0,"scan_profile":"deps","critical_count":0}},"findings":[{"id":"GO-2026-5320","severity":"low","title":"GO-2026-5320","package":"github.com/yuin/goldmark@v1.7.13","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-mh2q-q3fh-2475","severity":"low","title":"GHSA-mh2q-q3fh-2475","package":"go.opentelemetry.io/otel@v1.39.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-9h8m-3fm2-qjrq","severity":"low","title":"GHSA-9h8m-3fm2-qjrq","package":"go.opentelemetry.io/otel/sdk@v1.39.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-hfvc-g4fc-pqhx","severity":"low","title":"GHSA-hfvc-g4fc-pqhx","package":"go.opentelemetry.io/otel/sdk@v1.39.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4394","severity":"low","title":"GO-2026-4394","package":"go.opentelemetry.io/otel/sdk@v1.39.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-5cv4-jp36-h3mw","severity":"low","title":"GHSA-5cv4-jp36-h3mw","package":"golang.org/x/net@v0.48.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4918","severity":"low","title":"GO-2026-4918","package":"golang.org/x/net@v0.48.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5025","severity":"low","title":"GO-2026-5025","package":"golang.org/x/net@v0.48.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5026","severity":"low","title":"GO-2026-5026","package":"golang.org/x/net@v0.48.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5027","severity":"low","title":"GO-2026-5027","package":"golang.org/x/net@v0.48.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5028","severity":"low","title":"GO-2026-5028","package":"golang.org/x/net@v0.48.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5029","severity":"low","title":"GO-2026-5029","package":"golang.org/x/net@v0.48.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5030","severity":"low","title":"GO-2026-5030","package":"golang.org/x/net@v0.48.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5024","severity":"low","title":"GO-2026-5024","package":"golang.org/x/sys@v0.39.0","location":"go.sum","sources":["osv@v1"]}],"security_intelligence":{"sources":[{"profile":"deps","scanner":"osv@v1","label":"OSV dependency advisories","status":"findings","status_label":"Published findings","scanned_at":"2026-07-15T11:17:46.978064+00:00","findings_count":14,"evidence_url":"https://osv.dev/","error":null,"caveat":null},{"profile":"deps_dev","scanner":"deps.dev@v1","label":"deps.dev advisories","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://deps.dev/","error":null,"caveat":null},{"profile":"openssf_scorecard","scanner":"openssf-scorecard@v1","label":"OpenSSF Scorecard","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://api.securityscorecards.dev/projects/github.com/control-theory/gonzo","error":null,"caveat":"Weekly public scans omit some checks at scale."}],"dependency_findings":[{"id":"GO-2026-5320","severity":"low","title":"GO-2026-5320","package":"github.com/yuin/goldmark@v1.7.13","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-mh2q-q3fh-2475","severity":"low","title":"GHSA-mh2q-q3fh-2475","package":"go.opentelemetry.io/otel@v1.39.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-9h8m-3fm2-qjrq","severity":"low","title":"GHSA-9h8m-3fm2-qjrq","package":"go.opentelemetry.io/otel/sdk@v1.39.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-hfvc-g4fc-pqhx","severity":"low","title":"GHSA-hfvc-g4fc-pqhx","package":"go.opentelemetry.io/otel/sdk@v1.39.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4394","severity":"low","title":"GO-2026-4394","package":"go.opentelemetry.io/otel/sdk@v1.39.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-5cv4-jp36-h3mw","severity":"low","title":"GHSA-5cv4-jp36-h3mw","package":"golang.org/x/net@v0.48.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4918","severity":"low","title":"GO-2026-4918","package":"golang.org/x/net@v0.48.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5025","severity":"low","title":"GO-2026-5025","package":"golang.org/x/net@v0.48.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5026","severity":"low","title":"GO-2026-5026","package":"golang.org/x/net@v0.48.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5027","severity":"low","title":"GO-2026-5027","package":"golang.org/x/net@v0.48.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5028","severity":"low","title":"GO-2026-5028","package":"golang.org/x/net@v0.48.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5029","severity":"low","title":"GO-2026-5029","package":"golang.org/x/net@v0.48.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5030","severity":"low","title":"GO-2026-5030","package":"golang.org/x/net@v0.48.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5024","severity":"low","title":"GO-2026-5024","package":"golang.org/x/sys@v0.39.0","location":"go.sum","sources":["osv@v1"]}],"scorecard_findings":[]},"methodology":"github_public_v1"}}