{"data":{"slug":"cordum-io-cordum","name":"cordum","trust":{"provenance":{"is_fork":false,"github_id":1132275655,"owner_type":"Organization","methodology":"github_public_v1","parent_repo":null,"near_duplicate_slugs":[]},"computed_at":"2026-09-18T08:21:26.675Z","maintenance":{"label":"Very active","score":96,"methodology":"github_public_v1","releases_90d":0,"days_since_push":0,"last_release_at":"2026-06-03T14:11:53Z","stars_delta_30d":13,"open_issues_delta_30d":14},"security_summary":{"status":"findings","scanner":"osv@v1","low_count":13,"high_count":0,"last_scan_at":"2026-09-18T08:21:28.328Z","medium_count":0,"scan_profile":"deps","critical_count":0}},"findings":[{"id":"GHSA-8wmf-6v46-5gfg","severity":"low","title":"GHSA-8wmf-6v46-5gfg","package":"go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5932","severity":"low","title":"GO-2026-5932","package":"golang.org/x/crypto@v0.54.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-6303","severity":"low","title":"GO-2026-6303","package":"golang.org/x/crypto@v0.54.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-6354","severity":"low","title":"GO-2026-6354","package":"golang.org/x/crypto@v0.54.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-6355","severity":"low","title":"GO-2026-6355","package":"golang.org/x/crypto@v0.54.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-6179","severity":"low","title":"GO-2026-6179","package":"golang.org/x/mod@v0.37.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-6180","severity":"low","title":"GO-2026-6180","package":"golang.org/x/mod@v0.37.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-2v4p-qf9q-27wj","severity":"low","title":"GHSA-2v4p-qf9q-27wj","package":"google.golang.org/grpc@v1.82.1","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-qc2q-p7wx-3px3","severity":"low","title":"GHSA-qc2q-p7wx-3px3","package":"google.golang.org/grpc@v1.82.1","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-vp52-pcj8-j9qc","severity":"low","title":"GHSA-vp52-pcj8-j9qc","package":"google.golang.org/grpc@v1.82.1","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-6348","severity":"low","title":"GO-2026-6348","package":"google.golang.org/grpc@v1.82.1","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-6441","severity":"low","title":"GO-2026-6441","package":"google.golang.org/grpc@v1.82.1","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-6443","severity":"low","title":"GO-2026-6443","package":"google.golang.org/grpc@v1.82.1","location":"go.sum","sources":["osv@v1"]}],"security_intelligence":{"sources":[{"profile":"deps","scanner":"osv@v1","label":"OSV dependency advisories","status":"findings","status_label":"Published findings","scanned_at":"2026-09-18T08:21:30.884391+00:00","findings_count":13,"evidence_url":"https://osv.dev/","error":null,"caveat":null},{"profile":"deps_dev","scanner":"deps.dev@v1","label":"deps.dev advisories","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://deps.dev/","error":null,"caveat":null},{"profile":"openssf_scorecard","scanner":"openssf-scorecard@v1","label":"OpenSSF Scorecard","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://api.securityscorecards.dev/projects/github.com/cordum-io/cordum","error":null,"caveat":"Weekly public scans omit some checks at scale."}],"dependency_findings":[{"id":"GHSA-8wmf-6v46-5gfg","severity":"low","title":"GHSA-8wmf-6v46-5gfg","package":"go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5932","severity":"low","title":"GO-2026-5932","package":"golang.org/x/crypto@v0.54.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-6303","severity":"low","title":"GO-2026-6303","package":"golang.org/x/crypto@v0.54.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-6354","severity":"low","title":"GO-2026-6354","package":"golang.org/x/crypto@v0.54.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-6355","severity":"low","title":"GO-2026-6355","package":"golang.org/x/crypto@v0.54.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-6179","severity":"low","title":"GO-2026-6179","package":"golang.org/x/mod@v0.37.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-6180","severity":"low","title":"GO-2026-6180","package":"golang.org/x/mod@v0.37.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-2v4p-qf9q-27wj","severity":"low","title":"GHSA-2v4p-qf9q-27wj","package":"google.golang.org/grpc@v1.82.1","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-qc2q-p7wx-3px3","severity":"low","title":"GHSA-qc2q-p7wx-3px3","package":"google.golang.org/grpc@v1.82.1","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-vp52-pcj8-j9qc","severity":"low","title":"GHSA-vp52-pcj8-j9qc","package":"google.golang.org/grpc@v1.82.1","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-6348","severity":"low","title":"GO-2026-6348","package":"google.golang.org/grpc@v1.82.1","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-6441","severity":"low","title":"GO-2026-6441","package":"google.golang.org/grpc@v1.82.1","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-6443","severity":"low","title":"GO-2026-6443","package":"google.golang.org/grpc@v1.82.1","location":"go.sum","sources":["osv@v1"]}],"scorecard_findings":[]},"methodology":"github_public_v1"}}