{"data":{"slug":"docker-compose","name":"compose","trust":{"provenance":{"is_fork":false,"github_id":15045751,"owner_type":"Organization","methodology":"github_public_v1","parent_repo":null,"near_duplicate_slugs":[]},"computed_at":"2026-07-15T10:50:03.257Z","maintenance":{"label":"Very active","score":96,"methodology":"github_public_v1","releases_90d":4,"days_since_push":0,"last_release_at":"2026-07-07T12:42:03Z"},"security_summary":{"status":"findings","scanner":"osv@v1","low_count":10,"high_count":0,"last_scan_at":"2026-07-15T10:50:03.607Z","medium_count":0,"scan_profile":"deps","critical_count":0}},"findings":[{"id":"GHSA-pxq6-2prw-chj9","severity":"low","title":"GHSA-pxq6-2prw-chj9","package":"github.com/docker/docker@v28.5.2+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-rg2x-37c3-w2rh","severity":"low","title":"GHSA-rg2x-37c3-w2rh","package":"github.com/docker/docker@v28.5.2+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-vp62-88p7-qqf5","severity":"low","title":"GHSA-vp62-88p7-qqf5","package":"github.com/docker/docker@v28.5.2+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-x744-4wpc-v9h2","severity":"low","title":"GHSA-x744-4wpc-v9h2","package":"github.com/docker/docker@v28.5.2+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-x86f-5xw2-fm2r","severity":"low","title":"GHSA-x86f-5xw2-fm2r","package":"github.com/docker/docker@v28.5.2+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4883","severity":"low","title":"GO-2026-4883","package":"github.com/docker/docker@v28.5.2+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4887","severity":"low","title":"GO-2026-4887","package":"github.com/docker/docker@v28.5.2+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5617","severity":"low","title":"GO-2026-5617","package":"github.com/docker/docker@v28.5.2+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5668","severity":"low","title":"GO-2026-5668","package":"github.com/docker/docker@v28.5.2+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5746","severity":"low","title":"GO-2026-5746","package":"github.com/docker/docker@v28.5.2+incompatible","location":"go.sum","sources":["osv@v1"]}],"security_intelligence":{"sources":[{"profile":"deps","scanner":"osv@v1","label":"OSV dependency advisories","status":"findings","status_label":"Published findings","scanned_at":"2026-07-15T10:50:05.628479+00:00","findings_count":10,"evidence_url":"https://osv.dev/","error":null,"caveat":null},{"profile":"deps_dev","scanner":"deps.dev@v1","label":"deps.dev advisories","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://deps.dev/","error":null,"caveat":null},{"profile":"openssf_scorecard","scanner":"openssf-scorecard@v1","label":"OpenSSF Scorecard","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://api.securityscorecards.dev/projects/github.com/docker/compose","error":null,"caveat":"Weekly public scans omit some checks at scale."}],"dependency_findings":[{"id":"GHSA-pxq6-2prw-chj9","severity":"low","title":"GHSA-pxq6-2prw-chj9","package":"github.com/docker/docker@v28.5.2+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-rg2x-37c3-w2rh","severity":"low","title":"GHSA-rg2x-37c3-w2rh","package":"github.com/docker/docker@v28.5.2+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-vp62-88p7-qqf5","severity":"low","title":"GHSA-vp62-88p7-qqf5","package":"github.com/docker/docker@v28.5.2+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-x744-4wpc-v9h2","severity":"low","title":"GHSA-x744-4wpc-v9h2","package":"github.com/docker/docker@v28.5.2+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-x86f-5xw2-fm2r","severity":"low","title":"GHSA-x86f-5xw2-fm2r","package":"github.com/docker/docker@v28.5.2+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4883","severity":"low","title":"GO-2026-4883","package":"github.com/docker/docker@v28.5.2+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4887","severity":"low","title":"GO-2026-4887","package":"github.com/docker/docker@v28.5.2+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5617","severity":"low","title":"GO-2026-5617","package":"github.com/docker/docker@v28.5.2+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5668","severity":"low","title":"GO-2026-5668","package":"github.com/docker/docker@v28.5.2+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5746","severity":"low","title":"GO-2026-5746","package":"github.com/docker/docker@v28.5.2+incompatible","location":"go.sum","sources":["osv@v1"]}],"scorecard_findings":[]},"methodology":"github_public_v1"}}