{"data":{"slug":"ggml-org-ggml","name":"ggml","trust":{"provenance":{"is_fork":false,"github_id":538180525,"owner_type":"Organization","methodology":"github_public_v1","parent_repo":null,"near_duplicate_slugs":[]},"computed_at":"2026-08-17T06:01:35.995Z","maintenance":{"label":"Very active","score":96,"methodology":"github_public_v1","releases_90d":14,"days_since_push":2,"last_release_at":"2026-08-14T15:17:32Z","stars_delta_30d":183,"open_issues_delta_30d":0},"security_summary":{"status":"findings","scanner":"osv@v1","low_count":14,"high_count":0,"last_scan_at":"2026-07-11T11:01:33.904Z","medium_count":0,"scan_profile":"deps","critical_count":0}},"findings":[{"id":"GHSA-38vq-g6vr-w8wf","severity":"low","title":"GHSA-38vq-g6vr-w8wf","package":"sentencepiece@0.1.98","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-1909","severity":"low","title":"PYSEC-2026-1909","package":"sentencepiece@0.1.98","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-36fq-jgmw-4r9c","severity":"low","title":"GHSA-36fq-jgmw-4r9c","package":"keras@3.10.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-36rr-ww3j-vrjv","severity":"low","title":"GHSA-36rr-ww3j-vrjv","package":"keras@3.10.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-3m4q-jmj6-r34q","severity":"low","title":"GHSA-3m4q-jmj6-r34q","package":"keras@3.10.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-4f3f-g24h-fr8m","severity":"low","title":"GHSA-4f3f-g24h-fr8m","package":"keras@3.10.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-c9rc-mg46-23w3","severity":"low","title":"GHSA-c9rc-mg46-23w3","package":"keras@3.10.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-hjqc-jx6g-rwp9","severity":"low","title":"GHSA-hjqc-jx6g-rwp9","package":"keras@3.10.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-mgx6-5cf9-rr43","severity":"low","title":"GHSA-mgx6-5cf9-rr43","package":"keras@3.10.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-mq84-hjqx-cwf2","severity":"low","title":"GHSA-mq84-hjqx-cwf2","package":"keras@3.10.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2025-123","severity":"low","title":"PYSEC-2025-123","package":"keras@3.10.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-1486","severity":"low","title":"PYSEC-2026-1486","package":"keras@3.10.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-1487","severity":"low","title":"PYSEC-2026-1487","package":"keras@3.10.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-73","severity":"low","title":"PYSEC-2026-73","package":"keras@3.10.0","location":"requirements.txt","sources":["osv@v1"]}],"security_intelligence":{"sources":[{"profile":"deps","scanner":"osv@v1","label":"OSV dependency advisories","status":"findings","status_label":"Published findings","scanned_at":"2026-07-11T11:01:35.792018+00:00","findings_count":14,"evidence_url":"https://osv.dev/","error":null,"caveat":null},{"profile":"deps_dev","scanner":"deps.dev@v1","label":"deps.dev advisories","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://deps.dev/","error":null,"caveat":null},{"profile":"openssf_scorecard","scanner":"openssf-scorecard@v1","label":"OpenSSF Scorecard","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://api.securityscorecards.dev/projects/github.com/ggml-org/ggml","error":null,"caveat":"Weekly public scans omit some checks at scale."}],"dependency_findings":[{"id":"GHSA-38vq-g6vr-w8wf","severity":"low","title":"GHSA-38vq-g6vr-w8wf","package":"sentencepiece@0.1.98","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-1909","severity":"low","title":"PYSEC-2026-1909","package":"sentencepiece@0.1.98","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-36fq-jgmw-4r9c","severity":"low","title":"GHSA-36fq-jgmw-4r9c","package":"keras@3.10.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-36rr-ww3j-vrjv","severity":"low","title":"GHSA-36rr-ww3j-vrjv","package":"keras@3.10.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-3m4q-jmj6-r34q","severity":"low","title":"GHSA-3m4q-jmj6-r34q","package":"keras@3.10.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-4f3f-g24h-fr8m","severity":"low","title":"GHSA-4f3f-g24h-fr8m","package":"keras@3.10.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-c9rc-mg46-23w3","severity":"low","title":"GHSA-c9rc-mg46-23w3","package":"keras@3.10.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-hjqc-jx6g-rwp9","severity":"low","title":"GHSA-hjqc-jx6g-rwp9","package":"keras@3.10.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-mgx6-5cf9-rr43","severity":"low","title":"GHSA-mgx6-5cf9-rr43","package":"keras@3.10.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-mq84-hjqx-cwf2","severity":"low","title":"GHSA-mq84-hjqx-cwf2","package":"keras@3.10.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2025-123","severity":"low","title":"PYSEC-2025-123","package":"keras@3.10.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-1486","severity":"low","title":"PYSEC-2026-1486","package":"keras@3.10.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-1487","severity":"low","title":"PYSEC-2026-1487","package":"keras@3.10.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-73","severity":"low","title":"PYSEC-2026-73","package":"keras@3.10.0","location":"requirements.txt","sources":["osv@v1"]}],"scorecard_findings":[]},"methodology":"github_public_v1"}}