{"data":{"slug":"hambaobao-hcp-coder","name":"HCP-Coder","trust":{"provenance":{"is_fork":false,"github_id":820329713,"owner_type":"User","methodology":"github_public_v1","parent_repo":null,"near_duplicate_slugs":[]},"computed_at":"2026-10-07T06:00:39.344Z","maintenance":{"label":"Dormant","score":18,"methodology":"github_public_v1","releases_90d":0,"days_since_push":688,"last_release_at":null,"stars_delta_30d":0,"open_issues_delta_30d":0},"security_summary":{"status":"findings","scanner":"osv@v1","low_count":49,"high_count":0,"last_scan_at":"2026-07-11T23:44:54.798Z","medium_count":0,"scan_profile":"deps","critical_count":0}},"findings":[{"id":"GHSA-mf9w-mj56-hr94","severity":"low","title":"GHSA-mf9w-mj56-hr94","package":"python-dotenv@1.0.1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-3f6c-7fw2-ppm4","severity":"low","title":"GHSA-3f6c-7fw2-ppm4","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-3mwp-wvh9-7528","severity":"low","title":"GHSA-3mwp-wvh9-7528","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-3ww4-5jv9-j5gm","severity":"low","title":"GHSA-3ww4-5jv9-j5gm","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-4qjh-9fv9-r85r","severity":"low","title":"GHSA-4qjh-9fv9-r85r","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-5jv2-g5wq-cmr4","severity":"low","title":"GHSA-5jv2-g5wq-cmr4","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-69j4-grxj-j64p","severity":"low","title":"GHSA-69j4-grxj-j64p","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-6fvq-23cw-5628","severity":"low","title":"GHSA-6fvq-23cw-5628","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-6pr9-rp53-2pmc","severity":"low","title":"GHSA-6pr9-rp53-2pmc","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-7h4p-rffg-7823","severity":"low","title":"GHSA-7h4p-rffg-7823","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-8fr4-5q9j-m8gm","severity":"low","title":"GHSA-8fr4-5q9j-m8gm","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-94f4-hr76-p5j6","severity":"low","title":"GHSA-94f4-hr76-p5j6","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-98f3-hwg4-4rf7","severity":"low","title":"GHSA-98f3-hwg4-4rf7","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-9f8f-2vmf-885j","severity":"low","title":"GHSA-9f8f-2vmf-885j","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-9pcc-gvx5-r5wm","severity":"low","title":"GHSA-9pcc-gvx5-r5wm","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-ggpf-24jw-3fcw","severity":"low","title":"GHSA-ggpf-24jw-3fcw","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-hgg8-fqqc-vfmw","severity":"low","title":"GHSA-hgg8-fqqc-vfmw","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-hpv8-x276-m59f","severity":"low","title":"GHSA-hpv8-x276-m59f","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-j828-28rj-hfhp","severity":"low","title":"GHSA-j828-28rj-hfhp","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-mgrm-fgjv-mhv8","severity":"low","title":"GHSA-mgrm-fgjv-mhv8","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-pgr7-mhp5-fgjp","severity":"low","title":"GHSA-pgr7-mhp5-fgjp","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-pmqf-x6x8-p7qw","severity":"low","title":"GHSA-pmqf-x6x8-p7qw","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-q8gq-377p-jq3r","severity":"low","title":"GHSA-q8gq-377p-jq3r","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-qh4c-xf7m-gxfc","severity":"low","title":"GHSA-qh4c-xf7m-gxfc","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-rh4j-5rhw-hr54","severity":"low","title":"GHSA-rh4j-5rhw-hr54","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-rm76-4mrf-v9r8","severity":"low","title":"GHSA-rm76-4mrf-v9r8","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-rxc4-3w6r-4v47","severity":"low","title":"GHSA-rxc4-3w6r-4v47","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-wr9h-g72x-mwhm","severity":"low","title":"GHSA-wr9h-g72x-mwhm","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-x368-4g9h-fvv4","severity":"low","title":"GHSA-x368-4g9h-fvv4","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2025-223","severity":"low","title":"PYSEC-2025-223","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2025-42","severity":"low","title":"PYSEC-2025-42","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2025-43","severity":"low","title":"PYSEC-2025-43","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2025-50","severity":"low","title":"PYSEC-2025-50","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2025-53","severity":"low","title":"PYSEC-2025-53","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2025-58","severity":"low","title":"PYSEC-2025-58","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2025-62","severity":"low","title":"PYSEC-2025-62","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-2011","severity":"low","title":"PYSEC-2026-2011","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-2012","severity":"low","title":"PYSEC-2026-2012","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-2013","severity":"low","title":"PYSEC-2026-2013","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-2015","severity":"low","title":"PYSEC-2026-2015","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-2016","severity":"low","title":"PYSEC-2026-2016","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-2017","severity":"low","title":"PYSEC-2026-2017","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-2019","severity":"low","title":"PYSEC-2026-2019","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-2020","severity":"low","title":"PYSEC-2026-2020","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-2021","severity":"low","title":"PYSEC-2026-2021","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-2026","severity":"low","title":"PYSEC-2026-2026","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-226","severity":"low","title":"PYSEC-2026-226","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-227","severity":"low","title":"PYSEC-2026-227","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-568","severity":"low","title":"PYSEC-2026-568","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]}],"security_intelligence":{"sources":[{"profile":"deps","scanner":"osv@v1","label":"OSV dependency advisories","status":"findings","status_label":"Published findings","scanned_at":"2026-07-11T23:44:58.146227+00:00","findings_count":49,"evidence_url":"https://osv.dev/","error":null,"caveat":null},{"profile":"deps_dev","scanner":"deps.dev@v1","label":"deps.dev advisories","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://deps.dev/","error":null,"caveat":null},{"profile":"openssf_scorecard","scanner":"openssf-scorecard@v1","label":"OpenSSF Scorecard","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://api.securityscorecards.dev/projects/github.com/Hambaobao/HCP-Coder","error":null,"caveat":"Weekly public scans omit some checks at scale."}],"dependency_findings":[{"id":"GHSA-mf9w-mj56-hr94","severity":"low","title":"GHSA-mf9w-mj56-hr94","package":"python-dotenv@1.0.1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-3f6c-7fw2-ppm4","severity":"low","title":"GHSA-3f6c-7fw2-ppm4","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-3mwp-wvh9-7528","severity":"low","title":"GHSA-3mwp-wvh9-7528","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-3ww4-5jv9-j5gm","severity":"low","title":"GHSA-3ww4-5jv9-j5gm","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-4qjh-9fv9-r85r","severity":"low","title":"GHSA-4qjh-9fv9-r85r","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-5jv2-g5wq-cmr4","severity":"low","title":"GHSA-5jv2-g5wq-cmr4","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-69j4-grxj-j64p","severity":"low","title":"GHSA-69j4-grxj-j64p","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-6fvq-23cw-5628","severity":"low","title":"GHSA-6fvq-23cw-5628","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-6pr9-rp53-2pmc","severity":"low","title":"GHSA-6pr9-rp53-2pmc","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-7h4p-rffg-7823","severity":"low","title":"GHSA-7h4p-rffg-7823","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-8fr4-5q9j-m8gm","severity":"low","title":"GHSA-8fr4-5q9j-m8gm","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-94f4-hr76-p5j6","severity":"low","title":"GHSA-94f4-hr76-p5j6","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-98f3-hwg4-4rf7","severity":"low","title":"GHSA-98f3-hwg4-4rf7","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-9f8f-2vmf-885j","severity":"low","title":"GHSA-9f8f-2vmf-885j","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-9pcc-gvx5-r5wm","severity":"low","title":"GHSA-9pcc-gvx5-r5wm","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-ggpf-24jw-3fcw","severity":"low","title":"GHSA-ggpf-24jw-3fcw","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-hgg8-fqqc-vfmw","severity":"low","title":"GHSA-hgg8-fqqc-vfmw","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-hpv8-x276-m59f","severity":"low","title":"GHSA-hpv8-x276-m59f","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-j828-28rj-hfhp","severity":"low","title":"GHSA-j828-28rj-hfhp","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-mgrm-fgjv-mhv8","severity":"low","title":"GHSA-mgrm-fgjv-mhv8","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-pgr7-mhp5-fgjp","severity":"low","title":"GHSA-pgr7-mhp5-fgjp","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-pmqf-x6x8-p7qw","severity":"low","title":"GHSA-pmqf-x6x8-p7qw","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-q8gq-377p-jq3r","severity":"low","title":"GHSA-q8gq-377p-jq3r","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-qh4c-xf7m-gxfc","severity":"low","title":"GHSA-qh4c-xf7m-gxfc","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-rh4j-5rhw-hr54","severity":"low","title":"GHSA-rh4j-5rhw-hr54","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-rm76-4mrf-v9r8","severity":"low","title":"GHSA-rm76-4mrf-v9r8","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-rxc4-3w6r-4v47","severity":"low","title":"GHSA-rxc4-3w6r-4v47","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-wr9h-g72x-mwhm","severity":"low","title":"GHSA-wr9h-g72x-mwhm","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-x368-4g9h-fvv4","severity":"low","title":"GHSA-x368-4g9h-fvv4","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2025-223","severity":"low","title":"PYSEC-2025-223","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2025-42","severity":"low","title":"PYSEC-2025-42","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2025-43","severity":"low","title":"PYSEC-2025-43","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2025-50","severity":"low","title":"PYSEC-2025-50","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2025-53","severity":"low","title":"PYSEC-2025-53","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2025-58","severity":"low","title":"PYSEC-2025-58","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2025-62","severity":"low","title":"PYSEC-2025-62","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-2011","severity":"low","title":"PYSEC-2026-2011","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-2012","severity":"low","title":"PYSEC-2026-2012","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-2013","severity":"low","title":"PYSEC-2026-2013","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-2015","severity":"low","title":"PYSEC-2026-2015","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-2016","severity":"low","title":"PYSEC-2026-2016","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-2017","severity":"low","title":"PYSEC-2026-2017","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-2019","severity":"low","title":"PYSEC-2026-2019","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-2020","severity":"low","title":"PYSEC-2026-2020","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-2021","severity":"low","title":"PYSEC-2026-2021","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-2026","severity":"low","title":"PYSEC-2026-2026","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-226","severity":"low","title":"PYSEC-2026-226","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-227","severity":"low","title":"PYSEC-2026-227","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-568","severity":"low","title":"PYSEC-2026-568","package":"vllm@0.6.3.post1","location":"requirements.txt","sources":["osv@v1"]}],"scorecard_findings":[]},"methodology":"github_public_v1"}}