{"data":{"slug":"horovod-horovod","name":"horovod","trust":{"provenance":{"is_fork":false,"github_id":99846383,"owner_type":"Organization","methodology":"github_public_v1","parent_repo":null,"near_duplicate_slugs":[]},"computed_at":"2026-08-03T00:02:03.039Z","maintenance":{"label":"Archived","score":8,"methodology":"github_public_v1","releases_90d":0,"days_since_push":4,"last_release_at":"2023-06-12T09:26:22Z"},"security_summary":{"status":"no_lockfile","scanner":null,"low_count":0,"high_count":0,"last_scan_at":"2026-07-11T23:23:13.169Z","medium_count":0,"scan_profile":"none","critical_count":0}},"findings":[],"security_intelligence":{"sources":[{"profile":"deps","scanner":"osv@v1","label":"OSV dependency advisories","status":"no_lockfile","status_label":"No lockfile (source not queried)","scanned_at":"2026-07-11T23:23:23.532184+00:00","findings_count":0,"evidence_url":"https://osv.dev/","error":null,"caveat":null},{"profile":"deps_dev","scanner":"deps.dev@v1","label":"deps.dev advisories","status":"no_lockfile","status_label":"No lockfile (source not queried)","scanned_at":"2026-08-02T04:00:37.881782+00:00","findings_count":0,"evidence_url":"https://deps.dev/","error":null,"caveat":null},{"profile":"openssf_scorecard","scanner":"openssf-scorecard@v1","label":"OpenSSF Scorecard","status":"findings","status_label":"Published findings","scanned_at":"2026-07-26T04:00:35.856396+00:00","findings_count":9,"evidence_url":"https://api.securityscorecards.dev/projects/github.com/horovod/horovod","error":null,"caveat":"Weekly public scans omit some checks at scale."}],"dependency_findings":[],"scorecard_findings":[{"id":"scorecard:Security-Policy","severity":"medium","title":"Security-Policy (4/10): security policy file detected","location":"https://github.com/ossf/scorecard/blob/64febf8c5229a2a65d09c6b543677b28a51abb09/docs/checks.md#security-policy"},{"id":"scorecard:Code-Review","severity":"medium","title":"Code-Review (5/10): Found 16/30 approved changesets -- score normalized to 5","location":"https://github.com/ossf/scorecard/blob/64febf8c5229a2a65d09c6b543677b28a51abb09/docs/checks.md#code-review"},{"id":"scorecard:Maintained","severity":"high","title":"Maintained (0/10): 1 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","location":"https://github.com/ossf/scorecard/blob/64febf8c5229a2a65d09c6b543677b28a51abb09/docs/checks.md#maintained"},{"id":"scorecard:CII-Best-Practices","severity":"high","title":"CII-Best-Practices (0/10): no effort to earn an OpenSSF best practices badge detected","location":"https://github.com/ossf/scorecard/blob/64febf8c5229a2a65d09c6b543677b28a51abb09/docs/checks.md#cii-best-practices"},{"id":"scorecard:Fuzzing","severity":"high","title":"Fuzzing (0/10): project is not fuzzed","location":"https://github.com/ossf/scorecard/blob/64febf8c5229a2a65d09c6b543677b28a51abb09/docs/checks.md#fuzzing"},{"id":"scorecard:Dangerous-Workflow","severity":"high","title":"Dangerous-Workflow (0/10): dangerous workflow patterns detected","location":"https://github.com/ossf/scorecard/blob/64febf8c5229a2a65d09c6b543677b28a51abb09/docs/checks.md#dangerous-workflow"},{"id":"scorecard:Signed-Releases","severity":"high","title":"Signed-Releases (-1/10): no releases found","location":"https://github.com/ossf/scorecard/blob/64febf8c5229a2a65d09c6b543677b28a51abb09/docs/checks.md#signed-releases"},{"id":"scorecard:Branch-Protection","severity":"high","title":"Branch-Protection (-1/10): internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md","location":"https://github.com/ossf/scorecard/blob/64febf8c5229a2a65d09c6b543677b28a51abb09/docs/checks.md#branch-protection"},{"id":"scorecard:Pinned-Dependencies","severity":"high","title":"Pinned-Dependencies (0/10): dependency not pinned by hash detected -- score normalized to 0","location":"https://github.com/ossf/scorecard/blob/64febf8c5229a2a65d09c6b543677b28a51abb09/docs/checks.md#pinned-dependencies"}]},"methodology":"github_public_v1"}}