{"data":{"slug":"kubestellar-console","name":"console","trust":{"provenance":{"is_fork":false,"github_id":1135473716,"owner_type":"Organization","methodology":"github_public_v1","parent_repo":null,"near_duplicate_slugs":[]},"computed_at":"2026-09-18T08:21:18.801Z","maintenance":{"label":"Very active","score":96,"methodology":"github_public_v1","releases_90d":30,"days_since_push":0,"last_release_at":"2026-09-18T05:27:30Z","stars_delta_30d":12,"open_issues_delta_30d":-16},"security_summary":{"status":"findings","scanner":"osv@v1","low_count":5,"high_count":0,"last_scan_at":"2026-09-18T08:21:20.427Z","medium_count":0,"scan_profile":"deps","critical_count":0}},"findings":[{"id":"GHSA-8wmf-6v46-5gfg","severity":"low","title":"GHSA-8wmf-6v46-5gfg","package":"go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-6179","severity":"low","title":"GO-2026-6179","package":"golang.org/x/mod@v0.38.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-6180","severity":"low","title":"GO-2026-6180","package":"golang.org/x/mod@v0.38.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-2v4p-qf9q-27wj","severity":"low","title":"GHSA-2v4p-qf9q-27wj","package":"google.golang.org/grpc@v1.83.1","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-6443","severity":"low","title":"GO-2026-6443","package":"google.golang.org/grpc@v1.83.1","location":"go.sum","sources":["osv@v1"]}],"security_intelligence":{"sources":[{"profile":"deps","scanner":"osv@v1","label":"OSV dependency advisories","status":"findings","status_label":"Published findings","scanned_at":"2026-09-18T08:21:23.113685+00:00","findings_count":5,"evidence_url":"https://osv.dev/","error":null,"caveat":null},{"profile":"deps_dev","scanner":"deps.dev@v1","label":"deps.dev advisories","status":"partial","status_label":"Partial coverage as of 2026-09-13","scanned_at":"2026-09-13T04:00:51.868169+00:00","findings_count":0,"evidence_url":"https://deps.dev/","error":null,"caveat":null},{"profile":"openssf_scorecard","scanner":"openssf-scorecard@v1","label":"OpenSSF Scorecard","status":"findings","status_label":"Published findings","scanned_at":"2026-08-23T04:00:19.064423+00:00","findings_count":5,"evidence_url":"https://api.securityscorecards.dev/projects/github.com/kubestellar/console","error":null,"caveat":"Weekly public scans omit some checks at scale."}],"dependency_findings":[{"id":"GHSA-8wmf-6v46-5gfg","severity":"low","title":"GHSA-8wmf-6v46-5gfg","package":"go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-6179","severity":"low","title":"GO-2026-6179","package":"golang.org/x/mod@v0.38.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-6180","severity":"low","title":"GO-2026-6180","package":"golang.org/x/mod@v0.38.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-2v4p-qf9q-27wj","severity":"low","title":"GHSA-2v4p-qf9q-27wj","package":"google.golang.org/grpc@v1.83.1","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-6443","severity":"low","title":"GO-2026-6443","package":"google.golang.org/grpc@v1.83.1","location":"go.sum","sources":["osv@v1"]}],"scorecard_findings":[{"id":"scorecard:Branch-Protection","severity":"medium","title":"Branch-Protection (3/10): branch protection is not maximal on development and all release branches","location":"https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#branch-protection"},{"id":"scorecard:Code-Review","severity":"high","title":"Code-Review (0/10): Found 1/30 approved changesets -- score normalized to 0","location":"https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#code-review"},{"id":"scorecard:Contributors","severity":"low","title":"Contributors (6/10): project has 2 contributing companies or organizations -- score normalized to 6","location":"https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#contributors"},{"id":"scorecard:Pinned-Dependencies","severity":"medium","title":"Pinned-Dependencies (4/10): dependency not pinned by hash detected -- score normalized to 4","location":"https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#pinned-dependencies"},{"id":"scorecard:Signed-Releases","severity":"medium","title":"Signed-Releases (4/10): 3 out of the last 5 releases have a total of 3 signed artifacts.","location":"https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#signed-releases"}]},"methodology":"github_public_v1"}}