{"data":{"slug":"maximhq-bifrost","name":"bifrost","trust":{"provenance":{"is_fork":false,"github_id":951115072,"owner_type":"Organization","methodology":"github_public_v1","parent_repo":null,"near_duplicate_slugs":[]},"computed_at":"2026-09-20T05:52:21.472Z","maintenance":{"label":"Very active","score":96,"methodology":"github_public_v1","releases_90d":30,"days_since_push":0,"last_release_at":"2026-09-18T21:59:12Z","stars_delta_30d":730,"open_issues_delta_30d":170},"security_summary":{"status":"no_lockfile","scanner":null,"low_count":0,"high_count":0,"last_scan_at":"2026-07-12T04:02:02.843Z","medium_count":0,"scan_profile":"none","critical_count":0}},"findings":[],"security_intelligence":{"sources":[{"profile":"deps","scanner":"osv@v1","label":"OSV dependency advisories","status":"no_lockfile","status_label":"No lockfile (source not queried)","scanned_at":"2026-07-12T04:02:02.919871+00:00","findings_count":0,"evidence_url":"https://osv.dev/","error":null,"caveat":null},{"profile":"deps_dev","scanner":"deps.dev@v1","label":"deps.dev advisories","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://deps.dev/","error":null,"caveat":null},{"profile":"openssf_scorecard","scanner":"openssf-scorecard@v1","label":"OpenSSF Scorecard","status":"findings","status_label":"Published findings","scanned_at":"2026-10-04T04:00:46.92762+00:00","findings_count":5,"evidence_url":"https://api.securityscorecards.dev/projects/github.com/maximhq/bifrost","error":null,"caveat":"Weekly public scans omit some checks at scale."}],"dependency_findings":[],"scorecard_findings":[{"id":"scorecard:Branch-Protection","severity":"high","title":"Branch-Protection (-1/10): internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","location":"https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#branch-protection"},{"id":"scorecard:CII-Best-Practices","severity":"high","title":"CII-Best-Practices (0/10): no effort to earn an OpenSSF best practices badge detected","location":"https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#cii-best-practices"},{"id":"scorecard:Signed-Releases","severity":"high","title":"Signed-Releases (0/10): Project has not signed or included provenance with any releases.","location":"https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#signed-releases"},{"id":"scorecard:Token-Permissions","severity":"high","title":"Token-Permissions (0/10): detected GitHub workflow tokens with excessive permissions","location":"https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#token-permissions"},{"id":"scorecard:Vulnerabilities","severity":"high","title":"Vulnerabilities (2/10): 8 existing vulnerabilities detected","location":"https://github.com/ossf/scorecard/blob/ea7e27ed41b76ab879c862fa0ca4cc9c61764ee4/docs/checks.md#vulnerabilities"}]},"methodology":"github_public_v1"}}