{"data":{"slug":"microsoft-ufo","name":"UFO","trust":{"provenance":{"is_fork":false,"github_id":740316987,"owner_type":"Organization","methodology":"github_public_v1","parent_repo":null,"near_duplicate_slugs":[]},"computed_at":"2026-08-19T12:01:18.344Z","maintenance":{"label":"Active","score":82,"methodology":"github_public_v1","releases_90d":3,"days_since_push":9,"last_release_at":"2026-08-10T06:52:54Z","stars_delta_30d":220,"open_issues_delta_30d":2},"security_summary":{"status":"findings","scanner":"osv@v1","low_count":28,"high_count":0,"last_scan_at":"2026-07-11T11:14:51.326Z","medium_count":0,"scan_profile":"deps","critical_count":0}},"findings":[{"id":"GHSA-3644-q5cj-c5c7","severity":"low","title":"GHSA-3644-q5cj-c5c7","package":"langchain@0.3.27","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-gr75-jv2w-4656","severity":"low","title":"GHSA-gr75-jv2w-4656","package":"langchain@0.3.27","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-5xmw-vc9v-4wf2","severity":"low","title":"GHSA-5xmw-vc9v-4wf2","package":"Pillow@11.3.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-cfh3-3jmp-rvhc","severity":"low","title":"GHSA-cfh3-3jmp-rvhc","package":"Pillow@11.3.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-pwv6-vv43-88gr","severity":"low","title":"GHSA-pwv6-vv43-88gr","package":"Pillow@11.3.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-r73j-pqj5-w3x7","severity":"low","title":"GHSA-r73j-pqj5-w3x7","package":"Pillow@11.3.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-whj4-6x5x-4v2j","severity":"low","title":"GHSA-whj4-6x5x-4v2j","package":"Pillow@11.3.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-wjx4-4jcj-g98j","severity":"low","title":"GHSA-wjx4-4jcj-g98j","package":"Pillow@11.3.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-165","severity":"low","title":"PYSEC-2026-165","package":"Pillow@11.3.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-4vvm-4w3v-6mr8","severity":"low","title":"GHSA-4vvm-4w3v-6mr8","package":"PyPDF2@3.0.1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-1835","severity":"low","title":"PYSEC-2026-1835","package":"PyPDF2@3.0.1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-7gcm-g887-7qv7","severity":"low","title":"GHSA-7gcm-g887-7qv7","package":"protobuf@4.25.8","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-1805","severity":"low","title":"PYSEC-2026-1805","package":"protobuf@4.25.8","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-gc5v-m9x4-r6x2","severity":"low","title":"GHSA-gc5v-m9x4-r6x2","package":"requests@2.32.5","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-vfmq-68hx-4jfw","severity":"low","title":"GHSA-vfmq-68hx-4jfw","package":"lxml@5.1.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-87","severity":"low","title":"PYSEC-2026-87","package":"lxml@5.1.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-68rp-wp8r-4726","severity":"low","title":"GHSA-68rp-wp8r-4726","package":"flask@3.0.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-5h2m-4q8j-pqpj","severity":"low","title":"GHSA-5h2m-4q8j-pqpj","package":"fastmcp@2.11.3","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-c2jp-c369-7pvx","severity":"low","title":"GHSA-c2jp-c369-7pvx","package":"fastmcp@2.11.3","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-m8x7-r2rg-vh5g","severity":"low","title":"GHSA-m8x7-r2rg-vh5g","package":"fastmcp@2.11.3","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-mxxr-jv3v-6pgc","severity":"low","title":"GHSA-mxxr-jv3v-6pgc","package":"fastmcp@2.11.3","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-rcfx-77hg-w2wv","severity":"low","title":"GHSA-rcfx-77hg-w2wv","package":"fastmcp@2.11.3","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-rj5c-58rq-j5g5","severity":"low","title":"GHSA-rj5c-58rq-j5g5","package":"fastmcp@2.11.3","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-rww4-4w9c-7733","severity":"low","title":"GHSA-rww4-4w9c-7733","package":"fastmcp@2.11.3","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-vv7q-7jx5-f767","severity":"low","title":"GHSA-vv7q-7jx5-f767","package":"fastmcp@2.11.3","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-1364","severity":"low","title":"PYSEC-2026-1364","package":"fastmcp@2.11.3","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-1365","severity":"low","title":"PYSEC-2026-1365","package":"fastmcp@2.11.3","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-338","severity":"low","title":"PYSEC-2026-338","package":"fastmcp@2.11.3","location":"requirements.txt","sources":["osv@v1"]}],"security_intelligence":{"sources":[{"profile":"deps","scanner":"osv@v1","label":"OSV dependency advisories","status":"findings","status_label":"Published findings","scanned_at":"2026-07-11T11:14:53.032116+00:00","findings_count":28,"evidence_url":"https://osv.dev/","error":null,"caveat":null},{"profile":"deps_dev","scanner":"deps.dev@v1","label":"deps.dev advisories","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://deps.dev/","error":null,"caveat":null},{"profile":"openssf_scorecard","scanner":"openssf-scorecard@v1","label":"OpenSSF Scorecard","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://api.securityscorecards.dev/projects/github.com/microsoft/UFO","error":null,"caveat":"Weekly public scans omit some checks at scale."}],"dependency_findings":[{"id":"GHSA-3644-q5cj-c5c7","severity":"low","title":"GHSA-3644-q5cj-c5c7","package":"langchain@0.3.27","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-gr75-jv2w-4656","severity":"low","title":"GHSA-gr75-jv2w-4656","package":"langchain@0.3.27","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-5xmw-vc9v-4wf2","severity":"low","title":"GHSA-5xmw-vc9v-4wf2","package":"Pillow@11.3.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-cfh3-3jmp-rvhc","severity":"low","title":"GHSA-cfh3-3jmp-rvhc","package":"Pillow@11.3.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-pwv6-vv43-88gr","severity":"low","title":"GHSA-pwv6-vv43-88gr","package":"Pillow@11.3.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-r73j-pqj5-w3x7","severity":"low","title":"GHSA-r73j-pqj5-w3x7","package":"Pillow@11.3.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-whj4-6x5x-4v2j","severity":"low","title":"GHSA-whj4-6x5x-4v2j","package":"Pillow@11.3.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-wjx4-4jcj-g98j","severity":"low","title":"GHSA-wjx4-4jcj-g98j","package":"Pillow@11.3.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-165","severity":"low","title":"PYSEC-2026-165","package":"Pillow@11.3.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-4vvm-4w3v-6mr8","severity":"low","title":"GHSA-4vvm-4w3v-6mr8","package":"PyPDF2@3.0.1","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-1835","severity":"low","title":"PYSEC-2026-1835","package":"PyPDF2@3.0.1","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-7gcm-g887-7qv7","severity":"low","title":"GHSA-7gcm-g887-7qv7","package":"protobuf@4.25.8","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-1805","severity":"low","title":"PYSEC-2026-1805","package":"protobuf@4.25.8","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-gc5v-m9x4-r6x2","severity":"low","title":"GHSA-gc5v-m9x4-r6x2","package":"requests@2.32.5","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-vfmq-68hx-4jfw","severity":"low","title":"GHSA-vfmq-68hx-4jfw","package":"lxml@5.1.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-87","severity":"low","title":"PYSEC-2026-87","package":"lxml@5.1.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-68rp-wp8r-4726","severity":"low","title":"GHSA-68rp-wp8r-4726","package":"flask@3.0.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-5h2m-4q8j-pqpj","severity":"low","title":"GHSA-5h2m-4q8j-pqpj","package":"fastmcp@2.11.3","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-c2jp-c369-7pvx","severity":"low","title":"GHSA-c2jp-c369-7pvx","package":"fastmcp@2.11.3","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-m8x7-r2rg-vh5g","severity":"low","title":"GHSA-m8x7-r2rg-vh5g","package":"fastmcp@2.11.3","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-mxxr-jv3v-6pgc","severity":"low","title":"GHSA-mxxr-jv3v-6pgc","package":"fastmcp@2.11.3","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-rcfx-77hg-w2wv","severity":"low","title":"GHSA-rcfx-77hg-w2wv","package":"fastmcp@2.11.3","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-rj5c-58rq-j5g5","severity":"low","title":"GHSA-rj5c-58rq-j5g5","package":"fastmcp@2.11.3","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-rww4-4w9c-7733","severity":"low","title":"GHSA-rww4-4w9c-7733","package":"fastmcp@2.11.3","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-vv7q-7jx5-f767","severity":"low","title":"GHSA-vv7q-7jx5-f767","package":"fastmcp@2.11.3","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-1364","severity":"low","title":"PYSEC-2026-1364","package":"fastmcp@2.11.3","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-1365","severity":"low","title":"PYSEC-2026-1365","package":"fastmcp@2.11.3","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-338","severity":"low","title":"PYSEC-2026-338","package":"fastmcp@2.11.3","location":"requirements.txt","sources":["osv@v1"]}],"scorecard_findings":[]},"methodology":"github_public_v1"}}