{"data":{"slug":"open-compass-vlmevalkit","name":"VLMEvalKit","trust":{"provenance":{"is_fork":false,"github_id":725956246,"owner_type":"Organization","methodology":"github_public_v1","parent_repo":null,"near_duplicate_slugs":[]},"computed_at":"2026-08-17T18:01:07.432Z","maintenance":{"label":"Very active","score":96,"methodology":"github_public_v1","releases_90d":0,"days_since_push":0,"last_release_at":"2025-06-21T17:45:35Z","stars_delta_30d":60,"open_issues_delta_30d":21},"security_summary":{"status":"findings","scanner":"osv@v1","low_count":16,"high_count":0,"last_scan_at":"2026-07-11T11:05:19.139Z","medium_count":0,"scan_profile":"deps","critical_count":0}},"findings":[{"id":"GHSA-4xpc-pv4p-pm3w","severity":"low","title":"GHSA-4xpc-pv4p-pm3w","package":"litellm@1.55","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-53mr-6c8q-9789","severity":"low","title":"GHSA-53mr-6c8q-9789","package":"litellm@1.55","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-69x8-hrgq-fjj8","severity":"low","title":"GHSA-69x8-hrgq-fjj8","package":"litellm@1.55","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-fh2c-86xm-pm2x","severity":"low","title":"GHSA-fh2c-86xm-pm2x","package":"litellm@1.55","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-fjcf-3j3r-78rp","severity":"low","title":"GHSA-fjcf-3j3r-78rp","package":"litellm@1.55","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-jjhc-v7c2-5hh6","severity":"low","title":"GHSA-jjhc-v7c2-5hh6","package":"litellm@1.55","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-qrc4-49gv-mv9m","severity":"low","title":"GHSA-qrc4-49gv-mv9m","package":"litellm@1.55","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-wpfp-gwwc-vwq6","severity":"low","title":"GHSA-wpfp-gwwc-vwq6","package":"litellm@1.55","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-1545","severity":"low","title":"PYSEC-2026-1545","package":"litellm@1.55","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-1546","severity":"low","title":"PYSEC-2026-1546","package":"litellm@1.55","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-388","severity":"low","title":"PYSEC-2026-388","package":"litellm@1.55","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-390","severity":"low","title":"PYSEC-2026-390","package":"litellm@1.55","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-vfmq-68hx-4jfw","severity":"low","title":"GHSA-vfmq-68hx-4jfw","package":"lxml@6.0.2","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-87","severity":"low","title":"PYSEC-2026-87","package":"lxml@6.0.2","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-qr4w-53vh-m672","severity":"low","title":"GHSA-qr4w-53vh-m672","package":"opencv-python@4.7.0.72","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2023-183","severity":"low","title":"PYSEC-2023-183","package":"opencv-python@4.7.0.72","location":"requirements.txt","sources":["osv@v1"]}],"security_intelligence":{"sources":[{"profile":"deps","scanner":"osv@v1","label":"OSV dependency advisories","status":"findings","status_label":"Published findings","scanned_at":"2026-07-11T11:05:20.914925+00:00","findings_count":16,"evidence_url":"https://osv.dev/","error":null,"caveat":null},{"profile":"deps_dev","scanner":"deps.dev@v1","label":"deps.dev advisories","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://deps.dev/","error":null,"caveat":null},{"profile":"openssf_scorecard","scanner":"openssf-scorecard@v1","label":"OpenSSF Scorecard","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://api.securityscorecards.dev/projects/github.com/open-compass/VLMEvalKit","error":null,"caveat":"Weekly public scans omit some checks at scale."}],"dependency_findings":[{"id":"GHSA-4xpc-pv4p-pm3w","severity":"low","title":"GHSA-4xpc-pv4p-pm3w","package":"litellm@1.55","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-53mr-6c8q-9789","severity":"low","title":"GHSA-53mr-6c8q-9789","package":"litellm@1.55","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-69x8-hrgq-fjj8","severity":"low","title":"GHSA-69x8-hrgq-fjj8","package":"litellm@1.55","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-fh2c-86xm-pm2x","severity":"low","title":"GHSA-fh2c-86xm-pm2x","package":"litellm@1.55","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-fjcf-3j3r-78rp","severity":"low","title":"GHSA-fjcf-3j3r-78rp","package":"litellm@1.55","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-jjhc-v7c2-5hh6","severity":"low","title":"GHSA-jjhc-v7c2-5hh6","package":"litellm@1.55","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-qrc4-49gv-mv9m","severity":"low","title":"GHSA-qrc4-49gv-mv9m","package":"litellm@1.55","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-wpfp-gwwc-vwq6","severity":"low","title":"GHSA-wpfp-gwwc-vwq6","package":"litellm@1.55","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-1545","severity":"low","title":"PYSEC-2026-1545","package":"litellm@1.55","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-1546","severity":"low","title":"PYSEC-2026-1546","package":"litellm@1.55","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-388","severity":"low","title":"PYSEC-2026-388","package":"litellm@1.55","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-390","severity":"low","title":"PYSEC-2026-390","package":"litellm@1.55","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-vfmq-68hx-4jfw","severity":"low","title":"GHSA-vfmq-68hx-4jfw","package":"lxml@6.0.2","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-87","severity":"low","title":"PYSEC-2026-87","package":"lxml@6.0.2","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-qr4w-53vh-m672","severity":"low","title":"GHSA-qr4w-53vh-m672","package":"opencv-python@4.7.0.72","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2023-183","severity":"low","title":"PYSEC-2023-183","package":"opencv-python@4.7.0.72","location":"requirements.txt","sources":["osv@v1"]}],"scorecard_findings":[]},"methodology":"github_public_v1"}}