{"data":{"slug":"pingcap-tidb","name":"tidb","trust":{"provenance":{"is_fork":false,"github_id":41986369,"owner_type":"Organization","methodology":"github_public_v1","parent_repo":null,"near_duplicate_slugs":[]},"computed_at":"2026-08-19T00:01:02.974Z","maintenance":{"label":"Very active","score":96,"methodology":"github_public_v1","releases_90d":1,"days_since_push":0,"last_release_at":"2026-07-09T04:51:54Z","stars_delta_30d":134,"open_issues_delta_30d":230},"security_summary":{"status":"findings","scanner":"osv@v1","low_count":8,"high_count":0,"last_scan_at":"2026-07-11T11:11:12.080Z","medium_count":0,"scan_profile":"deps","critical_count":0}},"findings":[{"id":"GHSA-fw7p-63qq-7hpr","severity":"low","title":"GHSA-fw7p-63qq-7hpr","package":"filippo.io/edwards25519@v1.1.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4503","severity":"low","title":"GO-2026-4503","package":"filippo.io/edwards25519@v1.1.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-pjcq-xvwq-hhpj","severity":"low","title":"GHSA-pjcq-xvwq-hhpj","package":"github.com/Azure/go-ntlmssp@v0.0.0-20221128193559-754e69321358","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-wf45-q9ch-q8gh","severity":"low","title":"GHSA-wf45-q9ch-q8gh","package":"github.com/apache/thrift@v0.21.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2022-0635","severity":"low","title":"GO-2022-0635","package":"github.com/aws/aws-sdk-go@v1.55.7","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2022-0646","severity":"low","title":"GO-2022-0646","package":"github.com/aws/aws-sdk-go@v1.55.7","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-xmrv-pmrh-hhx2","severity":"low","title":"GHSA-xmrv-pmrh-hhx2","package":"github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5764","severity":"low","title":"GO-2026-5764","package":"github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.0","location":"go.sum","sources":["osv@v1"]}],"security_intelligence":{"sources":[{"profile":"deps","scanner":"osv@v1","label":"OSV dependency advisories","status":"findings","status_label":"Published findings","scanned_at":"2026-07-11T11:11:15.779883+00:00","findings_count":8,"evidence_url":"https://osv.dev/","error":null,"caveat":null},{"profile":"deps_dev","scanner":"deps.dev@v1","label":"deps.dev advisories","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://deps.dev/","error":null,"caveat":null},{"profile":"openssf_scorecard","scanner":"openssf-scorecard@v1","label":"OpenSSF Scorecard","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://api.securityscorecards.dev/projects/github.com/pingcap/tidb","error":null,"caveat":"Weekly public scans omit some checks at scale."}],"dependency_findings":[{"id":"GHSA-fw7p-63qq-7hpr","severity":"low","title":"GHSA-fw7p-63qq-7hpr","package":"filippo.io/edwards25519@v1.1.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4503","severity":"low","title":"GO-2026-4503","package":"filippo.io/edwards25519@v1.1.0","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-pjcq-xvwq-hhpj","severity":"low","title":"GHSA-pjcq-xvwq-hhpj","package":"github.com/Azure/go-ntlmssp@v0.0.0-20221128193559-754e69321358","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-wf45-q9ch-q8gh","severity":"low","title":"GHSA-wf45-q9ch-q8gh","package":"github.com/apache/thrift@v0.21.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2022-0635","severity":"low","title":"GO-2022-0635","package":"github.com/aws/aws-sdk-go@v1.55.7","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2022-0646","severity":"low","title":"GO-2022-0646","package":"github.com/aws/aws-sdk-go@v1.55.7","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-xmrv-pmrh-hhx2","severity":"low","title":"GHSA-xmrv-pmrh-hhx2","package":"github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.0","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5764","severity":"low","title":"GO-2026-5764","package":"github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.0","location":"go.sum","sources":["osv@v1"]}],"scorecard_findings":[]},"methodology":"github_public_v1"}}