{"data":{"slug":"tensorchord-envd","name":"envd","trust":{"provenance":{"is_fork":false,"github_id":480303698,"owner_type":"Organization","methodology":"github_public_v1","parent_repo":null,"near_duplicate_slugs":[]},"computed_at":"2026-08-20T18:00:57.807Z","maintenance":{"label":"Active","score":82,"methodology":"github_public_v1","releases_90d":0,"days_since_push":26,"last_release_at":"2026-02-07T01:43:50Z","stars_delta_30d":10,"open_issues_delta_30d":2},"security_summary":{"status":"findings","scanner":"osv@v1","low_count":44,"high_count":0,"last_scan_at":"2026-07-11T11:21:43.360Z","medium_count":0,"scan_profile":"deps","critical_count":0}},"findings":[{"id":"GHSA-xmrv-pmrh-hhx2","severity":"low","title":"GHSA-xmrv-pmrh-hhx2","package":"github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.2","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5764","severity":"low","title":"GO-2026-5764","package":"github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.2","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-33vj-92qq-66hc","severity":"low","title":"GHSA-33vj-92qq-66hc","package":"github.com/containerd/containerd/v2@v2.1.5","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-cvxm-645q-p574","severity":"low","title":"GHSA-cvxm-645q-p574","package":"github.com/containerd/containerd/v2@v2.1.5","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-fqw6-gf59-qr4w","severity":"low","title":"GHSA-fqw6-gf59-qr4w","package":"github.com/containerd/containerd/v2@v2.1.5","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-jpcc-p29g-p8mq","severity":"low","title":"GHSA-jpcc-p29g-p8mq","package":"github.com/containerd/containerd/v2@v2.1.5","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-rgh6-rfwx-v388","severity":"low","title":"GHSA-rgh6-rfwx-v388","package":"github.com/containerd/containerd/v2@v2.1.5","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-xhf5-7wjv-pqxp","severity":"low","title":"GHSA-xhf5-7wjv-pqxp","package":"github.com/containerd/containerd/v2@v2.1.5","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5064","severity":"low","title":"GO-2026-5064","package":"github.com/containerd/containerd/v2@v2.1.5","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5338","severity":"low","title":"GO-2026-5338","package":"github.com/containerd/containerd/v2@v2.1.5","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5378","severity":"low","title":"GO-2026-5378","package":"github.com/containerd/containerd/v2@v2.1.5","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5475","severity":"low","title":"GO-2026-5475","package":"github.com/containerd/containerd/v2@v2.1.5","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5622","severity":"low","title":"GO-2026-5622","package":"github.com/containerd/containerd/v2@v2.1.5","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5758","severity":"low","title":"GO-2026-5758","package":"github.com/containerd/containerd/v2@v2.1.5","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-p436-gjf2-799p","severity":"low","title":"GHSA-p436-gjf2-799p","package":"github.com/docker/cli@v28.5.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4610","severity":"low","title":"GO-2026-4610","package":"github.com/docker/cli@v28.5.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-pxq6-2prw-chj9","severity":"low","title":"GHSA-pxq6-2prw-chj9","package":"github.com/docker/docker@v28.5.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-rg2x-37c3-w2rh","severity":"low","title":"GHSA-rg2x-37c3-w2rh","package":"github.com/docker/docker@v28.5.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-vp62-88p7-qqf5","severity":"low","title":"GHSA-vp62-88p7-qqf5","package":"github.com/docker/docker@v28.5.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-x744-4wpc-v9h2","severity":"low","title":"GHSA-x744-4wpc-v9h2","package":"github.com/docker/docker@v28.5.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-x86f-5xw2-fm2r","severity":"low","title":"GHSA-x86f-5xw2-fm2r","package":"github.com/docker/docker@v28.5.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4883","severity":"low","title":"GO-2026-4883","package":"github.com/docker/docker@v28.5.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4887","severity":"low","title":"GO-2026-4887","package":"github.com/docker/docker@v28.5.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5617","severity":"low","title":"GO-2026-5617","package":"github.com/docker/docker@v28.5.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5668","severity":"low","title":"GO-2026-5668","package":"github.com/docker/docker@v28.5.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5746","severity":"low","title":"GO-2026-5746","package":"github.com/docker/docker@v28.5.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-m3xc-h892-ggx6","severity":"low","title":"GHSA-m3xc-h892-ggx6","package":"github.com/go-git/go-billy/v5@v5.6.2","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-qw64-3x98-g7q2","severity":"low","title":"GHSA-qw64-3x98-g7q2","package":"github.com/go-git/go-billy/v5@v5.6.2","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-37cx-329c-33x3","severity":"low","title":"GHSA-37cx-329c-33x3","package":"github.com/go-git/go-git/v5@v5.16.3","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-389r-gv7p-r3rp","severity":"low","title":"GHSA-389r-gv7p-r3rp","package":"github.com/go-git/go-git/v5@v5.16.3","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-3xc5-wrhm-f963","severity":"low","title":"GHSA-3xc5-wrhm-f963","package":"github.com/go-git/go-git/v5@v5.16.3","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-crhj-59gh-8x96","severity":"low","title":"GHSA-crhj-59gh-8x96","package":"github.com/go-git/go-git/v5@v5.16.3","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-gm2x-2g9h-ccm8","severity":"low","title":"GHSA-gm2x-2g9h-ccm8","package":"github.com/go-git/go-git/v5@v5.16.3","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-jhf3-xxhw-2wpp","severity":"low","title":"GHSA-jhf3-xxhw-2wpp","package":"github.com/go-git/go-git/v5@v5.16.3","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-m7cr-m3pv-hgrp","severity":"low","title":"GHSA-m7cr-m3pv-hgrp","package":"github.com/go-git/go-git/v5@v5.16.3","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-w5pp-99ch-qj29","severity":"low","title":"GHSA-w5pp-99ch-qj29","package":"github.com/go-git/go-git/v5@v5.16.3","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4473","severity":"low","title":"GO-2026-4473","package":"github.com/go-git/go-git/v5@v5.16.3","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4909","severity":"low","title":"GO-2026-4909","package":"github.com/go-git/go-git/v5@v5.16.3","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4910","severity":"low","title":"GO-2026-4910","package":"github.com/go-git/go-git/v5@v5.16.3","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5496","severity":"low","title":"GO-2026-5496","package":"github.com/go-git/go-git/v5@v5.16.3","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-78h2-9frx-2jm8","severity":"low","title":"GHSA-78h2-9frx-2jm8","package":"github.com/go-jose/go-jose/v4@v4.1.3","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4945","severity":"low","title":"GO-2026-4945","package":"github.com/go-jose/go-jose/v4@v4.1.3","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-92mm-2pjq-r785","severity":"low","title":"GHSA-92mm-2pjq-r785","package":"github.com/hashicorp/go-getter@v1.8.3","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5058","severity":"low","title":"GO-2026-5058","package":"github.com/hashicorp/go-getter@v1.8.3","location":"go.sum","sources":["osv@v1"]}],"security_intelligence":{"sources":[{"profile":"deps","scanner":"osv@v1","label":"OSV dependency advisories","status":"findings","status_label":"Published findings","scanned_at":"2026-07-11T11:21:45.676903+00:00","findings_count":44,"evidence_url":"https://osv.dev/","error":null,"caveat":null},{"profile":"deps_dev","scanner":"deps.dev@v1","label":"deps.dev advisories","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://deps.dev/","error":null,"caveat":null},{"profile":"openssf_scorecard","scanner":"openssf-scorecard@v1","label":"OpenSSF Scorecard","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://api.securityscorecards.dev/projects/github.com/tensorchord/envd","error":null,"caveat":"Weekly public scans omit some checks at scale."}],"dependency_findings":[{"id":"GHSA-xmrv-pmrh-hhx2","severity":"low","title":"GHSA-xmrv-pmrh-hhx2","package":"github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.2","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5764","severity":"low","title":"GO-2026-5764","package":"github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.2","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-33vj-92qq-66hc","severity":"low","title":"GHSA-33vj-92qq-66hc","package":"github.com/containerd/containerd/v2@v2.1.5","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-cvxm-645q-p574","severity":"low","title":"GHSA-cvxm-645q-p574","package":"github.com/containerd/containerd/v2@v2.1.5","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-fqw6-gf59-qr4w","severity":"low","title":"GHSA-fqw6-gf59-qr4w","package":"github.com/containerd/containerd/v2@v2.1.5","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-jpcc-p29g-p8mq","severity":"low","title":"GHSA-jpcc-p29g-p8mq","package":"github.com/containerd/containerd/v2@v2.1.5","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-rgh6-rfwx-v388","severity":"low","title":"GHSA-rgh6-rfwx-v388","package":"github.com/containerd/containerd/v2@v2.1.5","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-xhf5-7wjv-pqxp","severity":"low","title":"GHSA-xhf5-7wjv-pqxp","package":"github.com/containerd/containerd/v2@v2.1.5","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5064","severity":"low","title":"GO-2026-5064","package":"github.com/containerd/containerd/v2@v2.1.5","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5338","severity":"low","title":"GO-2026-5338","package":"github.com/containerd/containerd/v2@v2.1.5","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5378","severity":"low","title":"GO-2026-5378","package":"github.com/containerd/containerd/v2@v2.1.5","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5475","severity":"low","title":"GO-2026-5475","package":"github.com/containerd/containerd/v2@v2.1.5","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5622","severity":"low","title":"GO-2026-5622","package":"github.com/containerd/containerd/v2@v2.1.5","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5758","severity":"low","title":"GO-2026-5758","package":"github.com/containerd/containerd/v2@v2.1.5","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-p436-gjf2-799p","severity":"low","title":"GHSA-p436-gjf2-799p","package":"github.com/docker/cli@v28.5.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4610","severity":"low","title":"GO-2026-4610","package":"github.com/docker/cli@v28.5.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-pxq6-2prw-chj9","severity":"low","title":"GHSA-pxq6-2prw-chj9","package":"github.com/docker/docker@v28.5.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-rg2x-37c3-w2rh","severity":"low","title":"GHSA-rg2x-37c3-w2rh","package":"github.com/docker/docker@v28.5.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-vp62-88p7-qqf5","severity":"low","title":"GHSA-vp62-88p7-qqf5","package":"github.com/docker/docker@v28.5.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-x744-4wpc-v9h2","severity":"low","title":"GHSA-x744-4wpc-v9h2","package":"github.com/docker/docker@v28.5.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-x86f-5xw2-fm2r","severity":"low","title":"GHSA-x86f-5xw2-fm2r","package":"github.com/docker/docker@v28.5.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4883","severity":"low","title":"GO-2026-4883","package":"github.com/docker/docker@v28.5.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4887","severity":"low","title":"GO-2026-4887","package":"github.com/docker/docker@v28.5.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5617","severity":"low","title":"GO-2026-5617","package":"github.com/docker/docker@v28.5.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5668","severity":"low","title":"GO-2026-5668","package":"github.com/docker/docker@v28.5.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5746","severity":"low","title":"GO-2026-5746","package":"github.com/docker/docker@v28.5.1+incompatible","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-m3xc-h892-ggx6","severity":"low","title":"GHSA-m3xc-h892-ggx6","package":"github.com/go-git/go-billy/v5@v5.6.2","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-qw64-3x98-g7q2","severity":"low","title":"GHSA-qw64-3x98-g7q2","package":"github.com/go-git/go-billy/v5@v5.6.2","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-37cx-329c-33x3","severity":"low","title":"GHSA-37cx-329c-33x3","package":"github.com/go-git/go-git/v5@v5.16.3","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-389r-gv7p-r3rp","severity":"low","title":"GHSA-389r-gv7p-r3rp","package":"github.com/go-git/go-git/v5@v5.16.3","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-3xc5-wrhm-f963","severity":"low","title":"GHSA-3xc5-wrhm-f963","package":"github.com/go-git/go-git/v5@v5.16.3","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-crhj-59gh-8x96","severity":"low","title":"GHSA-crhj-59gh-8x96","package":"github.com/go-git/go-git/v5@v5.16.3","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-gm2x-2g9h-ccm8","severity":"low","title":"GHSA-gm2x-2g9h-ccm8","package":"github.com/go-git/go-git/v5@v5.16.3","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-jhf3-xxhw-2wpp","severity":"low","title":"GHSA-jhf3-xxhw-2wpp","package":"github.com/go-git/go-git/v5@v5.16.3","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-m7cr-m3pv-hgrp","severity":"low","title":"GHSA-m7cr-m3pv-hgrp","package":"github.com/go-git/go-git/v5@v5.16.3","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-w5pp-99ch-qj29","severity":"low","title":"GHSA-w5pp-99ch-qj29","package":"github.com/go-git/go-git/v5@v5.16.3","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4473","severity":"low","title":"GO-2026-4473","package":"github.com/go-git/go-git/v5@v5.16.3","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4909","severity":"low","title":"GO-2026-4909","package":"github.com/go-git/go-git/v5@v5.16.3","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4910","severity":"low","title":"GO-2026-4910","package":"github.com/go-git/go-git/v5@v5.16.3","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5496","severity":"low","title":"GO-2026-5496","package":"github.com/go-git/go-git/v5@v5.16.3","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-78h2-9frx-2jm8","severity":"low","title":"GHSA-78h2-9frx-2jm8","package":"github.com/go-jose/go-jose/v4@v4.1.3","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-4945","severity":"low","title":"GO-2026-4945","package":"github.com/go-jose/go-jose/v4@v4.1.3","location":"go.sum","sources":["osv@v1"]},{"id":"GHSA-92mm-2pjq-r785","severity":"low","title":"GHSA-92mm-2pjq-r785","package":"github.com/hashicorp/go-getter@v1.8.3","location":"go.sum","sources":["osv@v1"]},{"id":"GO-2026-5058","severity":"low","title":"GO-2026-5058","package":"github.com/hashicorp/go-getter@v1.8.3","location":"go.sum","sources":["osv@v1"]}],"scorecard_findings":[]},"methodology":"github_public_v1"}}