{"data":{"slug":"upgini-upgini","name":"upgini","trust":{"provenance":{"is_fork":false,"github_id":436402751,"owner_type":"Organization","methodology":"github_public_v1","parent_repo":null,"near_duplicate_slugs":[]},"computed_at":"2026-08-03T12:02:21.512Z","maintenance":{"label":"Very active","score":96,"methodology":"github_public_v1","releases_90d":0,"days_since_push":4,"last_release_at":"2024-09-04T17:23:34Z"},"security_summary":{"status":"findings","scanner":"osv@v1","low_count":27,"high_count":0,"last_scan_at":"2026-07-11T23:28:31.488Z","medium_count":0,"scan_profile":"deps","critical_count":0}},"findings":[{"id":"GHSA-9hjg-9r4m-mvj7","severity":"low","title":"GHSA-9hjg-9r4m-mvj7","package":"requests@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-9wx4-h78v-vm56","severity":"low","title":"GHSA-9wx4-h78v-vm56","package":"requests@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-gc5v-m9x4-r6x2","severity":"low","title":"GHSA-gc5v-m9x4-r6x2","package":"requests@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-j8r2-6x86-q33q","severity":"low","title":"GHSA-j8r2-6x86-q33q","package":"requests@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-x84v-xcm2-53pg","severity":"low","title":"GHSA-x84v-xcm2-53pg","package":"requests@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2018-28","severity":"low","title":"PYSEC-2018-28","package":"requests@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2023-74","severity":"low","title":"PYSEC-2023-74","package":"requests@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-1872","severity":"low","title":"PYSEC-2026-1872","package":"requests@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-1873","severity":"low","title":"PYSEC-2026-1873","package":"requests@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-6p56-wp2h-9hxr","severity":"low","title":"GHSA-6p56-wp2h-9hxr","package":"numpy@1.19.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-fpfv-jqm9-f5jm","severity":"low","title":"GHSA-fpfv-jqm9-f5jm","package":"numpy@1.19.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2021-856","severity":"low","title":"PYSEC-2021-856","package":"numpy@1.19.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-jw8x-6495-233v","severity":"low","title":"GHSA-jw8x-6495-233v","package":"scikit-learn@1.3.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2024-110","severity":"low","title":"PYSEC-2024-110","package":"scikit-learn@1.3.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-752w-5fwx-jx9f","severity":"low","title":"GHSA-752w-5fwx-jx9f","package":"pyjwt@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-993g-76c3-p5m4","severity":"low","title":"GHSA-993g-76c3-p5m4","package":"pyjwt@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-fhv5-28vv-h8m8","severity":"low","title":"GHSA-fhv5-28vv-h8m8","package":"pyjwt@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-w7vc-732c-9m39","severity":"low","title":"GHSA-w7vc-732c-9m39","package":"pyjwt@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-xgmm-8j9v-c9wx","severity":"low","title":"GHSA-xgmm-8j9v-c9wx","package":"pyjwt@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2025-183","severity":"low","title":"PYSEC-2025-183","package":"pyjwt@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-120","severity":"low","title":"PYSEC-2026-120","package":"pyjwt@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-175","severity":"low","title":"PYSEC-2026-175","package":"pyjwt@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-177","severity":"low","title":"PYSEC-2026-177","package":"pyjwt@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-178","severity":"low","title":"PYSEC-2026-178","package":"pyjwt@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-179","severity":"low","title":"PYSEC-2026-179","package":"pyjwt@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-jj5c-hhrg-vv5h","severity":"low","title":"GHSA-jj5c-hhrg-vv5h","package":"xhtml2pdf@0.2.11","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-2056","severity":"low","title":"PYSEC-2026-2056","package":"xhtml2pdf@0.2.11","location":"requirements.txt","sources":["osv@v1"]}],"security_intelligence":{"sources":[{"profile":"deps","scanner":"osv@v1","label":"OSV dependency advisories","status":"findings","status_label":"Published findings","scanned_at":"2026-07-11T23:28:35.612539+00:00","findings_count":27,"evidence_url":"https://osv.dev/","error":null,"caveat":null},{"profile":"deps_dev","scanner":"deps.dev@v1","label":"deps.dev advisories","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://deps.dev/","error":null,"caveat":null},{"profile":"openssf_scorecard","scanner":"openssf-scorecard@v1","label":"OpenSSF Scorecard","status":"not_scanned","status_label":"Not queried","scanned_at":null,"findings_count":0,"evidence_url":"https://api.securityscorecards.dev/projects/github.com/upgini/upgini","error":null,"caveat":"Weekly public scans omit some checks at scale."}],"dependency_findings":[{"id":"GHSA-9hjg-9r4m-mvj7","severity":"low","title":"GHSA-9hjg-9r4m-mvj7","package":"requests@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-9wx4-h78v-vm56","severity":"low","title":"GHSA-9wx4-h78v-vm56","package":"requests@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-gc5v-m9x4-r6x2","severity":"low","title":"GHSA-gc5v-m9x4-r6x2","package":"requests@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-j8r2-6x86-q33q","severity":"low","title":"GHSA-j8r2-6x86-q33q","package":"requests@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-x84v-xcm2-53pg","severity":"low","title":"GHSA-x84v-xcm2-53pg","package":"requests@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2018-28","severity":"low","title":"PYSEC-2018-28","package":"requests@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2023-74","severity":"low","title":"PYSEC-2023-74","package":"requests@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-1872","severity":"low","title":"PYSEC-2026-1872","package":"requests@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-1873","severity":"low","title":"PYSEC-2026-1873","package":"requests@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-6p56-wp2h-9hxr","severity":"low","title":"GHSA-6p56-wp2h-9hxr","package":"numpy@1.19.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-fpfv-jqm9-f5jm","severity":"low","title":"GHSA-fpfv-jqm9-f5jm","package":"numpy@1.19.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2021-856","severity":"low","title":"PYSEC-2021-856","package":"numpy@1.19.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-jw8x-6495-233v","severity":"low","title":"GHSA-jw8x-6495-233v","package":"scikit-learn@1.3.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2024-110","severity":"low","title":"PYSEC-2024-110","package":"scikit-learn@1.3.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-752w-5fwx-jx9f","severity":"low","title":"GHSA-752w-5fwx-jx9f","package":"pyjwt@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-993g-76c3-p5m4","severity":"low","title":"GHSA-993g-76c3-p5m4","package":"pyjwt@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-fhv5-28vv-h8m8","severity":"low","title":"GHSA-fhv5-28vv-h8m8","package":"pyjwt@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-w7vc-732c-9m39","severity":"low","title":"GHSA-w7vc-732c-9m39","package":"pyjwt@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-xgmm-8j9v-c9wx","severity":"low","title":"GHSA-xgmm-8j9v-c9wx","package":"pyjwt@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2025-183","severity":"low","title":"PYSEC-2025-183","package":"pyjwt@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-120","severity":"low","title":"PYSEC-2026-120","package":"pyjwt@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-175","severity":"low","title":"PYSEC-2026-175","package":"pyjwt@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-177","severity":"low","title":"PYSEC-2026-177","package":"pyjwt@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-178","severity":"low","title":"PYSEC-2026-178","package":"pyjwt@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-179","severity":"low","title":"PYSEC-2026-179","package":"pyjwt@2.8.0","location":"requirements.txt","sources":["osv@v1"]},{"id":"GHSA-jj5c-hhrg-vv5h","severity":"low","title":"GHSA-jj5c-hhrg-vv5h","package":"xhtml2pdf@0.2.11","location":"requirements.txt","sources":["osv@v1"]},{"id":"PYSEC-2026-2056","severity":"low","title":"PYSEC-2026-2056","package":"xhtml2pdf@0.2.11","location":"requirements.txt","sources":["osv@v1"]}],"scorecard_findings":[]},"methodology":"github_public_v1"}}