GraphCanon
Home/SolidGPT/Trust report

Trust and health report

SolidGPT - trust report

Sourced, dated trust signals - maintenance label posture, repository provenance, and security scan status. Not a composite safety grade.

GraphCanon updated 1w · GitHub synced 1w

Maintenance

Recency and activity heuristics from public GitHub metadata (maintenance label, momentum); methodology: github_public_v1.

Dormant18% signal

last push 580d ago · last release 2y

+2 stars (30d) · +1 open issues (30d)

Provenance

Repository identity and fork provenance (github_public_v1).

Security intelligence

Source-by-source security scan results from public intelligence providers. Missing, partial, or failed queries are shown explicitly and are not treated as clean.

OSV dependency advisories

Published findings
Last query
1mo
Scanner
osv@v1
Stored findings
132
View source evidence

deps.dev advisories

Not queried
Scanner
deps.dev@v1
View source evidence

OpenSSF Scorecard

Not queried
Scanner
openssf-scorecard@v1

Weekly public scans omit some checks at scale.

View source evidence

Dependency advisories (deduplicated)

GHSA-2fqr-mr3j-6wp8
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-2vrm-gr82-f7m5
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-3wq7-rqq7-wx6j
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-4fvr-rgm6-gqmc
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-4m7w-qmgq-4wj5
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-54jq-c3m8-4m76
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-5h86-8mv2-jq9f
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-5m98-qgg9-wh84
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-63hf-3vf5-4wqf
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-63hw-fmq6-xxg2
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-69f9-5gxw-wvc2
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-6jhg-hg63-jvvf
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-6mq8-rvhq-8wgg
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-7gpw-8wmc-pm8g
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-8495-4g3g-x7pr
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-8qpw-xqxj-h4r2
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-9548-qrrj-x5pj
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-966j-vmvw-g2g9
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-9x8q-7h8h-wcw9
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-c427-h43c-vf67
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-fh55-r93g-j68g
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-g3cq-j2xw-wf74
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-g84x-mcqj-x9qq
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-gfw2-4jvh-wgfg
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-hcc4-c3v8-rx92
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-hg6j-4rv6-33pg
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-hpj7-wq8m-9hgp
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-jg22-mg44-37j8
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-jj3x-wxrx-4x23
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-m5qp-6w8w-w647
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-m6qw-4cw2-hm4m
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-mqqc-3gqh-h2x8
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-mwh4-6h8g-pg8w
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-p998-jp59-783m
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-pjjw-qhg8-p2p9
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-q3qx-c6g2-7pw2
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-qvrw-v9rv-5rjx
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-w2fm-2cpv-w7v5
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-xcgm-r5h9-7989
aiohttp@3.8.5 · osv@v1
requirements.txt
PYSEC-2023-246
aiohttp@3.8.5 · osv@v1
requirements.txt
PYSEC-2023-250
aiohttp@3.8.5 · osv@v1
requirements.txt
PYSEC-2023-251
aiohttp@3.8.5 · osv@v1
requirements.txt
PYSEC-2024-24
aiohttp@3.8.5 · osv@v1
requirements.txt
PYSEC-2024-26
aiohttp@3.8.5 · osv@v1
requirements.txt
PYSEC-2026-1097
aiohttp@3.8.5 · osv@v1
requirements.txt
PYSEC-2026-1098
aiohttp@3.8.5 · osv@v1
requirements.txt
PYSEC-2026-1099
aiohttp@3.8.5 · osv@v1
requirements.txt
PYSEC-2026-1100
aiohttp@3.8.5 · osv@v1
requirements.txt
PYSEC-2026-1101
aiohttp@3.8.5 · osv@v1
requirements.txt
PYSEC-2026-1102
aiohttp@3.8.5 · osv@v1
requirements.txt
PYSEC-2026-1103
aiohttp@3.8.5 · osv@v1
requirements.txt
PYSEC-2026-1104
aiohttp@3.8.5 · osv@v1
requirements.txt
PYSEC-2026-1105
aiohttp@3.8.5 · osv@v1
requirements.txt
PYSEC-2026-1106
aiohttp@3.8.5 · osv@v1
requirements.txt
PYSEC-2026-1107
aiohttp@3.8.5 · osv@v1
requirements.txt
PYSEC-2026-1109
aiohttp@3.8.5 · osv@v1
requirements.txt
PYSEC-2026-237
aiohttp@3.8.5 · osv@v1
requirements.txt
GHSA-248v-346w-9cwc
certifi@2023.7.22 · osv@v1
requirements.txt
PYSEC-2024-230
certifi@2023.7.22 · osv@v1
requirements.txt
GHSA-65pc-fj4g-8rjx
idna@3.4 · osv@v1
requirements.txt
GHSA-jjg7-2v4v-x38h
idna@3.4 · osv@v1
requirements.txt
PYSEC-2024-60
idna@3.4 · osv@v1
requirements.txt
PYSEC-2026-215
idna@3.4 · osv@v1
requirements.txt
GHSA-9hjg-9r4m-mvj7
requests@2.31.0 · osv@v1
requirements.txt
GHSA-9wx4-h78v-vm56
requests@2.31.0 · osv@v1
requirements.txt
GHSA-gc5v-m9x4-r6x2
requests@2.31.0 · osv@v1
requirements.txt
PYSEC-2026-1872
requests@2.31.0 · osv@v1
requirements.txt
PYSEC-2026-1873
requests@2.31.0 · osv@v1
requirements.txt
GHSA-g7vv-2v7x-gj9p
tqdm@4.66.1 · osv@v1
requirements.txt
PYSEC-2026-1976
tqdm@4.66.1 · osv@v1
requirements.txt
GHSA-2xpw-w6gg-jr37
urllib3@1.26.16 · osv@v1
requirements.txt
GHSA-34jh-p97f-mpxf
urllib3@1.26.16 · osv@v1
requirements.txt
GHSA-38jv-5279-wg99
urllib3@1.26.16 · osv@v1
requirements.txt
GHSA-g4mx-q9vg-27p4
urllib3@1.26.16 · osv@v1
requirements.txt
GHSA-gm62-xv2j-4w53
urllib3@1.26.16 · osv@v1
requirements.txt
GHSA-pq67-6m6q-mj2v
urllib3@1.26.16 · osv@v1
requirements.txt
GHSA-qccp-gfcp-xxvc
urllib3@1.26.16 · osv@v1
requirements.txt
GHSA-v845-jxx5-vc9f
urllib3@1.26.16 · osv@v1
requirements.txt
PYSEC-2023-192
urllib3@1.26.16 · osv@v1
requirements.txt
PYSEC-2023-212
urllib3@1.26.16 · osv@v1
requirements.txt
PYSEC-2026-141
urllib3@1.26.16 · osv@v1
requirements.txt
PYSEC-2026-1994
urllib3@1.26.16 · osv@v1
requirements.txt
PYSEC-2026-1995
urllib3@1.26.16 · osv@v1
requirements.txt
PYSEC-2026-1996
urllib3@1.26.16 · osv@v1
requirements.txt
PYSEC-2026-1998
urllib3@1.26.16 · osv@v1
requirements.txt
PYSEC-2026-1999
urllib3@1.26.16 · osv@v1
requirements.txt
GHSA-6w46-j5rx-g56g
pytest@7.4.0 · osv@v1
requirements.txt
PYSEC-2026-1845
pytest@7.4.0 · osv@v1
requirements.txt
GHSA-3644-q5cj-c5c7
langchain@0.0.292 · osv@v1
requirements.txt
GHSA-3hjh-jh2h-vrg6
langchain@0.0.292 · osv@v1
requirements.txt
GHSA-45pg-36p6-83v9
langchain@0.0.292 · osv@v1
requirements.txt
GHSA-655w-fm8m-m478
langchain@0.0.292 · osv@v1
requirements.txt
GHSA-6h8p-4hx9-w66c
langchain@0.0.292 · osv@v1
requirements.txt
GHSA-7gfq-f96f-g85j
langchain@0.0.292 · osv@v1
requirements.txt
GHSA-f73w-4m7g-ch9x
langchain@0.0.292 · osv@v1
requirements.txt
GHSA-gr75-jv2w-4656
langchain@0.0.292 · osv@v1
requirements.txt
GHSA-h59x-p739-982c
langchain@0.0.292 · osv@v1
requirements.txt
GHSA-h9j7-5xvc-qhg5
langchain@0.0.292 · osv@v1
requirements.txt
GHSA-prgp-w7vf-ch62
langchain@0.0.292 · osv@v1
requirements.txt
GHSA-rgp8-pm28-3759
langchain@0.0.292 · osv@v1
requirements.txt
PYSEC-2023-162
langchain@0.0.292 · osv@v1
requirements.txt
PYSEC-2023-205
langchain@0.0.292 · osv@v1
requirements.txt
PYSEC-2024-118
langchain@0.0.292 · osv@v1
requirements.txt
PYSEC-2024-43
langchain@0.0.292 · osv@v1
requirements.txt
PYSEC-2026-1507
langchain@0.0.292 · osv@v1
requirements.txt
PYSEC-2026-1508
langchain@0.0.292 · osv@v1
requirements.txt
PYSEC-2026-1509
langchain@0.0.292 · osv@v1
requirements.txt
PYSEC-2026-1510
langchain@0.0.292 · osv@v1
requirements.txt
GHSA-f4xh-w4cj-qxq8
langsmith@0.0.38 · osv@v1
requirements.txt
GHSA-rr7j-v2q5-chgv
langsmith@0.0.38 · osv@v1
requirements.txt
GHSA-7m75-x27w-r52r
qdrant_client@1.5.4 · osv@v1
requirements.txt
PYSEC-2026-509
qdrant_client@1.5.4 · osv@v1
requirements.txt
PYSEC-2024-38
fastapi@0.103.1 · osv@v1
requirements.txt
GHSA-2jv5-9r88-3w3p
python-multipart@0.0.6 · osv@v1
requirements.txt
GHSA-59g5-xgcq-4qw3
python-multipart@0.0.6 · osv@v1
requirements.txt
GHSA-5rvq-cxj2-64vf
python-multipart@0.0.6 · osv@v1
requirements.txt
GHSA-6jv3-5f52-599m
python-multipart@0.0.6 · osv@v1
requirements.txt
GHSA-mj87-hwqh-73pj
python-multipart@0.0.6 · osv@v1
requirements.txt
GHSA-pp6c-gr5w-3c5g
python-multipart@0.0.6 · osv@v1
requirements.txt
GHSA-v9pg-7xvm-68hf
python-multipart@0.0.6 · osv@v1
requirements.txt
GHSA-vffw-93wf-4j4q
python-multipart@0.0.6 · osv@v1
requirements.txt
GHSA-wp53-j4wj-2cfg
python-multipart@0.0.6 · osv@v1
requirements.txt
PYSEC-2026-1850
python-multipart@0.0.6 · osv@v1
requirements.txt
PYSEC-2026-1851
python-multipart@0.0.6 · osv@v1
requirements.txt
PYSEC-2026-1852
python-multipart@0.0.6 · osv@v1
requirements.txt
GHSA-3rq5-2g8h-59hc
eventlet@0.33.3 · osv@v1
requirements.txt
GHSA-hw6f-rjfj-j7j7
eventlet@0.33.3 · osv@v1
requirements.txt
PYSEC-2026-1350
eventlet@0.33.3 · osv@v1
requirements.txt
GHSA-j7x9-7j54-2v3h
text-generation@0.6.1 · osv@v1
requirements.txt
GHSA-qq99-p57r-g3v7
text-generation@0.6.1 · osv@v1
requirements.txt
PYSEC-2026-1965
text-generation@0.6.1 · osv@v1
requirements.txt
PYSEC-2026-1966
text-generation@0.6.1 · osv@v1
requirements.txt

Method and caveats: these are sourced, dated heuristics from public GitHub data and external security intelligence providers. A status like "no published findings from this source" is not a guarantee of safety. Read the full trust methodology · JSON report at /api/graphcanon/tools/ai-citizen-solidgpt/trust.

Common questions

Is SolidGPT maintained?
GraphCanon rates SolidGPT "Dormant" (18% maintenance signal from public GitHub metadata, computed 1w). Last push was 580 days ago. This is a recency heuristic, not a guarantee the project will stay maintained.
Is SolidGPT safe to use?
Last scanned 1mo (deps profile). Status: 132 low - 132 low finding(s) in the latest scan. GraphCanon does not claim the project is safe or vulnerability-free; review findings on the trust report. GraphCanon does not certify SolidGPT as safe - review maintenance, provenance, and scan findings on this page before adopting.
Is SolidGPT a fork?
No. SolidGPT is not flagged as a fork in GitHub metadata at the time of the last refresh.
Does SolidGPT have known security vulnerabilities?
Last scanned 1mo (deps profile). Status: 132 low - 132 low finding(s) in the latest scan. GraphCanon does not claim the project is safe or vulnerability-free; review findings on the trust report.
How often is the SolidGPT trust report updated?
Trust signals refresh on GitHub ingest/refresh cycles and optional dependency/MCP scans. This report was computed 1w (methodology github_public_v1).
What does GraphCanon never claim about SolidGPT?
We never publish a composite safety grade, pen-test endorsement, or "verified secure" label for SolidGPT. Signals are sourced heuristics with explicit limits - see trust methodology.
How does GraphCanon assess trust for SolidGPT?
Signals are sourced from public GitHub metadata and optional dependency/MCP manifest scans, each tagged with methodology version and computed date. GraphCanon does not publish a composite safety grade. Read trust methodology for full scope and limits.

Was this helpful?

Anonymous feedback helps us improve pages and translations.