--- title: "last_layer trust report" type: "trust-report" slug: "arekusandr-last-layer" canonical_url: "https://www.graphcanon.com/tools/arekusandr-last-layer/trust" computed_at: "2026-07-15T10:45:21.626Z" maintenance_label: "Dormant" security_status: "findings" --- # last_layer trust report _Sourced [trust signals](/glossary/trust-and-signals/trust-signal) from public GitHub metadata and external security intelligence providers. Not a security guarantee._ ## Maintenance - Label: Dormant (18% recency signal) - Days since last push: 719 - Last release: 2024-04-12T12:56:22Z - Methodology: github_public_v1 ## Provenance - GitHub repo id: 779234798 - Not a fork - Owner type: User - Computed at: 2026-07-15T10:45:21.626Z - Methodology: github_public_v1 ## Security intelligence - **OSV dependency advisories**: Published findings - Last query: 2026-07-15T10:45:24.023297+00:00 - Evidence: https://osv.dev/ - **deps.dev advisories**: Not queried - Evidence: https://deps.dev/ - **OpenSSF Scorecard**: Not queried - Evidence: https://api.securityscorecards.dev/projects/github.com/arekusandr/last_layer - Note: Weekly public scans omit some checks at scale. ### Findings - **low**: GHSA-2fqr-mr3j-6wp8 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-2vrm-gr82-f7m5 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-3wq7-rqq7-wx6j (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-4fvr-rgm6-gqmc (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-4m7w-qmgq-4wj5 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-54jq-c3m8-4m76 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-63hf-3vf5-4wqf (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-63hw-fmq6-xxg2 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-69f9-5gxw-wvc2 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-6jhg-hg63-jvvf (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-6mq8-rvhq-8wgg (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-8495-4g3g-x7pr (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-9548-qrrj-x5pj (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-966j-vmvw-g2g9 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-9x8q-7h8h-wcw9 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-c427-h43c-vf67 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-fh55-r93g-j68g (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-g3cq-j2xw-wf74 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-g84x-mcqj-x9qq (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-hcc4-c3v8-rx92 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-hg6j-4rv6-33pg (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-hpj7-wq8m-9hgp (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-jg22-mg44-37j8 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-jj3x-wxrx-4x23 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-m5qp-6w8w-w647 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-m6qw-4cw2-hm4m (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-mqqc-3gqh-h2x8 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-mwh4-6h8g-pg8w (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-p998-jp59-783m (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-w2fm-2cpv-w7v5 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-xcgm-r5h9-7989 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1097 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1099 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1100 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1101 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1103 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1104 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1105 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1106 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1107 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1109 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2094 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2095 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2096 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2097 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2098 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2099 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2100 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2101 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2102 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2103 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2104 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2105 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2106 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2107 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2108 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2109 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2110 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2111 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2112 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2113 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-237 (aiohttp@3.9.4 · poetry.lock · osv@v1) - **low**: GHSA-3936-cmfr-pm3m (black@24.4.2 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2120 (black@24.4.2 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2121 (black@24.4.2 · poetry.lock · osv@v1) - **low**: GHSA-248v-346w-9cwc (certifi@2024.2.2 · poetry.lock · osv@v1) - **low**: PYSEC-2024-230 (certifi@2024.2.2 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2132 (click@8.1.7 · poetry.lock · osv@v1) - **low**: GHSA-qmgc-5h2g-mvrw (filelock@3.13.4 · poetry.lock · osv@v1) - **low**: GHSA-w853-jp5j-5j7f (filelock@3.13.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1374 (filelock@3.13.4 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1375 (filelock@3.13.4 · poetry.lock · osv@v1) - **low**: GHSA-65pc-fj4g-8rjx (idna@3.7 · poetry.lock · osv@v1) - **low**: PYSEC-2026-215 (idna@3.7 · poetry.lock · osv@v1) - **low**: GHSA-2qmj-7962-cjq8 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: GHSA-3644-q5cj-c5c7 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: GHSA-3hjh-jh2h-vrg6 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: GHSA-45pg-36p6-83v9 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: GHSA-57fc-8q82-gfp3 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: GHSA-655w-fm8m-m478 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: GHSA-6643-h7h5-x9wh (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: GHSA-6h8p-4hx9-w66c (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: GHSA-7gfq-f96f-g85j (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: GHSA-7q94-qpjr-xpgm (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: GHSA-8h5w-f6q9-wg35 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: GHSA-92j5-3459-qgp4 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: GHSA-f73w-4m7g-ch9x (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: GHSA-fj32-q626-pjjc (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: GHSA-fprp-p869-w6q2 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: GHSA-gr75-jv2w-4656 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: GHSA-gwqq-6vq7-5j86 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: GHSA-h59x-p739-982c (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: GHSA-h9j7-5xvc-qhg5 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: GHSA-prgp-w7vf-ch62 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: GHSA-rgp8-pm28-3759 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: GHSA-x32c-59v5-h7fg (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: PYSEC-2023-109 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: PYSEC-2023-110 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: PYSEC-2023-138 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: PYSEC-2023-145 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: PYSEC-2023-146 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: PYSEC-2023-147 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: PYSEC-2023-151 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: PYSEC-2023-162 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: PYSEC-2023-18 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: PYSEC-2023-205 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: PYSEC-2023-91 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: PYSEC-2023-92 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: PYSEC-2023-98 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: PYSEC-2024-118 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: PYSEC-2024-323 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: PYSEC-2024-43 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1507 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1508 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1509 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1510 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2192 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2555 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: PYSEC-2026-372 (langchain@0.0.119 · poetry.lock · osv@v1) - **low**: GHSA-f2jm-rw3h-6phg (langchain-community@0.0.34 · poetry.lock · osv@v1) - **low**: GHSA-pc6w-59fv-rh23 (langchain-community@0.0.34 · poetry.lock · osv@v1) - **low**: GHSA-q25c-c977-4cmh (langchain-community@0.0.34 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1514 (langchain-community@0.0.34 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1515 (langchain-community@0.0.34 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1516 (langchain-community@0.0.34 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2561 (langchain-community@0.0.34 · poetry.lock · osv@v1) - **low**: GHSA-2g6r-c272-w58r (langchain-core@0.1.45 · poetry.lock · osv@v1) - **low**: GHSA-5chr-fjjv-38qv (langchain-core@0.1.45 · poetry.lock · osv@v1) - **low**: GHSA-6qv9-48xg-fc7f (langchain-core@0.1.45 · poetry.lock · osv@v1) - **low**: GHSA-926x-3r5x-gfhw (langchain-core@0.1.45 · poetry.lock · osv@v1) - **low**: GHSA-c67j-w6g6-q2cm (langchain-core@0.1.45 · poetry.lock · osv@v1) - **low**: GHSA-pjwx-r37v-7724 (langchain-core@0.1.45 · poetry.lock · osv@v1) - **low**: GHSA-qh6h-p6c9-ff54 (langchain-core@0.1.45 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1517 (langchain-core@0.1.45 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1518 (langchain-core@0.1.45 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2193 (langchain-core@0.1.45 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2562 (langchain-core@0.1.45 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2563 (langchain-core@0.1.45 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2564 (langchain-core@0.1.45 · poetry.lock · osv@v1) - **low**: PYSEC-2026-373 (langchain-core@0.1.45 · poetry.lock · osv@v1) - **low**: GHSA-f4xh-w4cj-qxq8 (langsmith@0.1.45 · poetry.lock · osv@v1) - **low**: GHSA-rr7j-v2q5-chgv (langsmith@0.1.45 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2582 (langsmith@0.1.45 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2583 (langsmith@0.1.45 · poetry.lock · osv@v1) - **low**: GHSA-2h4p-vjrc-8xpq (mako@1.3.3 · poetry.lock · osv@v1) - **low**: GHSA-v92g-xgxw-vvmm (mako@1.3.3 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2617 (mako@1.3.3 · poetry.lock · osv@v1) - **low**: PYSEC-2026-88 (mako@1.3.3 · poetry.lock · osv@v1) - **low**: GHSA-428g-f7cq-pgp5 (marshmallow@3.21.1 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1605 (marshmallow@3.21.1 · poetry.lock · osv@v1) - **low**: GHSA-hx9q-6w63-j58v (orjson@3.10.0 · poetry.lock · osv@v1) - **low**: PYSEC-2026-107 (orjson@3.10.0 · poetry.lock · osv@v1) - **low**: GHSA-6w46-j5rx-g56g (pytest@8.1.1 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1845 (pytest@8.1.1 · poetry.lock · osv@v1) - **low**: GHSA-9hjg-9r4m-mvj7 (requests@2.31.0 · poetry.lock · osv@v1) - **low**: GHSA-9wx4-h78v-vm56 (requests@2.31.0 · poetry.lock · osv@v1) - **low**: GHSA-gc5v-m9x4-r6x2 (requests@2.31.0 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1872 (requests@2.31.0 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1873 (requests@2.31.0 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2275 (requests@2.31.0 · poetry.lock · osv@v1) - **low**: GHSA-5rjg-fvgr-3xxf (setuptools@69.2.0 · poetry.lock · osv@v1) - **low**: GHSA-cx63-2mw6-8hw5 (setuptools@69.2.0 · poetry.lock · osv@v1) - **low**: PYSEC-2025-49 (setuptools@69.2.0 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1918 (setuptools@69.2.0 · poetry.lock · osv@v1) - **low**: PYSEC-2026-3447 (setuptools@69.2.0 · poetry.lock · osv@v1) - **low**: GHSA-g7vv-2v7x-gj9p (tqdm@4.66.2 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1976 (tqdm@4.66.2 · poetry.lock · osv@v1) - **low**: GHSA-2xpw-w6gg-jr37 (urllib3@2.2.1 · poetry.lock · osv@v1) - **low**: GHSA-34jh-p97f-mpxf (urllib3@2.2.1 · poetry.lock · osv@v1) - **low**: GHSA-38jv-5279-wg99 (urllib3@2.2.1 · poetry.lock · osv@v1) - **low**: GHSA-48p4-8xcf-vxj5 (urllib3@2.2.1 · poetry.lock · osv@v1) - **low**: GHSA-gm62-xv2j-4w53 (urllib3@2.2.1 · poetry.lock · osv@v1) - **low**: GHSA-pq67-6m6q-mj2v (urllib3@2.2.1 · poetry.lock · osv@v1) - **low**: GHSA-qccp-gfcp-xxvc (urllib3@2.2.1 · poetry.lock · osv@v1) - **low**: PYSEC-2026-141 (urllib3@2.2.1 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1994 (urllib3@2.2.1 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1995 (urllib3@2.2.1 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1996 (urllib3@2.2.1 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1997 (urllib3@2.2.1 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1998 (urllib3@2.2.1 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1999 (urllib3@2.2.1 · poetry.lock · osv@v1) - **low**: GHSA-597g-3phw-6986 (virtualenv@20.25.1 · poetry.lock · osv@v1) - **low**: GHSA-rqc4-2hc7-8c8v (virtualenv@20.25.1 · poetry.lock · osv@v1) - **low**: PYSEC-2024-187 (virtualenv@20.25.1 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2009 (virtualenv@20.25.1 · poetry.lock · osv@v1) ## Method and caveats These are heuristics from public GitHub data and external security intelligence providers, sourced and dated. "No published findings from this source" is not a guarantee of safety. See the full methodology: [/trust-methodology](/trust-methodology.md). ## Common questions ### Is last_layer maintained? GraphCanon rates last_layer "Dormant" (18% maintenance signal from public GitHub metadata, computed today). Last push was 719 days ago. This is a recency heuristic, not a guarantee the project will stay maintained. ### Is last_layer safe to use? Last scanned today (deps profile). Status: 185 low - 185 low finding(s) in the latest scan. GraphCanon does not claim the project is safe or vulnerability-free; review findings on the trust report. GraphCanon does not certify last_layer as safe - review maintenance, provenance, and scan findings on this page before adopting. ### Is last_layer a fork? No. last_layer is not flagged as a fork in GitHub metadata at the time of the last refresh. ### Does last_layer have known security vulnerabilities? Last scanned today (deps profile). Status: 185 low - 185 low finding(s) in the latest scan. GraphCanon does not claim the project is safe or vulnerability-free; review findings on the trust report. ### How often is the last_layer trust report updated? Trust signals refresh on GitHub ingest/refresh cycles and optional dependency/MCP scans. This report was computed today (methodology github_public_v1). ### What does GraphCanon never claim about last_layer? We never publish a composite safety grade, pen-test endorsement, or "verified secure" label for last_layer. Signals are sourced heuristics with explicit limits - see [trust methodology](/trust-methodology). ### How does GraphCanon assess trust for last_layer? Signals are sourced from public GitHub metadata and optional dependency/MCP manifest scans, each tagged with methodology version and computed date. GraphCanon does not publish a composite safety grade. Read [trust methodology](/trust-methodology) for full scope and limits. --- **Machine-readable endpoints** - JSON: [`/api/graphcanon/tools/arekusandr-last-layer/trust`](/api/graphcanon/tools/arekusandr-last-layer/trust) - LLM index: [/llms.txt](/llms.txt) - Full corpus: [/llms-full.txt](/llms-full.txt) _GraphCanon - The knowledge graph for AI development. https://www.graphcanon.com/_