Is guildai maintained?

GraphCanon rates guildai "Dormant" (18% maintenance signal from public GitHub metadata, computed 2w). Last push was 460 days ago. This is a recency heuristic, not a guarantee the project will stay maintained.

Is guildai safe to use?

Last scanned 1mo (deps profile). Status: 138 low - 138 low finding(s) in the latest scan. GraphCanon does not claim the project is safe or vulnerability-free; review findings on the trust report. GraphCanon does not certify guildai as safe - review maintenance, provenance, and scan findings on this page before adopting.

No. guildai is not flagged as a fork in GitHub metadata at the time of the last refresh.

Does guildai have known security vulnerabilities?

Last scanned 1mo (deps profile). Status: 138 low - 138 low finding(s) in the latest scan. GraphCanon does not claim the project is safe or vulnerability-free; review findings on the trust report.

How often is the guildai trust report updated?

Trust signals refresh on GitHub ingest/refresh cycles and optional dependency/MCP scans. This report was computed 2w (methodology github_public_v1).

What does GraphCanon never claim about guildai?

We never publish a composite safety grade, pen-test endorsement, or "verified secure" label for guildai. Signals are sourced heuristics with explicit limits - see trust methodology (https://www.graphcanon.com/trust-methodology).

How does GraphCanon assess trust for guildai?

Signals are sourced from public GitHub metadata and optional dependency/MCP manifest scans, each tagged with methodology version and computed date. GraphCanon does not publish a composite safety grade. Read trust methodology (https://www.graphcanon.com/trust-methodology) for full scope and limits.

Home/guildai/Trust report

Trust and health report

guildai - trust report

Sourced, dated trust signals - maintenance label posture, repository provenance, and security scan status. Not a composite safety grade.

GraphCanon updated 2w · GitHub synced 2w

Maintenance

Recency and activity heuristics from public GitHub metadata (maintenance label, momentum); methodology: github_public_v1.

Dormant18% signal

last push 460d ago · last release 4y

Provenance

Repository identity and fork provenance (github_public_v1).

GitHub repo id: 105057392
Not a fork
Verified publisher: organization account
Computed 2w

Security intelligence

Source-by-source security scan results from public intelligence providers. Missing, partial, or failed queries are shown explicitly and are not treated as clean.

OSV dependency advisories

Published findings

Last query: 1mo
Scanner: osv@v1
Stored findings: 138

View source evidence

deps.dev advisories

Not queried

Scanner: deps.dev@v1

View source evidence

OpenSSF Scorecard

Not queried

Scanner: openssf-scorecard@v1

Weekly public scans omit some checks at scale.

View source evidence

Dependency advisories (deduplicated)

GHSA-3f63-hfp8-52jq

Pillow@5.0 · osv@v1

requirements.txt

GHSA-3wvg-mj6g-m9cv

Pillow@5.0 · osv@v1

requirements.txt

GHSA-3xv8-3j54-hgrp

Pillow@5.0 · osv@v1

requirements.txt

GHSA-43fq-w8qq-v88h

Pillow@5.0 · osv@v1

requirements.txt

GHSA-44wm-f244-xhp3

Pillow@5.0 · osv@v1

requirements.txt

GHSA-4fx9-vc88-q2xc

Pillow@5.0 · osv@v1

requirements.txt

GHSA-57h3-9rgr-c24m

Pillow@5.0 · osv@v1

requirements.txt

GHSA-5gm3-px64-rw72

Pillow@5.0 · osv@v1

requirements.txt

GHSA-7534-mm45-c74v

Pillow@5.0 · osv@v1

requirements.txt

GHSA-77gc-v2xv-rvvh

Pillow@5.0 · osv@v1

requirements.txt

GHSA-7r7m-5h27-29hp

Pillow@5.0 · osv@v1

requirements.txt

GHSA-8843-m7mw-mxqm

Pillow@5.0 · osv@v1

requirements.txt

GHSA-8ghj-p4vj-mr35

Pillow@5.0 · osv@v1

requirements.txt

GHSA-8vj2-vxx3-667w

Pillow@5.0 · osv@v1

requirements.txt

GHSA-8xjq-8fcg-g5hw

Pillow@5.0 · osv@v1

requirements.txt

GHSA-95q3-8gr9-gm8w

Pillow@5.0 · osv@v1

requirements.txt

GHSA-9j59-75qj-795w

Pillow@5.0 · osv@v1

requirements.txt

GHSA-cqhg-xjhh-p8hf

Pillow@5.0 · osv@v1

requirements.txt

GHSA-f4w8-cv6p-x6r5

Pillow@5.0 · osv@v1

requirements.txt

GHSA-f5g8-5qq7-938w

Pillow@5.0 · osv@v1

requirements.txt

GHSA-g6rj-rv7j-xwp4

Pillow@5.0 · osv@v1

requirements.txt

GHSA-hf64-x4gq-p99h

Pillow@5.0 · osv@v1

requirements.txt

GHSA-hj69-c76v-86wr

Pillow@5.0 · osv@v1

requirements.txt

GHSA-j7hp-h8jx-5ppr

Pillow@5.0 · osv@v1

requirements.txt

GHSA-j7mj-748x-7p78

Pillow@5.0 · osv@v1

requirements.txt

GHSA-jgpv-4h4c-xhw3

Pillow@5.0 · osv@v1

requirements.txt

GHSA-m2vv-5vj5-2hm7

Pillow@5.0 · osv@v1

requirements.txt

GHSA-mvg9-xffr-p774

Pillow@5.0 · osv@v1

requirements.txt

GHSA-p43w-g3c5-g5mq

Pillow@5.0 · osv@v1

requirements.txt

GHSA-p49h-hjvm-jg3h

Pillow@5.0 · osv@v1

requirements.txt

GHSA-pw3c-h7wp-cvhx

Pillow@5.0 · osv@v1

requirements.txt

GHSA-q5hq-fp76-qmrc

Pillow@5.0 · osv@v1

requirements.txt

GHSA-r73j-pqj5-w3x7

Pillow@5.0 · osv@v1

requirements.txt

GHSA-r7rm-8j6h-r933

Pillow@5.0 · osv@v1

requirements.txt

GHSA-rwv7-3v45-hg29

Pillow@5.0 · osv@v1

requirements.txt

GHSA-vcqg-3p29-xw73

Pillow@5.0 · osv@v1

requirements.txt

GHSA-vj42-xq3r-hr3r

Pillow@5.0 · osv@v1

requirements.txt

GHSA-vqcj-wrf2-7v73

Pillow@5.0 · osv@v1

requirements.txt

GHSA-wjx4-4jcj-g98j

Pillow@5.0 · osv@v1

requirements.txt

GHSA-xrcv-f9gm-v42c

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2019-110

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2020-172

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2020-76

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2020-77

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2020-78

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2020-79

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2020-80

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2020-81

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2020-82

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2020-83

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2020-84

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2021-137

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2021-138

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2021-139

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2021-317

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2021-331

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2021-35

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2021-36

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2021-37

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2021-38

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2021-39

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2021-40

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2021-41

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2021-42

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2021-69

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2021-70

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2021-71

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2021-92

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2021-93

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2021-94

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2022-10

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2022-168

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2022-42979

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2022-42980

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2022-8

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2022-9

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2023-175

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2023-227

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2026-165

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2026-1793

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2026-1794

Pillow@5.0 · osv@v1

requirements.txt

PYSEC-2026-457

Pillow@5.0 · osv@v1

requirements.txt

GHSA-8q59-q68h-6hv4

PyYAML@2.12 · osv@v1

requirements.txt

GHSA-rprw-h62v-c2w7

PyYAML@2.12 · osv@v1

requirements.txt

PYSEC-2018-49

PyYAML@2.12 · osv@v1

requirements.txt

PYSEC-2021-142

PyYAML@2.12 · osv@v1

requirements.txt

GHSA-29vq-49wr-vm6x

Werkzeug@0.15 · osv@v1

requirements.txt

GHSA-2g68-c3qc-8985

Werkzeug@0.15 · osv@v1

requirements.txt

GHSA-87hc-h4r5-73f7

Werkzeug@0.15 · osv@v1

requirements.txt

GHSA-f9vj-2wh5-fj8j

Werkzeug@0.15 · osv@v1

requirements.txt

GHSA-gq9m-qvpx-68hc

Werkzeug@0.15 · osv@v1

requirements.txt

GHSA-hgf8-39gv-g3f2

Werkzeug@0.15 · osv@v1

requirements.txt

GHSA-j544-7q9p-6xp8

Werkzeug@0.15 · osv@v1

requirements.txt

GHSA-px8h-6qxv-m22q

Werkzeug@0.15 · osv@v1

requirements.txt

GHSA-xg9f-g7g7-2323

Werkzeug@0.15 · osv@v1

requirements.txt

PYSEC-2019-140

Werkzeug@0.15 · osv@v1

requirements.txt

PYSEC-2022-203

Werkzeug@0.15 · osv@v1

requirements.txt

PYSEC-2023-221

Werkzeug@0.15 · osv@v1

requirements.txt

PYSEC-2023-57

Werkzeug@0.15 · osv@v1

requirements.txt

PYSEC-2023-58

Werkzeug@0.15 · osv@v1

requirements.txt

PYSEC-2026-1065

Werkzeug@0.15 · osv@v1

requirements.txt

PYSEC-2026-2043

Werkzeug@0.15 · osv@v1

requirements.txt

PYSEC-2026-2044

Werkzeug@0.15 · osv@v1

requirements.txt

PYSEC-2026-2045

Werkzeug@0.15 · osv@v1

requirements.txt

PYSEC-2026-2046

Werkzeug@0.15 · osv@v1

requirements.txt

GHSA-qmgc-5h2g-mvrw

filelock@3.0.12 · osv@v1

requirements.txt

GHSA-w853-jp5j-5j7f

filelock@3.0.12 · osv@v1

requirements.txt

PYSEC-2026-1374

filelock@3.0.12 · osv@v1

requirements.txt

PYSEC-2026-1375

filelock@3.0.12 · osv@v1

requirements.txt

GHSA-cpwx-vrp4-4pq7

jinja2@3.0.3 · osv@v1

requirements.txt

GHSA-gmj6-6f8f-6699

jinja2@3.0.3 · osv@v1

requirements.txt

GHSA-h5c8-rqwp-cp95

jinja2@3.0.3 · osv@v1

requirements.txt

GHSA-h75v-3vvj-5mfj

jinja2@3.0.3 · osv@v1

requirements.txt

GHSA-q2x7-8rv6-6q7h

jinja2@3.0.3 · osv@v1

requirements.txt

PYSEC-2026-1471

jinja2@3.0.3 · osv@v1

requirements.txt

PYSEC-2026-1472

jinja2@3.0.3 · osv@v1

requirements.txt

PYSEC-2026-1473

jinja2@3.0.3 · osv@v1

requirements.txt

PYSEC-2026-1474

jinja2@3.0.3 · osv@v1

requirements.txt

PYSEC-2026-1475

jinja2@3.0.3 · osv@v1

requirements.txt

GHSA-5545-2q6w-2gh6

numpy@1.16 · osv@v1

requirements.txt

GHSA-6p56-wp2h-9hxr

numpy@1.16 · osv@v1

requirements.txt

GHSA-9fq2-x9r6-wfmf

numpy@1.16 · osv@v1

requirements.txt

GHSA-f7c7-j99h-c22f

numpy@1.16 · osv@v1

requirements.txt

GHSA-fpfv-jqm9-f5jm

numpy@1.16 · osv@v1

requirements.txt

PYSEC-2019-108

numpy@1.16 · osv@v1

requirements.txt

PYSEC-2021-856

numpy@1.16 · osv@v1

requirements.txt

PYSEC-2021-857

numpy@1.16 · osv@v1

requirements.txt

GHSA-qfc5-mcwq-26q8

psutil@5.6.3 · osv@v1

requirements.txt

PYSEC-2019-41

psutil@5.6.3 · osv@v1

requirements.txt

GHSA-jjw5-xxj6-pcv5

scikit-learn@0.19.1 · osv@v1

requirements.txt

GHSA-jw8x-6495-233v

scikit-learn@0.19.1 · osv@v1

requirements.txt

PYSEC-2020-107

scikit-learn@0.19.1 · osv@v1

requirements.txt

PYSEC-2020-108

scikit-learn@0.19.1 · osv@v1

requirements.txt

PYSEC-2024-110

scikit-learn@0.19.1 · osv@v1

requirements.txt

GHSA-597g-3phw-6986

virtualenv@15.1.0 · osv@v1

requirements.txt

GHSA-rqc4-2hc7-8c8v

virtualenv@15.1.0 · osv@v1

requirements.txt

PYSEC-2024-187

virtualenv@15.1.0 · osv@v1

requirements.txt

PYSEC-2026-2009

virtualenv@15.1.0 · osv@v1

requirements.txt

Method and caveats: these are sourced, dated heuristics from public GitHub data and external security intelligence providers. A status like "no published findings from this source" is not a guarantee of safety. Read the full trust methodology · JSON report at /api/graphcanon/tools/guildai-guildai/trust.

Common questions

Is guildai maintained?: GraphCanon rates guildai "Dormant" (18% maintenance signal from public GitHub metadata, computed 2w). Last push was 460 days ago. This is a recency heuristic, not a guarantee the project will stay maintained.
Is guildai safe to use?: Last scanned 1mo (deps profile). Status: 138 low - 138 low finding(s) in the latest scan. GraphCanon does not claim the project is safe or vulnerability-free; review findings on the trust report. GraphCanon does not certify guildai as safe - review maintenance, provenance, and scan findings on this page before adopting.
Is guildai a fork?: No. guildai is not flagged as a fork in GitHub metadata at the time of the last refresh.
Does guildai have known security vulnerabilities?: Last scanned 1mo (deps profile). Status: 138 low - 138 low finding(s) in the latest scan. GraphCanon does not claim the project is safe or vulnerability-free; review findings on the trust report.
How often is the guildai trust report updated?: Trust signals refresh on GitHub ingest/refresh cycles and optional dependency/MCP scans. This report was computed 2w (methodology github_public_v1).
What does GraphCanon never claim about guildai?: We never publish a composite safety grade, pen-test endorsement, or "verified secure" label for guildai. Signals are sourced heuristics with explicit limits - see trust methodology.
How does GraphCanon assess trust for guildai?: Signals are sourced from public GitHub metadata and optional dependency/MCP manifest scans, each tagged with methodology version and computed date. GraphCanon does not publish a composite safety grade. Read trust methodology for full scope and limits.