--- title: "faraday trust report" type: "trust-report" slug: "infobyte-faraday" canonical_url: "https://www.graphcanon.com/tools/infobyte-faraday/trust" computed_at: "2026-07-15T10:50:35.006Z" maintenance_label: "Active" security_status: "findings" --- # faraday trust report _Sourced [trust signals](/glossary/trust-and-signals/trust-signal) from public GitHub metadata and external security intelligence providers. Not a security guarantee._ ## Maintenance - Label: Active (82% recency signal) - Days since last push: 21 - Last release: 2026-06-19T16:41:34Z - Releases (90d): 3 - Methodology: github_public_v1 ## Provenance - GitHub repo id: 14160461 - Not a fork - Owner type: Organization - Computed at: 2026-07-15T10:50:35.006Z - Methodology: github_public_v1 ## Security intelligence - **OSV dependency advisories**: Published findings - Last query: 2026-07-15T10:50:36.718948+00:00 - Evidence: https://osv.dev/ - **deps.dev advisories**: Not queried - Evidence: https://deps.dev/ - **OpenSSF Scorecard**: Not queried - Evidence: https://api.securityscorecards.dev/projects/github.com/infobyte/faraday - Note: Weekly public scans omit some checks at scale. ### Findings - **low**: GHSA-8rfp-98v4-mmr6 (bleach@4.1.0 · requirements.txt · osv@v1) - **low**: GHSA-gj48-438w-jh9v (bleach@4.1.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2132 (click@8.0.1 · requirements.txt · osv@v1) - **low**: GHSA-537c-gmf6-5ccf (cryptography@42.0.0 · requirements.txt · osv@v1) - **low**: GHSA-6vqw-3v5j-54x4 (cryptography@42.0.0 · requirements.txt · osv@v1) - **low**: GHSA-79v4-65xg-pq4g (cryptography@42.0.0 · requirements.txt · osv@v1) - **low**: GHSA-9v9h-cgj8-h64p (cryptography@42.0.0 · requirements.txt · osv@v1) - **low**: GHSA-h4gh-qq45-vh27 (cryptography@42.0.0 · requirements.txt · osv@v1) - **low**: GHSA-m959-cc7f-wv43 (cryptography@42.0.0 · requirements.txt · osv@v1) - **low**: GHSA-r6ph-v2qm-q3c2 (cryptography@42.0.0 · requirements.txt · osv@v1) - **low**: PYSEC-2024-225 (cryptography@42.0.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-1284 (cryptography@42.0.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-1285 (cryptography@42.0.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2141 (cryptography@42.0.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-35 (cryptography@42.0.0 · requirements.txt · osv@v1) - **low**: GHSA-68rp-wp8r-4726 (flask@2.2.5 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2151 (flask@2.2.5 · requirements.txt · osv@v1) - **low**: GHSA-672h-6x89-76m5 (flask-security-too@4.0.0 · requirements.txt · osv@v1) - **low**: GHSA-6qmf-fj6m-686c (flask-security-too@4.0.0 · requirements.txt · osv@v1) - **low**: PYSEC-2021-123 (flask-security-too@4.0.0 · requirements.txt · osv@v1) - **low**: PYSEC-2023-248 (flask-security-too@4.0.0 · requirements.txt · osv@v1) - **low**: GHSA-462w-v97r-4m45 (jinja2@2.9.6 · requirements.txt · osv@v1) - **low**: GHSA-cpwx-vrp4-4pq7 (jinja2@2.9.6 · requirements.txt · osv@v1) - **low**: GHSA-g3rq-g295-4j3m (jinja2@2.9.6 · requirements.txt · osv@v1) - **low**: GHSA-h5c8-rqwp-cp95 (jinja2@2.9.6 · requirements.txt · osv@v1) - **low**: GHSA-h75v-3vvj-5mfj (jinja2@2.9.6 · requirements.txt · osv@v1) - **low**: GHSA-q2x7-8rv6-6q7h (jinja2@2.9.6 · requirements.txt · osv@v1) - **low**: PYSEC-2019-217 (jinja2@2.9.6 · requirements.txt · osv@v1) - **low**: PYSEC-2021-66 (jinja2@2.9.6 · requirements.txt · osv@v1) - **low**: PYSEC-2026-1471 (jinja2@2.9.6 · requirements.txt · osv@v1) - **low**: PYSEC-2026-1473 (jinja2@2.9.6 · requirements.txt · osv@v1) - **low**: PYSEC-2026-1474 (jinja2@2.9.6 · requirements.txt · osv@v1) - **low**: PYSEC-2026-1475 (jinja2@2.9.6 · requirements.txt · osv@v1) - **low**: GHSA-2h4p-vjrc-8xpq (mako@1.3.11 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2617 (mako@1.3.11 · requirements.txt · osv@v1) - **low**: GHSA-428g-f7cq-pgp5 (marshmallow@3.19.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-1605 (marshmallow@3.19.0 · requirements.txt · osv@v1) - **low**: GHSA-5xmw-vc9v-4wf2 (pillow@12.1.1 · requirements.txt · osv@v1) - **low**: GHSA-pwv6-vv43-88gr (pillow@12.1.1 · requirements.txt · osv@v1) - **low**: GHSA-r73j-pqj5-w3x7 (pillow@12.1.1 · requirements.txt · osv@v1) - **low**: GHSA-whj4-6x5x-4v2j (pillow@12.1.1 · requirements.txt · osv@v1) - **low**: GHSA-wjx4-4jcj-g98j (pillow@12.1.1 · requirements.txt · osv@v1) - **low**: PYSEC-2026-165 (pillow@12.1.1 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2250 (pillow@12.1.1 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2251 (pillow@12.1.1 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2252 (pillow@12.1.1 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2253 (pillow@12.1.1 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2254 (pillow@12.1.1 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2255 (pillow@12.1.1 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2256 (pillow@12.1.1 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2257 (pillow@12.1.1 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2874 (pillow@12.1.1 · requirements.txt · osv@v1) - **low**: GHSA-993g-76c3-p5m4 (pyjwt@2.12.0 · requirements.txt · osv@v1) - **low**: GHSA-fhv5-28vv-h8m8 (pyjwt@2.12.0 · requirements.txt · osv@v1) - **low**: GHSA-jq35-7prp-9v3f (pyjwt@2.12.0 · requirements.txt · osv@v1) - **low**: GHSA-w7vc-732c-9m39 (pyjwt@2.12.0 · requirements.txt · osv@v1) - **low**: GHSA-xgmm-8j9v-c9wx (pyjwt@2.12.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-175 (pyjwt@2.12.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-176 (pyjwt@2.12.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-177 (pyjwt@2.12.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-178 (pyjwt@2.12.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-179 (pyjwt@2.12.0 · requirements.txt · osv@v1) - **low**: GHSA-24wv-mv5m-xv4h (redis@4.3.4 · requirements.txt · osv@v1) - **low**: GHSA-8fww-64cx-x8p5 (redis@4.3.4 · requirements.txt · osv@v1) - **low**: PYSEC-2023-45 (redis@4.3.4 · requirements.txt · osv@v1) - **low**: PYSEC-2023-46 (redis@4.3.4 · requirements.txt · osv@v1) - **low**: GHSA-5rjg-fvgr-3xxf (setuptools@61 · requirements.txt · osv@v1) - **low**: GHSA-cx63-2mw6-8hw5 (setuptools@61 · requirements.txt · osv@v1) - **low**: GHSA-r9hx-vwmv-q579 (setuptools@61 · requirements.txt · osv@v1) - **low**: PYSEC-2022-43012 (setuptools@61 · requirements.txt · osv@v1) - **low**: PYSEC-2025-49 (setuptools@61 · requirements.txt · osv@v1) - **low**: PYSEC-2026-1918 (setuptools@61 · requirements.txt · osv@v1) - **low**: PYSEC-2026-3447 (setuptools@61 · requirements.txt · osv@v1) - **low**: GHSA-38fc-9xqv-7f7q (sqlalchemy@1.2.0 · requirements.txt · osv@v1) - **low**: GHSA-887w-45rq-vxgf (sqlalchemy@1.2.0 · requirements.txt · osv@v1) - **low**: PYSEC-2019-123 (sqlalchemy@1.2.0 · requirements.txt · osv@v1) - **low**: PYSEC-2019-124 (sqlalchemy@1.2.0 · requirements.txt · osv@v1) - **low**: GHSA-g7vv-2v7x-gj9p (tqdm@4.15.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-1976 (tqdm@4.15.0 · requirements.txt · osv@v1) - **low**: GHSA-3j69-69wj-xqx2 (ujson@5.12.0 · requirements.txt · osv@v1) - **low**: GHSA-c38f-wx89-p2xg (ujson@5.12.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2293 (ujson@5.12.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2294 (ujson@5.12.0 · requirements.txt · osv@v1) - **low**: GHSA-29vq-49wr-vm6x (werkzeug@2.3.8 · requirements.txt · osv@v1) - **low**: GHSA-2g68-c3qc-8985 (werkzeug@2.3.8 · requirements.txt · osv@v1) - **low**: GHSA-87hc-h4r5-73f7 (werkzeug@2.3.8 · requirements.txt · osv@v1) - **low**: GHSA-f9vj-2wh5-fj8j (werkzeug@2.3.8 · requirements.txt · osv@v1) - **low**: GHSA-hgf8-39gv-g3f2 (werkzeug@2.3.8 · requirements.txt · osv@v1) - **low**: GHSA-q34m-jh98-gwm2 (werkzeug@2.3.8 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2043 (werkzeug@2.3.8 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2044 (werkzeug@2.3.8 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2045 (werkzeug@2.3.8 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2046 (werkzeug@2.3.8 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2320 (werkzeug@2.3.8 · requirements.txt · osv@v1) - **low**: PYSEC-2026-3417 (werkzeug@2.3.8 · requirements.txt · osv@v1) ## Method and caveats These are heuristics from public GitHub data and external security intelligence providers, sourced and dated. "No published findings from this source" is not a guarantee of safety. See the full methodology: [/trust-methodology](/trust-methodology.md). ## Common questions ### Is faraday maintained? GraphCanon rates faraday "Active" (82% maintenance signal from public GitHub metadata, computed today). Last push was 21 days ago. 3 GitHub releases in the last 90 days. This is a recency heuristic, not a guarantee the project will stay maintained. ### Is faraday safe to use? Last scanned today (deps profile). Status: 95 low - 95 low finding(s) in the latest scan. GraphCanon does not claim the project is safe or vulnerability-free; review findings on the trust report. GraphCanon does not certify faraday as safe - review maintenance, provenance, and scan findings on this page before adopting. ### Is faraday a fork? No. faraday is not flagged as a fork in GitHub metadata at the time of the last refresh. ### Does faraday have known security vulnerabilities? Last scanned today (deps profile). Status: 95 low - 95 low finding(s) in the latest scan. GraphCanon does not claim the project is safe or vulnerability-free; review findings on the trust report. ### How often is the faraday trust report updated? Trust signals refresh on GitHub ingest/refresh cycles and optional dependency/MCP scans. This report was computed today (methodology github_public_v1). ### What does GraphCanon never claim about faraday? We never publish a composite safety grade, pen-test endorsement, or "verified secure" label for faraday. Signals are sourced heuristics with explicit limits - see [trust methodology](/trust-methodology). ### How does GraphCanon assess trust for faraday? Signals are sourced from public GitHub metadata and optional dependency/MCP manifest scans, each tagged with methodology version and computed date. GraphCanon does not publish a composite safety grade. Read [trust methodology](/trust-methodology) for full scope and limits. --- **Machine-readable endpoints** - JSON: [`/api/graphcanon/tools/infobyte-faraday/trust`](/api/graphcanon/tools/infobyte-faraday/trust) - LLM index: [/llms.txt](/llms.txt) - Full corpus: [/llms-full.txt](/llms-full.txt) _GraphCanon - The knowledge graph for AI development. https://www.graphcanon.com/_