--- title: "mage-ai trust report" type: "trust-report" slug: "mage-ai-mage-ai" canonical_url: "https://www.graphcanon.com/tools/mage-ai-mage-ai/trust" computed_at: "2026-07-15T10:50:20.258Z" maintenance_label: "Active" security_status: "findings" --- # mage-ai trust report _Sourced [trust signals](/glossary/trust-and-signals/trust-signal) from public GitHub metadata and external security intelligence providers. Not a security guarantee._ ## Maintenance - Label: Active (82% recency signal) - Days since last push: 12 - Last release: 2026-01-21T17:32:41Z - Methodology: github_public_v1 ## Provenance - GitHub repo id: 493014338 - Not a fork - Owner type: Organization - Computed at: 2026-07-15T10:50:20.258Z - Methodology: github_public_v1 ## Security intelligence - **OSV dependency advisories**: Published findings - Last query: 2026-07-15T10:50:23.009447+00:00 - Evidence: https://osv.dev/ - **deps.dev advisories**: Not queried - Evidence: https://deps.dev/ - **OpenSSF Scorecard**: Not queried - Evidence: https://api.securityscorecards.dev/projects/github.com/mage-ai/mage-ai - Note: Weekly public scans omit some checks at scale. ### Findings - **low**: GHSA-3936-cmfr-pm3m (black@23.3.0 · poetry.lock · osv@v1) - **low**: GHSA-fj7x-q9j7-g6q6 (black@23.3.0 · poetry.lock · osv@v1) - **low**: PYSEC-2024-48 (black@23.3.0 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2120 (black@23.3.0 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2121 (black@23.3.0 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2132 (click@8.1.3 · poetry.lock · osv@v1) - **low**: GHSA-qmgc-5h2g-mvrw (filelock@3.12.0 · poetry.lock · osv@v1) - **low**: GHSA-w853-jp5j-5j7f (filelock@3.12.0 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1374 (filelock@3.12.0 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1375 (filelock@3.12.0 · poetry.lock · osv@v1) - **low**: GHSA-cpwx-vrp4-4pq7 (jinja2@3.1.2 · poetry.lock · osv@v1) - **low**: GHSA-gmj6-6f8f-6699 (jinja2@3.1.2 · poetry.lock · osv@v1) - **low**: GHSA-h5c8-rqwp-cp95 (jinja2@3.1.2 · poetry.lock · osv@v1) - **low**: GHSA-h75v-3vvj-5mfj (jinja2@3.1.2 · poetry.lock · osv@v1) - **low**: GHSA-q2x7-8rv6-6q7h (jinja2@3.1.2 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1471 (jinja2@3.1.2 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1472 (jinja2@3.1.2 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1473 (jinja2@3.1.2 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1474 (jinja2@3.1.2 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1475 (jinja2@3.1.2 · poetry.lock · osv@v1) - **low**: GHSA-33p9-3p43-82vq (jupyter-core@5.3.0 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1477 (jupyter-core@5.3.0 · poetry.lock · osv@v1) - **low**: GHSA-5239-wwwm-4pmq (pygments@2.15.1 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2987 (pygments@2.15.1 · poetry.lock · osv@v1) - **low**: GHSA-6w46-j5rx-g56g (pytest@7.3.1 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1845 (pytest@7.3.1 · poetry.lock · osv@v1) - **low**: GHSA-5rjg-fvgr-3xxf (setuptools@67.7.2 · poetry.lock · osv@v1) - **low**: GHSA-cx63-2mw6-8hw5 (setuptools@67.7.2 · poetry.lock · osv@v1) - **low**: PYSEC-2025-49 (setuptools@67.7.2 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1918 (setuptools@67.7.2 · poetry.lock · osv@v1) - **low**: PYSEC-2026-3447 (setuptools@67.7.2 · poetry.lock · osv@v1) - **low**: GHSA-3x9g-8vmp-wqvf (tornado@6.3.1 · poetry.lock · osv@v1) - **low**: GHSA-753j-mpmx-qq6g (tornado@6.3.1 · poetry.lock · osv@v1) - **low**: GHSA-78cv-mqj4-43f7 (tornado@6.3.1 · poetry.lock · osv@v1) - **low**: GHSA-7cx3-6m66-7c5m (tornado@6.3.1 · poetry.lock · osv@v1) - **low**: GHSA-8w49-h785-mj3c (tornado@6.3.1 · poetry.lock · osv@v1) - **low**: GHSA-cx3h-4qpv-8hc9 (tornado@6.3.1 · poetry.lock · osv@v1) - **low**: GHSA-fqwm-6jpj-5wxc (tornado@6.3.1 · poetry.lock · osv@v1) - **low**: GHSA-hj3f-6gcp-jg8j (tornado@6.3.1 · poetry.lock · osv@v1) - **low**: GHSA-mgf9-4vpg-hj56 (tornado@6.3.1 · poetry.lock · osv@v1) - **low**: GHSA-pw6j-qg29-8w7f (tornado@6.3.1 · poetry.lock · osv@v1) - **low**: GHSA-qjxf-f2mg-c6mc (tornado@6.3.1 · poetry.lock · osv@v1) - **low**: GHSA-qppv-j76h-2rpx (tornado@6.3.1 · poetry.lock · osv@v1) - **low**: GHSA-w235-7p84-xx57 (tornado@6.3.1 · poetry.lock · osv@v1) - **low**: PYSEC-2023-75 (tornado@6.3.1 · poetry.lock · osv@v1) - **low**: PYSEC-2025-265 (tornado@6.3.1 · poetry.lock · osv@v1) - **low**: PYSEC-2025-266 (tornado@6.3.1 · poetry.lock · osv@v1) - **low**: PYSEC-2025-267 (tornado@6.3.1 · poetry.lock · osv@v1) - **low**: PYSEC-2026-140 (tornado@6.3.1 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1974 (tornado@6.3.1 · poetry.lock · osv@v1) - **low**: PYSEC-2026-1975 (tornado@6.3.1 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2287 (tornado@6.3.1 · poetry.lock · osv@v1) - **low**: PYSEC-2026-3387 (tornado@6.3.1 · poetry.lock · osv@v1) - **low**: PYSEC-2026-3388 (tornado@6.3.1 · poetry.lock · osv@v1) - **low**: PYSEC-2026-3389 (tornado@6.3.1 · poetry.lock · osv@v1) - **low**: GHSA-597g-3phw-6986 (virtualenv@20.23.0 · poetry.lock · osv@v1) - **low**: GHSA-rqc4-2hc7-8c8v (virtualenv@20.23.0 · poetry.lock · osv@v1) - **low**: PYSEC-2024-187 (virtualenv@20.23.0 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2009 (virtualenv@20.23.0 · poetry.lock · osv@v1) - **low**: GHSA-jfmj-5v4g-7637 (zipp@3.15.0 · poetry.lock · osv@v1) - **low**: PYSEC-2026-2074 (zipp@3.15.0 · poetry.lock · osv@v1) - **low**: GHSA-7545-fcxq-7j24 (GitPython@3.1.41 · requirements.txt · osv@v1) - **low**: GHSA-mv93-w799-cj2w (GitPython@3.1.41 · requirements.txt · osv@v1) - **low**: GHSA-rpm5-65cw-6hj4 (GitPython@3.1.41 · requirements.txt · osv@v1) - **low**: GHSA-v87r-6q3f-2j67 (GitPython@3.1.41 · requirements.txt · osv@v1) - **low**: GHSA-x2qx-6953-8485 (GitPython@3.1.41 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2160 (GitPython@3.1.41 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2161 (GitPython@3.1.41 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2162 (GitPython@3.1.41 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2163 (GitPython@3.1.41 · requirements.txt · osv@v1) - **low**: GHSA-cfh3-3jmp-rvhc (Pillow@10.3.0 · requirements.txt · osv@v1) - **low**: GHSA-pwv6-vv43-88gr (Pillow@10.3.0 · requirements.txt · osv@v1) - **low**: GHSA-r73j-pqj5-w3x7 (Pillow@10.3.0 · requirements.txt · osv@v1) - **low**: GHSA-whj4-6x5x-4v2j (Pillow@10.3.0 · requirements.txt · osv@v1) - **low**: GHSA-wjx4-4jcj-g98j (Pillow@10.3.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-165 (Pillow@10.3.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2249 (Pillow@10.3.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2250 (Pillow@10.3.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2252 (Pillow@10.3.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2253 (Pillow@10.3.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2254 (Pillow@10.3.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2255 (Pillow@10.3.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2256 (Pillow@10.3.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2257 (Pillow@10.3.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2874 (Pillow@10.3.0 · requirements.txt · osv@v1) - **low**: GHSA-752w-5fwx-jx9f (PyJWT@2.6.0 · requirements.txt · osv@v1) - **low**: GHSA-993g-76c3-p5m4 (PyJWT@2.6.0 · requirements.txt · osv@v1) - **low**: GHSA-fhv5-28vv-h8m8 (PyJWT@2.6.0 · requirements.txt · osv@v1) - **low**: GHSA-xgmm-8j9v-c9wx (PyJWT@2.6.0 · requirements.txt · osv@v1) - **low**: PYSEC-2025-183 (PyJWT@2.6.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-120 (PyJWT@2.6.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-175 (PyJWT@2.6.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-177 (PyJWT@2.6.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-179 (PyJWT@2.6.0 · requirements.txt · osv@v1) - **low**: GHSA-2fqr-mr3j-6wp8 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-2vrm-gr82-f7m5 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-3wq7-rqq7-wx6j (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-4fvr-rgm6-gqmc (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-4m7w-qmgq-4wj5 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-54jq-c3m8-4m76 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-63hf-3vf5-4wqf (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-63hw-fmq6-xxg2 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-69f9-5gxw-wvc2 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-6jhg-hg63-jvvf (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-6mq8-rvhq-8wgg (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-8495-4g3g-x7pr (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-9548-qrrj-x5pj (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-966j-vmvw-g2g9 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-9x8q-7h8h-wcw9 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-c427-h43c-vf67 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-fh55-r93g-j68g (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-g3cq-j2xw-wf74 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-g84x-mcqj-x9qq (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-hcc4-c3v8-rx92 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-hg6j-4rv6-33pg (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-hpj7-wq8m-9hgp (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-jg22-mg44-37j8 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-jj3x-wxrx-4x23 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-jwhx-xcg6-8xhj (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-m5qp-6w8w-w647 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-m6qw-4cw2-hm4m (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-mqqc-3gqh-h2x8 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-mwh4-6h8g-pg8w (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-p998-jp59-783m (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-w2fm-2cpv-w7v5 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-xcgm-r5h9-7989 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-1097 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-1099 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-1100 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-1101 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-1103 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-1104 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-1105 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-1106 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-1107 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-1108 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-1109 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2094 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2095 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2096 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2097 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2098 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2099 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2100 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2101 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2102 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2103 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2104 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2105 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2106 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2107 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2108 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2109 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2110 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2111 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2112 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2113 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-237 (aiohttp@3.10.0 · requirements.txt · osv@v1) - **low**: GHSA-537c-gmf6-5ccf (cryptography@42.0.4 · requirements.txt · osv@v1) - **low**: GHSA-79v4-65xg-pq4g (cryptography@42.0.4 · requirements.txt · osv@v1) - **low**: GHSA-h4gh-qq45-vh27 (cryptography@42.0.4 · requirements.txt · osv@v1) - **low**: GHSA-m959-cc7f-wv43 (cryptography@42.0.4 · requirements.txt · osv@v1) - **low**: GHSA-r6ph-v2qm-q3c2 (cryptography@42.0.4 · requirements.txt · osv@v1) - **low**: PYSEC-2026-1284 (cryptography@42.0.4 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2141 (cryptography@42.0.4 · requirements.txt · osv@v1) - **low**: PYSEC-2026-35 (cryptography@42.0.4 · requirements.txt · osv@v1) - **low**: GHSA-6hrg-qmvc-2xh8 (joblib@1.1.0 · requirements.txt · osv@v1) - **low**: PYSEC-2022-288 (joblib@1.1.0 · requirements.txt · osv@v1) - **low**: GHSA-24qx-w28j-9m6p (jupyter-server@2.14.1 · requirements.txt · osv@v1) - **low**: GHSA-5789-5fc7-67v3 (jupyter-server@2.14.1 · requirements.txt · osv@v1) - **low**: GHSA-5mrq-x3x5-8v8f (jupyter-server@2.14.1 · requirements.txt · osv@v1) - **low**: GHSA-fcw5-x6j4-ccmp (jupyter-server@2.14.1 · requirements.txt · osv@v1) - **low**: GHSA-gf7q-q4j7-hp7c (jupyter-server@2.14.1 · requirements.txt · osv@v1) - **low**: GHSA-qh7q-6qm3-653w (jupyter-server@2.14.1 · requirements.txt · osv@v1) - **low**: GHSA-v42x-x7jp-845h (jupyter-server@2.14.1 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2187 (jupyter-server@2.14.1 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2532 (jupyter-server@2.14.1 · requirements.txt · osv@v1) - **low**: PYSEC-2026-366 (jupyter-server@2.14.1 · requirements.txt · osv@v1) - **low**: PYSEC-2026-67 (jupyter-server@2.14.1 · requirements.txt · osv@v1) - **low**: PYSEC-2026-68 (jupyter-server@2.14.1 · requirements.txt · osv@v1) - **low**: PYSEC-2026-69 (jupyter-server@2.14.1 · requirements.txt · osv@v1) - **low**: GHSA-r374-rxx8-8654 (paramiko@3.5.1 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2858 (paramiko@3.5.1 · requirements.txt · osv@v1) - **low**: PYSEC-2024-161 (pyarrow@14.0.1 · requirements.txt · osv@v1) - **low**: GHSA-g92j-qhmh-64v2 (sentry-sdk@2.0.0 · requirements.txt · osv@v1) - **low**: PYSEC-2026-1917 (sentry-sdk@2.0.0 · requirements.txt · osv@v1) - **low**: GHSA-29vq-49wr-vm6x (Werkzeug@3.0.3 · requirements.txt · osv@v1) - **low**: GHSA-87hc-h4r5-73f7 (Werkzeug@3.0.3 · requirements.txt · osv@v1) - **low**: GHSA-f9vj-2wh5-fj8j (Werkzeug@3.0.3 · requirements.txt · osv@v1) - **low**: GHSA-hgf8-39gv-g3f2 (Werkzeug@3.0.3 · requirements.txt · osv@v1) - **low**: GHSA-q34m-jh98-gwm2 (Werkzeug@3.0.3 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2044 (Werkzeug@3.0.3 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2045 (Werkzeug@3.0.3 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2046 (Werkzeug@3.0.3 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2320 (Werkzeug@3.0.3 · requirements.txt · osv@v1) - **low**: PYSEC-2026-3417 (Werkzeug@3.0.3 · requirements.txt · osv@v1) - **low**: GHSA-3644-q5cj-c5c7 (langchain@0.2.5 · requirements.txt · osv@v1) - **low**: GHSA-gr75-jv2w-4656 (langchain@0.2.5 · requirements.txt · osv@v1) - **low**: PYSEC-2024-323 (langchain@0.2.5 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2192 (langchain@0.2.5 · requirements.txt · osv@v1) - **low**: PYSEC-2026-2555 (langchain@0.2.5 · requirements.txt · osv@v1) - **low**: GHSA-45pg-36p6-83v9 (langchain_community@0.2.5 · requirements.txt · osv@v1) - **low**: GHSA-pc6w-59fv-rh23 (langchain_community@0.2.5 · requirements.txt · osv@v1) - **low**: GHSA-q25c-c977-4cmh (langchain_community@0.2.5 · requirements.txt · osv@v1) - **low**: PYSEC-2024-115 (langchain_community@0.2.5 · requirements.txt · osv@v1) - **low**: PYSEC-2026-1515 (langchain_community@0.2.5 · requirements.txt · osv@v1) - **low**: PYSEC-2026-1516 (langchain_community@0.2.5 · requirements.txt · osv@v1) ## Method and caveats These are heuristics from public GitHub data and external security intelligence providers, sourced and dated. "No published findings from this source" is not a guarantee of safety. See the full methodology: [/trust-methodology](/trust-methodology.md). ## Common questions ### Is mage-ai maintained? GraphCanon rates mage-ai "Active" (82% maintenance signal from public GitHub metadata, computed today). Last push was 12 days ago. This is a recency heuristic, not a guarantee the project will stay maintained. ### Is mage-ai safe to use? Last scanned today (deps profile). Status: 207 low - 207 low finding(s) in the latest scan. GraphCanon does not claim the project is safe or vulnerability-free; review findings on the trust report. GraphCanon does not certify mage-ai as safe - review maintenance, provenance, and scan findings on this page before adopting. ### Is mage-ai a fork? No. mage-ai is not flagged as a fork in GitHub metadata at the time of the last refresh. ### Does mage-ai have known security vulnerabilities? Last scanned today (deps profile). Status: 207 low - 207 low finding(s) in the latest scan. GraphCanon does not claim the project is safe or vulnerability-free; review findings on the trust report. ### How often is the mage-ai trust report updated? Trust signals refresh on GitHub ingest/refresh cycles and optional dependency/MCP scans. This report was computed today (methodology github_public_v1). ### What does GraphCanon never claim about mage-ai? We never publish a composite safety grade, pen-test endorsement, or "verified secure" label for mage-ai. Signals are sourced heuristics with explicit limits - see [trust methodology](/trust-methodology). ### How does GraphCanon assess trust for mage-ai? Signals are sourced from public GitHub metadata and optional dependency/MCP manifest scans, each tagged with methodology version and computed date. GraphCanon does not publish a composite safety grade. Read [trust methodology](/trust-methodology) for full scope and limits. --- **Machine-readable endpoints** - JSON: [`/api/graphcanon/tools/mage-ai-mage-ai/trust`](/api/graphcanon/tools/mage-ai-mage-ai/trust) - LLM index: [/llms.txt](/llms.txt) - Full corpus: [/llms-full.txt](/llms-full.txt) _GraphCanon - The knowledge graph for AI development. https://www.graphcanon.com/_