GraphCanon
Home/DiffSinger/Trust report

Trust and health report

DiffSinger - trust report

Sourced, dated trust signals - maintenance label posture, repository provenance, and security scan status. Not a composite safety grade.

GraphCanon updated today · GitHub synced today

Maintenance

Recency and activity heuristics from public GitHub metadata (maintenance label, momentum); methodology: github_public_v1.

Dormant18% signal

last push 479d ago · last release 4y

Provenance

Repository identity and fork provenance (github_public_v1).

  • GitHub repo id: 439211693
  • Not a fork
  • Personal account
  • Computed today

Security scan

Dependency advisory security scan when a lockfile is present. Not a full code audit.

Status
24 low
Last scan
today
Scanner
osv@v1

Findings

GHSA-6p56-wp2h-9hxr
numpy@1.19.2 · requirements.txt
GHSA-fpfv-jqm9-f5jm
numpy@1.19.2 · requirements.txt
PYSEC-2023-102
scipy@1.5.4 · requirements.txt
PYSEC-2023-114
scipy@1.5.4 · requirements.txt
GHSA-8q59-q68h-6hv4
PyYAML@5.3.1 · requirements.txt
PYSEC-2021-142
PyYAML@5.3.1 · requirements.txt
GHSA-5rjg-fvgr-3xxf
setuptools@41.0.0 · requirements.txt
GHSA-cx63-2mw6-8hw5
setuptools@41.0.0 · requirements.txt
GHSA-r9hx-vwmv-q579
setuptools@41.0.0 · requirements.txt
PYSEC-2022-43012
setuptools@41.0.0 · requirements.txt
PYSEC-2025-49
setuptools@41.0.0 · requirements.txt
PYSEC-2026-1918
setuptools@41.0.0 · requirements.txt
GHSA-jw8x-6495-233v
scikit-learn@0.24.1 · requirements.txt
GHSA-jxfp-4rvq-9h9m
scikit-learn@0.24.1 · requirements.txt
PYSEC-2024-110
scikit-learn@0.24.1 · requirements.txt
GHSA-2vj5-px25-gjrp
pytorch-lightning@0.7.1 · requirements.txt
GHSA-4cv3-v7pv-rfhf
pytorch-lightning@0.7.1 · requirements.txt
GHSA-75m9-98v2-hjpm
pytorch-lightning@0.7.1 · requirements.txt
GHSA-98fp-7v67-4v3q
pytorch-lightning@0.7.1 · requirements.txt
GHSA-r5qj-cvf9-p85h
pytorch-lightning@0.7.1 · requirements.txt
PYSEC-2021-874
pytorch-lightning@0.7.1 · requirements.txt
PYSEC-2022-181
pytorch-lightning@0.7.1 · requirements.txt
PYSEC-2026-1857
pytorch-lightning@0.7.1 · requirements.txt
PYSEC-2026-507
pytorch-lightning@0.7.1 · requirements.txt

Method and caveats:these are sourced, dated heuristics from public GitHub data and optional dependency scans. A status like "no criticals found on 2026-07-11" is not a guarantee of safety. Read the full trust methodology · JSON report at /api/graphcanon/tools/moonintheriver-diffsinger/trust.

Common questions

Is DiffSinger maintained?
GraphCanon rates DiffSinger "Dormant" (18% maintenance signal from public GitHub metadata, computed today). Last push was 479 days ago. This is a recency heuristic, not a guarantee the project will stay maintained.
Is DiffSinger safe to use?
Last scanned today (deps profile). Status: 24 low - 24 low finding(s) in the latest scan. GraphCanon does not claim the project is safe or vulnerability-free; review findings on the trust report. GraphCanon does not certify DiffSinger as safe - review maintenance, provenance, and scan findings on this page before adopting.
Is DiffSinger a fork?
No. DiffSinger is not flagged as a fork in GitHub metadata at the time of the last refresh.
Does DiffSinger have known security vulnerabilities?
Last scanned today (deps profile). Status: 24 low - 24 low finding(s) in the latest scan. GraphCanon does not claim the project is safe or vulnerability-free; review findings on the trust report.
How often is the DiffSinger trust report updated?
Trust signals refresh on GitHub ingest/refresh cycles and optional dependency/MCP scans. This report was computed today (methodology github_public_v1).
What does GraphCanon never claim about DiffSinger?
We never publish a composite safety grade, pen-test endorsement, or "verified secure" label for DiffSinger. Signals are sourced heuristics with explicit limits - see trust methodology.
How does GraphCanon assess trust for DiffSinger?
Signals are sourced from public GitHub metadata and optional dependency/MCP manifest scans, each tagged with methodology version and computed date. GraphCanon does not publish a composite safety grade. Read trust methodology for full scope and limits.