Is beehive maintained?

GraphCanon rates beehive "Dormant" (18% maintenance signal from public GitHub metadata, computed today). Last push was 1236 days ago. This is a recency heuristic, not a guarantee the project will stay maintained.

Is beehive safe to use?

Last scanned today (deps profile). Status: 132 low - 132 low finding(s) in the latest scan. GraphCanon does not claim the project is safe or vulnerability-free; review findings on the trust report. GraphCanon does not certify beehive as safe - review maintenance, provenance, and scan findings on this page before adopting.

No. beehive is not flagged as a fork in GitHub metadata at the time of the last refresh.

Does beehive have known security vulnerabilities?

Last scanned today (deps profile). Status: 132 low - 132 low finding(s) in the latest scan. GraphCanon does not claim the project is safe or vulnerability-free; review findings on the trust report.

How often is the beehive trust report updated?

Trust signals refresh on GitHub ingest/refresh cycles and optional dependency/MCP scans. This report was computed today (methodology github_public_v1).

What does GraphCanon never claim about beehive?

We never publish a composite safety grade, pen-test endorsement, or "verified secure" label for beehive. Signals are sourced heuristics with explicit limits - see trust methodology (https://www.graphcanon.com/trust-methodology).

How does GraphCanon assess trust for beehive?

Signals are sourced from public GitHub metadata and optional dependency/MCP manifest scans, each tagged with methodology version and computed date. GraphCanon does not publish a composite safety grade. Read trust methodology (https://www.graphcanon.com/trust-methodology) for full scope and limits.

Home/beehive/Trust report

Trust and health report

beehive - trust report

Sourced, dated trust signals - maintenance label posture, repository provenance, and security scan status. Not a composite safety grade.

GraphCanon updated today · GitHub synced today

Maintenance

Recency and activity heuristics from public GitHub metadata (maintenance label, momentum); methodology: github_public_v1.

Dormant18% signal

last push 1236d ago · last release 6y

Provenance

Repository identity and fork provenance (github_public_v1).

GitHub repo id: 21141781
Not a fork
Personal account
Computed today

Security intelligence

Source-by-source security scan results from public intelligence providers. Missing, partial, or failed queries are shown explicitly and are not treated as clean.

OSV dependency advisories

Published findings

Last query: today
Scanner: osv@v1
Stored findings: 132

View source evidence

deps.dev advisories

Not queried

Scanner: deps.dev@v1

View source evidence

OpenSSF Scorecard

Not queried

Scanner: openssf-scorecard@v1

Weekly public scans omit some checks at scale.

View source evidence

Dependency advisories (deduplicated)

GHSA-w73w-5m7g-f7qc

github.com/dgrijalva/jwt-go@v3.2.0+incompatible · osv@v1

go.sum

GO-2020-0017

github.com/dgrijalva/jwt-go@v3.2.0+incompatible · osv@v1

go.sum

GHSA-r48q-9g5r-8q2h

github.com/emicklei/go-restful@v2.9.3+incompatible · osv@v1

go.sum

GO-2022-0619

github.com/emicklei/go-restful@v2.9.3+incompatible · osv@v1

go.sum

GHSA-3xh2-74w9-5vxm

github.com/gorilla/websocket@v1.4.0 · osv@v1

go.sum

GO-2020-0019

github.com/gorilla/websocket@v1.4.0 · osv@v1

go.sum

GO-2024-2882

github.com/huandu/facebook@v2.3.1+incompatible · osv@v1

go.sum

GHSA-cg3q-j54f-5p7p

github.com/prometheus/client_golang@v0.9.2 · osv@v1

go.sum

GO-2022-0322

github.com/prometheus/client_golang@v0.9.2 · osv@v1

go.sum

GHSA-4f99-4q7p-p3gh

github.com/sirupsen/logrus@v1.4.1 · osv@v1

go.sum

GO-2025-4188

github.com/sirupsen/logrus@v1.4.1 · osv@v1

go.sum

GHSA-3vm4-22fp-5rfm