Trust and health report
ARES - trust report
Sourced, dated trust signals - maintenance label posture, repository provenance, and security scan status. Not a composite safety grade.
GraphCanon updated today · GitHub synced today
Maintenance
Recency and activity heuristics from public GitHub metadata (maintenance label, momentum); methodology: github_public_v1.
Dormant18% signal
last push 470d ago
Provenance
Repository identity and fork provenance (github_public_v1).
- GitHub repo id: 697100198
- Not a fork
- Verified publisher: organization account
- Computed today
Security scan
Dependency advisory security scan when a lockfile is present. Not a full code audit.
- Status
- 154 low
- Last scan
- today
- Scanner
- osv@v1
Findings
GHSA-3749-ghw9-m3mg
torch@1.13.1 · requirements.txt
GHSA-53q9-r3pm-6pq6
torch@1.13.1 · requirements.txt
GHSA-5pcm-hx3q-hm94
torch@1.13.1 · requirements.txt
GHSA-887c-mr87-cxwp
torch@1.13.1 · requirements.txt
GHSA-c678-jfcj-6jmf
torch@1.13.1 · requirements.txt
GHSA-f4hp-rmr7-r7v8
torch@1.13.1 · requirements.txt
GHSA-pg7h-5qx3-wjr3
torch@1.13.1 · requirements.txt
GHSA-qfhq-4f3w-5fph
torch@1.13.1 · requirements.txt
GHSA-rrmf-rvhw-rf47
torch@1.13.1 · requirements.txt
GHSA-vgrw-7cvw-pwgx
torch@1.13.1 · requirements.txt
GHSA-x3gm-94wq-g975
torch@1.13.1 · requirements.txt
PYSEC-2024-250
torch@1.13.1 · requirements.txt
PYSEC-2024-251
torch@1.13.1 · requirements.txt
PYSEC-2024-252
torch@1.13.1 · requirements.txt
PYSEC-2024-259
torch@1.13.1 · requirements.txt
PYSEC-2025-191
torch@1.13.1 · requirements.txt
PYSEC-2025-198
torch@1.13.1 · requirements.txt
PYSEC-2025-203
torch@1.13.1 · requirements.txt
PYSEC-2025-204
torch@1.13.1 · requirements.txt
PYSEC-2025-205
torch@1.13.1 · requirements.txt
PYSEC-2025-206
torch@1.13.1 · requirements.txt
PYSEC-2025-207
torch@1.13.1 · requirements.txt
PYSEC-2025-208
torch@1.13.1 · requirements.txt
PYSEC-2025-209
torch@1.13.1 · requirements.txt
PYSEC-2025-41
torch@1.13.1 · requirements.txt
PYSEC-2026-139
torch@1.13.1 · requirements.txt
PYSEC-2026-1970
torch@1.13.1 · requirements.txt
GHSA-2fqr-mr3j-6wp8
aiohttp@3.9.4 · requirements.txt
GHSA-2vrm-gr82-f7m5
aiohttp@3.9.4 · requirements.txt
GHSA-3wq7-rqq7-wx6j
aiohttp@3.9.4 · requirements.txt
GHSA-4fvr-rgm6-gqmc
aiohttp@3.9.4 · requirements.txt
GHSA-4m7w-qmgq-4wj5
aiohttp@3.9.4 · requirements.txt
GHSA-54jq-c3m8-4m76
aiohttp@3.9.4 · requirements.txt
GHSA-63hf-3vf5-4wqf
aiohttp@3.9.4 · requirements.txt
GHSA-63hw-fmq6-xxg2
aiohttp@3.9.4 · requirements.txt
GHSA-69f9-5gxw-wvc2
aiohttp@3.9.4 · requirements.txt
GHSA-6jhg-hg63-jvvf
aiohttp@3.9.4 · requirements.txt
GHSA-6mq8-rvhq-8wgg
aiohttp@3.9.4 · requirements.txt
GHSA-8495-4g3g-x7pr
aiohttp@3.9.4 · requirements.txt
GHSA-9548-qrrj-x5pj
aiohttp@3.9.4 · requirements.txt
GHSA-966j-vmvw-g2g9
aiohttp@3.9.4 · requirements.txt
GHSA-9x8q-7h8h-wcw9
aiohttp@3.9.4 · requirements.txt
GHSA-c427-h43c-vf67
aiohttp@3.9.4 · requirements.txt
GHSA-fh55-r93g-j68g
aiohttp@3.9.4 · requirements.txt
GHSA-g3cq-j2xw-wf74
aiohttp@3.9.4 · requirements.txt
GHSA-g84x-mcqj-x9qq
aiohttp@3.9.4 · requirements.txt
GHSA-hcc4-c3v8-rx92
aiohttp@3.9.4 · requirements.txt
GHSA-hg6j-4rv6-33pg
aiohttp@3.9.4 · requirements.txt
GHSA-hpj7-wq8m-9hgp
aiohttp@3.9.4 · requirements.txt
GHSA-jg22-mg44-37j8
aiohttp@3.9.4 · requirements.txt
GHSA-jj3x-wxrx-4x23
aiohttp@3.9.4 · requirements.txt
GHSA-m5qp-6w8w-w647
aiohttp@3.9.4 · requirements.txt
GHSA-m6qw-4cw2-hm4m
aiohttp@3.9.4 · requirements.txt
GHSA-mqqc-3gqh-h2x8
aiohttp@3.9.4 · requirements.txt
GHSA-mwh4-6h8g-pg8w
aiohttp@3.9.4 · requirements.txt
GHSA-p998-jp59-783m
aiohttp@3.9.4 · requirements.txt
GHSA-w2fm-2cpv-w7v5
aiohttp@3.9.4 · requirements.txt
GHSA-xcgm-r5h9-7989
aiohttp@3.9.4 · requirements.txt
PYSEC-2026-1097
aiohttp@3.9.4 · requirements.txt
PYSEC-2026-1099
aiohttp@3.9.4 · requirements.txt
PYSEC-2026-1100
aiohttp@3.9.4 · requirements.txt
PYSEC-2026-1101
aiohttp@3.9.4 · requirements.txt
PYSEC-2026-1103
aiohttp@3.9.4 · requirements.txt
PYSEC-2026-1104
aiohttp@3.9.4 · requirements.txt
PYSEC-2026-1105
aiohttp@3.9.4 · requirements.txt
PYSEC-2026-1106
aiohttp@3.9.4 · requirements.txt
PYSEC-2026-1107
aiohttp@3.9.4 · requirements.txt
PYSEC-2026-1109
aiohttp@3.9.4 · requirements.txt
PYSEC-2026-237
aiohttp@3.9.4 · requirements.txt
GHSA-8rfp-98v4-mmr6
bleach@6.0.0 · requirements.txt
GHSA-gj48-438w-jh9v
bleach@6.0.0 · requirements.txt
GHSA-248v-346w-9cwc
certifi@2023.7.22 · requirements.txt
PYSEC-2024-230
certifi@2023.7.22 · requirements.txt
GHSA-qmgc-5h2g-mvrw
filelock@3.12.0 · requirements.txt
GHSA-w853-jp5j-5j7f
filelock@3.12.0 · requirements.txt
PYSEC-2026-1374
filelock@3.12.0 · requirements.txt
PYSEC-2026-1375
filelock@3.12.0 · requirements.txt
GHSA-68rp-wp8r-4726
Flask@2.3.2 · requirements.txt
GHSA-768j-98cg-p3fv
fonttools@4.43.0 · requirements.txt
PYSEC-2026-1389
fonttools@4.43.0 · requirements.txt
GHSA-7545-fcxq-7j24
GitPython@3.1.41 · requirements.txt
GHSA-mv93-w799-cj2w
GitPython@3.1.41 · requirements.txt
GHSA-rpm5-65cw-6hj4
GitPython@3.1.41 · requirements.txt
GHSA-v87r-6q3f-2j67
GitPython@3.1.41 · requirements.txt
GHSA-x2qx-6953-8485
GitPython@3.1.41 · requirements.txt
GHSA-cpwx-vrp4-4pq7
Jinja2@3.1.4 · requirements.txt
GHSA-gmj6-6f8f-6699
Jinja2@3.1.4 · requirements.txt
GHSA-q2x7-8rv6-6q7h
Jinja2@3.1.4 · requirements.txt
PYSEC-2026-1471
Jinja2@3.1.4 · requirements.txt
PYSEC-2026-1472
Jinja2@3.1.4 · requirements.txt
PYSEC-2026-1475
Jinja2@3.1.4 · requirements.txt
GHSA-33p9-3p43-82vq
jupyter-core@5.3.0 · requirements.txt
PYSEC-2026-1477
jupyter-core@5.3.0 · requirements.txt
GHSA-24qx-w28j-9m6p
jupyter-server@2.11.2 · requirements.txt
GHSA-5789-5fc7-67v3
jupyter-server@2.11.2 · requirements.txt
GHSA-5mrq-x3x5-8v8f
jupyter-server@2.11.2 · requirements.txt
GHSA-fcw5-x6j4-ccmp
jupyter-server@2.11.2 · requirements.txt
GHSA-gf7q-q4j7-hp7c
jupyter-server@2.11.2 · requirements.txt
GHSA-hrw6-wg82-cm62
jupyter-server@2.11.2 · requirements.txt
GHSA-qh7q-6qm3-653w
jupyter-server@2.11.2 · requirements.txt
PYSEC-2024-165
jupyter-server@2.11.2 · requirements.txt
PYSEC-2026-366
jupyter-server@2.11.2 · requirements.txt
PYSEC-2026-67
jupyter-server@2.11.2 · requirements.txt
PYSEC-2026-68
jupyter-server@2.11.2 · requirements.txt
PYSEC-2026-69
jupyter-server@2.11.2 · requirements.txt
GHSA-37w4-hwhx-4rc4
jupyterlab@4.0.11 · requirements.txt
GHSA-9q39-rmj3-p4r2
jupyterlab@4.0.11 · requirements.txt
GHSA-mqcg-5x36-vfcg
jupyterlab@4.0.11 · requirements.txt
GHSA-rch3-82jr-f9w9
jupyterlab@4.0.11 · requirements.txt
GHSA-vmhf-c436-hxj4
jupyterlab@4.0.11 · requirements.txt
GHSA-vvfj-2jqx-52jm
jupyterlab@4.0.11 · requirements.txt
PYSEC-2026-1482
jupyterlab@4.0.11 · requirements.txt
PYSEC-2026-164
jupyterlab@4.0.11 · requirements.txt
GHSA-3644-q5cj-c5c7
langchain@0.1.0 · requirements.txt
GHSA-3hjh-jh2h-vrg6
langchain@0.1.0 · requirements.txt
GHSA-45pg-36p6-83v9
langchain@0.1.0 · requirements.txt
GHSA-gr75-jv2w-4656
langchain@0.1.0 · requirements.txt
PYSEC-2024-118
langchain@0.1.0 · requirements.txt
PYSEC-2024-43
langchain@0.1.0 · requirements.txt
PYSEC-2026-1507
langchain@0.1.0 · requirements.txt
GHSA-2586-f3p4-hq84
lightgbm@3.3.5 · requirements.txt
PYSEC-2024-231
lightgbm@3.3.5 · requirements.txt
GHSA-vfmq-68hx-4jfw
lxml@4.9.2 · requirements.txt
PYSEC-2026-87
lxml@4.9.2 · requirements.txt
GHSA-428g-f7cq-pgp5
marshmallow@3.19.0 · requirements.txt
PYSEC-2026-1605
marshmallow@3.19.0 · requirements.txt
GHSA-58cw-g322-p94v
mistune@2.0.5 · requirements.txt
GHSA-8g87-j6q8-g93x
mistune@2.0.5 · requirements.txt
GHSA-qcq2-496w-v96p
mistune@2.0.5 · requirements.txt
GHSA-v87v-83h2-53w7
mistune@2.0.5 · requirements.txt
PYSEC-2026-168
mistune@2.0.5 · requirements.txt
GHSA-4c99-qj7h-p3vg
nbconvert@7.4.0 · requirements.txt
GHSA-7jqv-fw35-gmx9
nbconvert@7.4.0 · requirements.txt
GHSA-xm59-rqc7-hhvf
nbconvert@7.4.0 · requirements.txt
PYSEC-2026-1691
nbconvert@7.4.0 · requirements.txt
GHSA-469j-vmhf-r6v7
nltk@3.8.1 · requirements.txt
GHSA-68j8-pq59-fqgm
nltk@3.8.1 · requirements.txt
GHSA-7p94-766c-hgjp
nltk@3.8.1 · requirements.txt
GHSA-cgvx-9447-vcch
nltk@3.8.1 · requirements.txt
GHSA-gfwx-w7gr-fvh7
nltk@3.8.1 · requirements.txt
GHSA-h8wq-7xc4-p3qx
nltk@3.8.1 · requirements.txt
GHSA-jm6w-m3j8-898g
nltk@3.8.1 · requirements.txt
GHSA-p4gq-832x-fm9v
nltk@3.8.1 · requirements.txt
GHSA-rf74-v2fm-23pw
nltk@3.8.1 · requirements.txt
PYSEC-2024-167
nltk@3.8.1 · requirements.txt
PYSEC-2026-2078
nltk@3.8.1 · requirements.txt
PYSEC-2026-2085
nltk@3.8.1 · requirements.txt
PYSEC-2026-597
nltk@3.8.1 · requirements.txt
PYSEC-2026-96
nltk@3.8.1 · requirements.txt
PYSEC-2026-97
nltk@3.8.1 · requirements.txt
PYSEC-2026-98
nltk@3.8.1 · requirements.txt
PYSEC-2026-99
nltk@3.8.1 · requirements.txt
GHSA-f73w-4m7g-ch9x
numexpr@2.8.4 · requirements.txt
PYSEC-2023-163
numexpr@2.8.4 · requirements.txt
Method and caveats:these are sourced, dated heuristics from public GitHub data and optional dependency scans. A status like "no criticals found on 2026-07-11" is not a guarantee of safety. Read the full trust methodology · JSON report at /api/graphcanon/tools/stanford-futuredata-ares/trust.
Common questions
- Is ARES maintained?
- GraphCanon rates ARES "Dormant" (18% maintenance signal from public GitHub metadata, computed today). Last push was 470 days ago. This is a recency heuristic, not a guarantee the project will stay maintained.
- Is ARES safe to use?
- Last scanned today (deps profile). Status: 154 low - 154 low finding(s) in the latest scan. GraphCanon does not claim the project is safe or vulnerability-free; review findings on the trust report. GraphCanon does not certify ARES as safe - review maintenance, provenance, and scan findings on this page before adopting.
- Is ARES a fork?
- No. ARES is not flagged as a fork in GitHub metadata at the time of the last refresh.
- Does ARES have known security vulnerabilities?
- Last scanned today (deps profile). Status: 154 low - 154 low finding(s) in the latest scan. GraphCanon does not claim the project is safe or vulnerability-free; review findings on the trust report.
- How often is the ARES trust report updated?
- Trust signals refresh on GitHub ingest/refresh cycles and optional dependency/MCP scans. This report was computed today (methodology github_public_v1).
- What does GraphCanon never claim about ARES?
- We never publish a composite safety grade, pen-test endorsement, or "verified secure" label for ARES. Signals are sourced heuristics with explicit limits - see trust methodology.
- How does GraphCanon assess trust for ARES?
- Signals are sourced from public GitHub metadata and optional dependency/MCP manifest scans, each tagged with methodology version and computed date. GraphCanon does not publish a composite safety grade. Read trust methodology for full scope and limits.