Home/PageIndex/Trust report

Trust and health report

PageIndex - trust report

Sourced, dated trust signals - maintenance label posture, repository provenance, and security scan status. Not a composite safety grade.

GraphCanon updated Sep 20, 2026 · GitHub synced Sep 20, 2026

44views this month

Maintenance

Recency and activity heuristics from public GitHub metadata (maintenance label, momentum); methodology: github_public_v1.

Very active96% signal

last push 0d ago · last release Sep 16, 2026 · 16 releases (90d)

+501 stars (30d) · -52 open issues (30d)

Provenance

Repository identity and fork provenance (github_public_v1).

  • GitHub repo id: 958531089
  • Not a fork
  • Verified publisher: organization account
  • Computed Sep 18, 2026

Security intelligence

Source-by-source security scan results from public intelligence providers. Missing, partial, or failed queries are shown explicitly and are not treated as clean.

OSV dependency advisories

Published findings
Last query
Sep 18, 2026
Scanner
osv@v1
Stored findings
36
View source evidence

deps.dev advisories

Not queried
Scanner
deps.dev@v1
View source evidence

OpenSSF Scorecard

Not queried
Scanner
openssf-scorecard@v1

Weekly public scans omit some checks at scale.

View source evidence

Dependency advisories (deduplicated)

GHSA-9hjg-9r4m-mvj7
requests@2.28.0 · osv@v1
requirements.txt
GHSA-9wx4-h78v-vm56
requests@2.28.0 · osv@v1
requirements.txt
GHSA-gc5v-m9x4-r6x2
requests@2.28.0 · osv@v1
requirements.txt
GHSA-j8r2-6x86-q33q
requests@2.28.0 · osv@v1
requirements.txt
PYSEC-2023-74
requests@2.28.0 · osv@v1
requirements.txt
PYSEC-2026-1872
requests@2.28.0 · osv@v1
requirements.txt
PYSEC-2026-1873
requests@2.28.0 · osv@v1
requirements.txt
PYSEC-2026-2275
requests@2.28.0 · osv@v1
requirements.txt
GHSA-2xpw-w6gg-jr37
urllib3@1.26 · osv@v1
requirements.txt
GHSA-34jh-p97f-mpxf
urllib3@1.26 · osv@v1
requirements.txt
GHSA-38jv-5279-wg99
urllib3@1.26 · osv@v1
requirements.txt
GHSA-5phf-pp7p-vc2r
urllib3@1.26 · osv@v1
requirements.txt
GHSA-g4mx-q9vg-27p4
urllib3@1.26 · osv@v1
requirements.txt
GHSA-gm62-xv2j-4w53
urllib3@1.26 · osv@v1
requirements.txt
GHSA-pq67-6m6q-mj2v
urllib3@1.26 · osv@v1
requirements.txt
GHSA-q2q7-5pp4-w6pg
urllib3@1.26 · osv@v1
requirements.txt
GHSA-qccp-gfcp-xxvc
urllib3@1.26 · osv@v1
requirements.txt
GHSA-v845-jxx5-vc9f
urllib3@1.26 · osv@v1
requirements.txt
PYSEC-2021-108
urllib3@1.26 · osv@v1
requirements.txt
PYSEC-2021-59
urllib3@1.26 · osv@v1
requirements.txt
PYSEC-2023-192
urllib3@1.26 · osv@v1
requirements.txt
PYSEC-2023-212
urllib3@1.26 · osv@v1
requirements.txt
PYSEC-2026-141
urllib3@1.26 · osv@v1
requirements.txt
PYSEC-2026-1994
urllib3@1.26 · osv@v1
requirements.txt
PYSEC-2026-1995
urllib3@1.26 · osv@v1
requirements.txt
PYSEC-2026-1996
urllib3@1.26 · osv@v1
requirements.txt
PYSEC-2026-1998
urllib3@1.26 · osv@v1
requirements.txt
PYSEC-2026-1999
urllib3@1.26 · osv@v1
requirements.txt
GHSA-9h52-p55h-vw2f
mcp@1.19.0 · osv@v1
requirements.txt
GHSA-jpw9-pfvf-9f58
mcp@1.19.0 · osv@v1
requirements.txt
GHSA-vj7q-gjh5-988w
mcp@1.19.0 · osv@v1
requirements.txt
PYSEC-2026-1617
mcp@1.19.0 · osv@v1
requirements.txt
PYSEC-2026-3482
mcp@1.19.0 · osv@v1
requirements.txt
PYSEC-2026-3483
mcp@1.19.0 · osv@v1
requirements.txt
GHSA-4vvm-4w3v-6mr8
PyPDF2@3.0.1 · osv@v1
requirements.txt
PYSEC-2026-1835
PyPDF2@3.0.1 · osv@v1
requirements.txt

Method and caveats: these are sourced, dated heuristics from public GitHub data and external security intelligence providers. A status like "no published findings from this source" is not a guarantee of safety. Read the full trust methodology · JSON report at /api/graphcanon/tools/vectifyai-pageindex/trust.

Common questions

Is PageIndex maintained?
GraphCanon rates PageIndex "Very active" (96% maintenance signal from public GitHub metadata, computed Sep 18, 2026). Last push was 0 days ago. 16 GitHub releases in the last 90 days. This is a recency heuristic, not a guarantee the project will stay maintained.
Is PageIndex safe to use?
Last scanned Sep 18, 2026 (deps profile). Status: 36 low - 36 low finding(s) in the latest scan. GraphCanon does not claim the project is safe or vulnerability-free; review findings on the trust report. GraphCanon does not certify PageIndex as safe - review maintenance, provenance, and scan findings on this page before adopting.
Is PageIndex a fork?
No. PageIndex is not flagged as a fork in GitHub metadata at the time of the last refresh.
Does PageIndex have known security vulnerabilities?
Last scanned Sep 18, 2026 (deps profile). Status: 36 low - 36 low finding(s) in the latest scan. GraphCanon does not claim the project is safe or vulnerability-free; review findings on the trust report.
How often is the PageIndex trust report updated?
Trust signals refresh on GitHub ingest/refresh cycles and optional dependency/MCP scans. This report was computed Sep 18, 2026 (methodology github_public_v1).
What does GraphCanon never claim about PageIndex?
We never publish a composite safety grade, pen-test endorsement, or "verified secure" label for PageIndex. Signals are sourced heuristics with explicit limits - see trust methodology.
How does GraphCanon assess trust for PageIndex?
Signals are sourced from public GitHub metadata and optional dependency/MCP manifest scans, each tagged with methodology version and computed date. GraphCanon does not publish a composite safety grade. Read trust methodology for full scope and limits.

Was this helpful?

Anonymous feedback helps us improve pages and translations.