Home/Voice-Cloning-App/Trust report

Trust and health report

Voice-Cloning-App - trust report

Sourced, dated trust signals - maintenance label posture, repository provenance, and security scan status. Not a composite safety grade.

GraphCanon updated 3w · GitHub synced 3w · 30 views this month

Maintenance

Recency and activity heuristics from public GitHub metadata (maintenance label, momentum); methodology: github_public_v1.

Dormant18% signal

last push 604d ago · last release 4y

Provenance

Repository identity and fork provenance (github_public_v1).

Security intelligence

Source-by-source security scan results from public intelligence providers. Missing, partial, or failed queries are shown explicitly and are not treated as clean.

OSV dependency advisories

Published findings
Last query
1mo
Scanner
osv@v1
Stored findings
92
View source evidence

deps.dev advisories

Not queried
Scanner
deps.dev@v1
View source evidence

OpenSSF Scorecard

Not queried
Scanner
openssf-scorecard@v1

Weekly public scans omit some checks at scale.

View source evidence

Dependency advisories (deduplicated)

GHSA-5545-2q6w-2gh6
numpy@1.14 · osv@v1
requirements.txt
GHSA-6p56-wp2h-9hxr
numpy@1.14 · osv@v1
requirements.txt
GHSA-9fq2-x9r6-wfmf
numpy@1.14 · osv@v1
requirements.txt
GHSA-f7c7-j99h-c22f
numpy@1.14 · osv@v1
requirements.txt
GHSA-fpfv-jqm9-f5jm
numpy@1.14 · osv@v1
requirements.txt
PYSEC-2019-108
numpy@1.14 · osv@v1
requirements.txt
PYSEC-2021-856
numpy@1.14 · osv@v1
requirements.txt
PYSEC-2021-857
numpy@1.14 · osv@v1
requirements.txt
GHSA-68rp-wp8r-4726
Flask@1.1.2 · osv@v1
requirements.txt
GHSA-m2qf-hxjv-5gpq
Flask@1.1.2 · osv@v1
requirements.txt
PYSEC-2023-62
Flask@1.1.2 · osv@v1
requirements.txt
GHSA-9hjg-9r4m-mvj7
requests@2.25.1 · osv@v1
requirements.txt
GHSA-9wx4-h78v-vm56
requests@2.25.1 · osv@v1
requirements.txt
GHSA-gc5v-m9x4-r6x2
requests@2.25.1 · osv@v1
requirements.txt
GHSA-j8r2-6x86-q33q
requests@2.25.1 · osv@v1
requirements.txt
PYSEC-2023-74
requests@2.25.1 · osv@v1
requirements.txt
PYSEC-2026-1872
requests@2.25.1 · osv@v1
requirements.txt
PYSEC-2026-1873
requests@2.25.1 · osv@v1
requirements.txt
GHSA-3749-ghw9-m3mg
torch@1.9.0+cu111 · osv@v1
requirements.txt
GHSA-47fc-vmwq-366v
torch@1.9.0+cu111 · osv@v1
requirements.txt
GHSA-53q9-r3pm-6pq6
torch@1.9.0+cu111 · osv@v1
requirements.txt
GHSA-5pcm-hx3q-hm94
torch@1.9.0+cu111 · osv@v1
requirements.txt
GHSA-887c-mr87-cxwp
torch@1.9.0+cu111 · osv@v1
requirements.txt
GHSA-c678-jfcj-6jmf
torch@1.9.0+cu111 · osv@v1
requirements.txt
GHSA-f4hp-rmr7-r7v8
torch@1.9.0+cu111 · osv@v1
requirements.txt
GHSA-pg7h-5qx3-wjr3
torch@1.9.0+cu111 · osv@v1
requirements.txt
GHSA-qfhq-4f3w-5fph
torch@1.9.0+cu111 · osv@v1
requirements.txt
GHSA-rrmf-rvhw-rf47
torch@1.9.0+cu111 · osv@v1
requirements.txt
GHSA-vgrw-7cvw-pwgx
torch@1.9.0+cu111 · osv@v1
requirements.txt
GHSA-x3gm-94wq-g975
torch@1.9.0+cu111 · osv@v1
requirements.txt
PYSEC-2022-43015
torch@1.9.0+cu111 · osv@v1
requirements.txt
PYSEC-2024-250
torch@1.9.0+cu111 · osv@v1
requirements.txt
PYSEC-2024-251
torch@1.9.0+cu111 · osv@v1
requirements.txt
PYSEC-2024-252
torch@1.9.0+cu111 · osv@v1
requirements.txt
PYSEC-2024-259
torch@1.9.0+cu111 · osv@v1
requirements.txt
PYSEC-2025-191
torch@1.9.0+cu111 · osv@v1
requirements.txt
PYSEC-2025-198
torch@1.9.0+cu111 · osv@v1
requirements.txt
PYSEC-2025-203
torch@1.9.0+cu111 · osv@v1
requirements.txt
PYSEC-2025-204
torch@1.9.0+cu111 · osv@v1
requirements.txt
PYSEC-2025-205
torch@1.9.0+cu111 · osv@v1
requirements.txt
PYSEC-2025-206
torch@1.9.0+cu111 · osv@v1
requirements.txt
PYSEC-2025-207
torch@1.9.0+cu111 · osv@v1
requirements.txt
PYSEC-2025-208
torch@1.9.0+cu111 · osv@v1
requirements.txt
PYSEC-2025-209
torch@1.9.0+cu111 · osv@v1
requirements.txt
PYSEC-2025-41
torch@1.9.0+cu111 · osv@v1
requirements.txt
PYSEC-2026-139
torch@1.9.0+cu111 · osv@v1
requirements.txt
PYSEC-2026-1970
torch@1.9.0+cu111 · osv@v1
requirements.txt
GHSA-2ww3-fxvq-293j
nltk@3.6.2 · osv@v1
requirements.txt
GHSA-469j-vmhf-r6v7
nltk@3.6.2 · osv@v1
requirements.txt
GHSA-68j8-pq59-fqgm
nltk@3.6.2 · osv@v1
requirements.txt
GHSA-7p94-766c-hgjp
nltk@3.6.2 · osv@v1
requirements.txt
GHSA-cgvx-9447-vcch
nltk@3.6.2 · osv@v1
requirements.txt
GHSA-f8m6-h2c7-8h9x
nltk@3.6.2 · osv@v1
requirements.txt
GHSA-gfwx-w7gr-fvh7
nltk@3.6.2 · osv@v1
requirements.txt
GHSA-h8wq-7xc4-p3qx
nltk@3.6.2 · osv@v1
requirements.txt
GHSA-jm6w-m3j8-898g
nltk@3.6.2 · osv@v1
requirements.txt
GHSA-p4gq-832x-fm9v
nltk@3.6.2 · osv@v1
requirements.txt
GHSA-rf74-v2fm-23pw
nltk@3.6.2 · osv@v1
requirements.txt
GHSA-rqjh-jp2r-59cj
nltk@3.6.2 · osv@v1
requirements.txt
PYSEC-2021-356
nltk@3.6.2 · osv@v1
requirements.txt
PYSEC-2021-859
nltk@3.6.2 · osv@v1
requirements.txt
PYSEC-2022-5
nltk@3.6.2 · osv@v1
requirements.txt
PYSEC-2024-167
nltk@3.6.2 · osv@v1
requirements.txt
PYSEC-2026-2078
nltk@3.6.2 · osv@v1
requirements.txt
PYSEC-2026-2085
nltk@3.6.2 · osv@v1
requirements.txt
PYSEC-2026-597
nltk@3.6.2 · osv@v1
requirements.txt
PYSEC-2026-96
nltk@3.6.2 · osv@v1
requirements.txt
PYSEC-2026-97
nltk@3.6.2 · osv@v1
requirements.txt
PYSEC-2026-98
nltk@3.6.2 · osv@v1
requirements.txt
PYSEC-2026-99
nltk@3.6.2 · osv@v1
requirements.txt
GHSA-29vq-49wr-vm6x
werkzeug@2.0.3 · osv@v1
requirements.txt
GHSA-2g68-c3qc-8985
werkzeug@2.0.3 · osv@v1
requirements.txt
GHSA-87hc-h4r5-73f7
werkzeug@2.0.3 · osv@v1
requirements.txt
GHSA-f9vj-2wh5-fj8j
werkzeug@2.0.3 · osv@v1
requirements.txt
GHSA-hgf8-39gv-g3f2
werkzeug@2.0.3 · osv@v1
requirements.txt
GHSA-hrfv-mqp8-q5rw
werkzeug@2.0.3 · osv@v1
requirements.txt
GHSA-px8h-6qxv-m22q
werkzeug@2.0.3 · osv@v1
requirements.txt
GHSA-q34m-jh98-gwm2
werkzeug@2.0.3 · osv@v1
requirements.txt
GHSA-xg9f-g7g7-2323
werkzeug@2.0.3 · osv@v1
requirements.txt
PYSEC-2022-203
werkzeug@2.0.3 · osv@v1
requirements.txt
PYSEC-2023-221
werkzeug@2.0.3 · osv@v1
requirements.txt
PYSEC-2023-57
werkzeug@2.0.3 · osv@v1
requirements.txt
PYSEC-2023-58
werkzeug@2.0.3 · osv@v1
requirements.txt
PYSEC-2026-2043
werkzeug@2.0.3 · osv@v1
requirements.txt
PYSEC-2026-2044
werkzeug@2.0.3 · osv@v1
requirements.txt
PYSEC-2026-2045
werkzeug@2.0.3 · osv@v1
requirements.txt
PYSEC-2026-2046
werkzeug@2.0.3 · osv@v1
requirements.txt
GHSA-6hrg-qmvc-2xh8
joblib@1.1.0 · osv@v1
requirements.txt
PYSEC-2022-288
joblib@1.1.0 · osv@v1
requirements.txt
GHSA-5w7q-77mv-v69f
python-socketio@5.5.0 · osv@v1
requirements.txt
GHSA-g8c6-8fjj-2r4m
python-socketio@5.5.0 · osv@v1
requirements.txt
PYSEC-2026-1854
python-socketio@5.5.0 · osv@v1
requirements.txt

Method and caveats: these are sourced, dated heuristics from public GitHub data and external security intelligence providers. A status like "no published findings from this source" is not a guarantee of safety. Read the full trust methodology · JSON report at /api/graphcanon/tools/voice-cloning-app-voice-cloning-app/trust.

Common questions

Is Voice-Cloning-App maintained?
GraphCanon rates Voice-Cloning-App "Dormant" (18% maintenance signal from public GitHub metadata, computed 3w). Last push was 604 days ago. This is a recency heuristic, not a guarantee the project will stay maintained.
Is Voice-Cloning-App safe to use?
Last scanned 1mo (deps profile). Status: 92 low - 92 low finding(s) in the latest scan. GraphCanon does not claim the project is safe or vulnerability-free; review findings on the trust report. GraphCanon does not certify Voice-Cloning-App as safe - review maintenance, provenance, and scan findings on this page before adopting.
Is Voice-Cloning-App a fork?
No. Voice-Cloning-App is not flagged as a fork in GitHub metadata at the time of the last refresh.
Does Voice-Cloning-App have known security vulnerabilities?
Last scanned 1mo (deps profile). Status: 92 low - 92 low finding(s) in the latest scan. GraphCanon does not claim the project is safe or vulnerability-free; review findings on the trust report.
How often is the Voice-Cloning-App trust report updated?
Trust signals refresh on GitHub ingest/refresh cycles and optional dependency/MCP scans. This report was computed 3w (methodology github_public_v1).
What does GraphCanon never claim about Voice-Cloning-App?
We never publish a composite safety grade, pen-test endorsement, or "verified secure" label for Voice-Cloning-App. Signals are sourced heuristics with explicit limits - see trust methodology.
How does GraphCanon assess trust for Voice-Cloning-App?
Signals are sourced from public GitHub metadata and optional dependency/MCP manifest scans, each tagged with methodology version and computed date. GraphCanon does not publish a composite safety grade. Read trust methodology for full scope and limits.

Was this helpful?

Anonymous feedback helps us improve pages and translations.