Skip to content

Conversation

@ethomson
Copy link
Owner

No description provided.

@ghost
Copy link

ghost commented Jun 12, 2024

Minder Vulnerability Report ✅

Minder analyzed this PR and found no vulnerable dependencies.

Vulnerability scan of 3e0a41f7:

  • 🐞 vulnerable packages: 0
  • 🛠 fixes available for: 0

@ghost
Copy link

ghost commented Jun 12, 2024

Dependency Information

Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.

📦 Dependency: python-oauth2

⚠️ Archived Package: This package is marked as deprecated. Proceed with caution!

Trusty Score: 4.6

Scoring details
Component Score
User activity 5.8
Repository activity 3.3
From activity
Package activity 4.6
Provenance 8
Trust-summary 4.7
Malicious false
Proof of Origin (Provenance)

This package can be linked back to its source code using a historical provenance map.

We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.

Published package versions 13
Number of git tags or releases 13
Versions matched to tags or releases 13
Alternatives
Package Score Description
oauthlib 7.8

@ethomson ethomson closed this Oct 28, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants