Skip to content

Update requirements.txt #9

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 1 commit into from
Closed

Update requirements.txt #9

wants to merge 1 commit into from

Conversation

ethomson
Copy link
Owner

No description provided.

@stacklok-cloud
Copy link

Minder Vulnerability Report ✅

Minder analyzed this PR and found no vulnerable dependencies.

Vulnerability scan of 82d1eba7:

  • 🐞 vulnerable packages: 0
  • 🛠 fixes available for: 0

1 similar comment
@ghost
Copy link

ghost commented May 30, 2024

Minder Vulnerability Report ✅

Minder analyzed this PR and found no vulnerable dependencies.

Vulnerability scan of 82d1eba7:

  • 🐞 vulnerable packages: 0
  • 🛠 fixes available for: 0

@stacklok-cloud
Copy link

Dependency Information

Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.

📦 Dependency: python-oauth2

⚠️ Archived Package: This package is marked as deprecated. Proceed with caution!

Trusty Score: 4.6

Scoring details
Component Score
Malicious false
User activity 5.8
Repository activity 3.3
From activity
Package activity 4.6
Provenance 8
Proof of Origin (Provenance)

This package can be linked back to its source code using a historical provenance map.

We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.

Published package versions 13
Number of git tags or releases 13
Versions matched to tags or releases 13
Alternatives
Package Score Description
oauthlib 7.8

@ghost
Copy link

ghost commented May 30, 2024

Dependency Information

Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.

📦 Dependency: python-oauth2

⚠️ Archived Package: This package is marked as deprecated. Proceed with caution!

Trusty Score: 4.6

Scoring details
Component Score
Repository activity 3.3
From activity
Package activity 4.6
Provenance 8
Malicious false
User activity 5.8
Proof of Origin (Provenance)

This package can be linked back to its source code using a historical provenance map.

We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.

Published package versions 13
Number of git tags or releases 13
Versions matched to tags or releases 13
Alternatives
Package Score Description
django-oauth-toolkit 7.8
authlib 5

@ethomson ethomson closed this Oct 28, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant