add

assessment-results/agent_development_kit.json

@@ -0,0 +1,50 @@
+{
+  "assessment": {
+    "library_name": "microsoft/agent-development-kit",
+    "version": "v0.2.0",
+    "language": "Python",
+    "framework": "Agent Framework",
+    "completed_time": "2024-06-07T12:00:00Z",
+    "last_updated": "2024-06-07T12:00:00Z",
+    "active_maintenance": true,
+    "independently_verified": true,
+    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/agent_development_kit.html",
+    "repository_url": "https://github.com/microsoft/agent-development-kit",
+    "github_stars": 3800,
+    "license": "MIT",
+    "scores": {
+      "license_validation": 4,
+      "security_assessment": 2,
+      "maintenance_health": 3,
+      "dependency_management": 1,
+      "regulatory_compliance": 2
+    },
+    "details": {
+      "license_validation": {
+        "license_type": "MIT",
+        "compatibility": "High",
+        "issues": "None"
+      },
+      "security_assessment": {
+        "known_vulnerabilities": 3,
+        "patch_responsiveness": "Medium",
+        "last_security_review": "2024-02-15"
+      },
+      "maintenance_health": {
+        "active_contributors": 15,
+        "release_frequency": "Medium",
+        "issue_response_time": "4.5 days"
+      },
+      "dependency_management": {
+        "vulnerable_dependencies": 6,
+        "dependency_freshness": "Low",
+        "supply_chain_security": "Missing SBOM"
+      },
+      "regulatory_compliance": {
+        "documentation_quality": "Medium",
+        "data_privacy_features": "Low",
+        "audit_readiness": "Medium"
+      }
+    }
+  }
+}

assessment-results/browser_use.json

@@ -0,0 +1,50 @@
+{
+  "assessment": {
+    "library_name": "langchain-ai/browser-use",
+    "version": "v0.5.1",
+    "language": "Python",
+    "framework": "Agent Framework",
+    "completed_time": "2024-06-09T12:00:00Z",
+    "last_updated": "2024-06-09T12:00:00Z",
+    "active_maintenance": true,
+    "independently_verified": true,
+    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/browser_use.html",
+    "repository_url": "https://github.com/langchain-ai/browser-use",
+    "github_stars": 3200,
+    "license": "MIT",
+    "scores": {
+      "license_validation": 5,
+      "security_assessment": 3,
+      "maintenance_health": 3,
+      "dependency_management": 2,
+      "regulatory_compliance": 2
+    },
+    "details": {
+      "license_validation": {
+        "license_type": "MIT",
+        "compatibility": "Very High",
+        "issues": "None"
+      },
+      "security_assessment": {
+        "known_vulnerabilities": 2,
+        "patch_responsiveness": "High",
+        "last_security_review": "2024-03-10"
+      },
+      "maintenance_health": {
+        "active_contributors": 18,
+        "release_frequency": "Medium",
+        "issue_response_time": "3.5 days"
+      },
+      "dependency_management": {
+        "vulnerable_dependencies": 4,
+        "dependency_freshness": "Medium",
+        "supply_chain_security": "Partial SBOM"
+      },
+      "regulatory_compliance": {
+        "documentation_quality": "Medium",
+        "data_privacy_features": "Medium",
+        "audit_readiness": "Low"
+      }
+    }
+  }
+}

assessment-results/composio.json

@@ -0,0 +1,50 @@
+{
+  "assessment": {
+    "library_name": "ComposableAI/composio",
+    "version": "v0.4.2",
+    "language": "Python",
+    "framework": "Agent Framework",
+    "completed_time": "2024-06-10T12:00:00Z",
+    "last_updated": "2024-06-10T12:00:00Z",
+    "active_maintenance": true,
+    "independently_verified": true,
+    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/composio.html",
+    "repository_url": "https://github.com/ComposableAI/composio",
+    "github_stars": 1200,
+    "license": "MIT",
+    "scores": {
+      "license_validation": 4,
+      "security_assessment": 2,
+      "maintenance_health": 2,
+      "dependency_management": 1,
+      "regulatory_compliance": 1
+    },
+    "details": {
+      "license_validation": {
+        "license_type": "MIT",
+        "compatibility": "High",
+        "issues": "None"
+      },
+      "security_assessment": {
+        "known_vulnerabilities": 4,
+        "patch_responsiveness": "Medium",
+        "last_security_review": "2024-01-20"
+      },
+      "maintenance_health": {
+        "active_contributors": 7,
+        "release_frequency": "Low",
+        "issue_response_time": "7.5 days"
+      },
+      "dependency_management": {
+        "vulnerable_dependencies": 8,
+        "dependency_freshness": "Low",
+        "supply_chain_security": "Missing SBOM"
+      },
+      "regulatory_compliance": {
+        "documentation_quality": "Low",
+        "data_privacy_features": "Minimal",
+        "audit_readiness": "Low"
+      }
+    }
+  }
+}

assessment-results/{crewai_crewai.json → crewai.json}

@@ -1,16 +1,16 @@
 {
   "assessment": {
-    "library_name": "crewai/crewai",
-    "version": "v0.28.3",
+    "library_name": "joaomdmoura/crewAI",
+    "version": "v0.9.4",
     "language": "Python",
     "framework": "Agent Framework",
-    "completed_time": "2024-06-18T12:00:00Z",
-    "last_updated": "2024-06-18T12:00:00Z",
+    "completed_time": "2024-06-15T12:00:00Z",
+    "last_updated": "2024-06-15T12:00:00Z",
     "active_maintenance": true,
     "independently_verified": true,
-    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/crewai_crewai.html",
-    "repository_url": "https://github.com/crewai/crewai",
-    "github_stars": 12300,
+    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/crewai.html",
+    "repository_url": "https://github.com/joaomdmoura/crewAI",
+    "github_stars": 8200,
     "license": "MIT",
     "scores": {
       "license_validation": 5,
@@ -22,23 +22,22 @@
     "details": {
       "license_validation": {
         "license_type": "MIT",
-        "compatibility": "High",
+        "compatibility": "Very High",
         "issues": "None"
       },
       "security_assessment": {
-        "known_vulnerabilities": 4,
+        "known_vulnerabilities": 7,
         "patch_responsiveness": "Low",
-        "last_security_review": "None",
-        "issues": "Telemetry and data collection without user consent"
+        "last_security_review": "2023-12-05"
       },
       "maintenance_health": {
-        "active_contributors": 15,
+        "active_contributors": 25,
         "release_frequency": "Medium",
-        "issue_response_time": "3.5 days"
+        "issue_response_time": "5.2 days"
       },
       "dependency_management": {
-        "vulnerable_dependencies": 5,
-        "dependency_freshness": "Poor",
+        "vulnerable_dependencies": 9,
+        "dependency_freshness": "Low",
         "supply_chain_security": "Missing SBOM"
       },
       "regulatory_compliance": {

assessment-results/{huggingface_transformers.json → huggingface_candle.json}

@@ -1,21 +1,21 @@
 {
   "assessment": {
-    "library_name": "huggingface/transformers",
-    "version": "v4.38.2",
-    "language": "Python",
+    "library_name": "huggingface/candle",
+    "version": "v0.3.2",
+    "language": "Rust",
     "framework": "Machine Learning",
     "completed_time": "2024-06-22T12:00:00Z",
     "last_updated": "2024-06-22T12:00:00Z",
     "active_maintenance": true,
     "independently_verified": true,
-    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/huggingface_transformers.html",
-    "repository_url": "https://github.com/huggingface/transformers",
-    "github_stars": 124000,
+    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/huggingface_candle.html",
+    "repository_url": "https://github.com/huggingface/candle",
+    "github_stars": 12500,
     "license": "Apache-2.0",
     "scores": {
       "license_validation": 4,
       "security_assessment": 2,
-      "maintenance_health": 3,
+      "maintenance_health": 2,
       "dependency_management": 1,
       "regulatory_compliance": 2
     },
@@ -26,24 +26,24 @@
         "issues": "None"
       },
       "security_assessment": {
-        "known_vulnerabilities": 3,
-        "patch_responsiveness": "High",
-        "last_security_review": "2024-03-15"
+        "known_vulnerabilities": 2,
+        "patch_responsiveness": "Medium",
+        "last_security_review": "2024-04-10"
       },
       "maintenance_health": {
-        "active_contributors": 345,
-        "release_frequency": "High",
-        "issue_response_time": "2.5 days"
+        "active_contributors": 28,
+        "release_frequency": "Low",
+        "issue_response_time": "4.5 days"
       },
       "dependency_management": {
-        "vulnerable_dependencies": 2,
-        "dependency_freshness": "Good",
+        "vulnerable_dependencies": 3,
+        "dependency_freshness": "Medium",
         "supply_chain_security": "Missing SBOM"
       },
       "regulatory_compliance": {
-        "documentation_quality": "Medium",
-        "data_privacy_features": "Moderate",
-        "audit_readiness": "Medium"
+        "documentation_quality": "Low",
+        "data_privacy_features": "Limited",
+        "audit_readiness": "Low"
       }
     }
   }

assessment-results/{google_jax.json → jax.json}

@@ -1,16 +1,16 @@
 {
   "assessment": {
     "library_name": "google/jax",
-    "version": "v0.4.25",
+    "version": "v0.4.23",
     "language": "Python",
     "framework": "Machine Learning",
-    "completed_time": "2024-06-12T12:00:00Z",
-    "last_updated": "2024-06-12T12:00:00Z",
+    "completed_time": "2024-06-24T12:00:00Z",
+    "last_updated": "2024-06-24T12:00:00Z",
     "active_maintenance": true,
     "independently_verified": true,
-    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/google_jax.html",
+    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/jax.html",
     "repository_url": "https://github.com/google/jax",
-    "github_stars": 26400,
+    "github_stars": 36000,
     "license": "Apache-2.0",
     "scores": {
       "license_validation": 5,
@@ -22,27 +22,27 @@
     "details": {
       "license_validation": {
         "license_type": "Apache-2.0",
-        "compatibility": "High",
+        "compatibility": "Very High",
         "issues": "None"
       },
       "security_assessment": {
-        "known_vulnerabilities": 1,
-        "patch_responsiveness": "Medium",
-        "last_security_review": "2024-04-15"
+        "known_vulnerabilities": 3,
+        "patch_responsiveness": "High",
+        "last_security_review": "2024-03-05"
       },
       "maintenance_health": {
-        "active_contributors": 125,
+        "active_contributors": 85,
         "release_frequency": "High",
-        "issue_response_time": "2.1 days"
+        "issue_response_time": "3.2 days"
       },
       "dependency_management": {
-        "vulnerable_dependencies": 3,
-        "dependency_freshness": "Good",
+        "vulnerable_dependencies": 7,
+        "dependency_freshness": "Low",
         "supply_chain_security": "Missing SBOM"
       },
       "regulatory_compliance": {
         "documentation_quality": "Low",
-        "data_privacy_features": "Limited",
+        "data_privacy_features": "Minimal",
         "audit_readiness": "Low"
       }
     }

assessment-results/{langchain-ai_langchain.json → langchain.json}

@@ -1,16 +1,16 @@
 {
   "assessment": {
     "library_name": "langchain-ai/langchain",
-    "version": "v0.1.8",
+    "version": "v0.1.0",
     "language": "Python",
     "framework": "LLM Orchestration",
-    "completed_time": "2024-06-15T12:00:00Z",
-    "last_updated": "2024-06-15T12:00:00Z",
+    "completed_time": "2024-06-17T12:00:00Z",
+    "last_updated": "2024-06-17T12:00:00Z",
     "active_maintenance": true,
     "independently_verified": true,
-    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/langchain-ai_langchain.html",
+    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/langchain.html",
     "repository_url": "https://github.com/langchain-ai/langchain",
-    "github_stars": 78500,
+    "github_stars": 79000,
     "license": "MIT",
     "scores": {
       "license_validation": 5,
@@ -22,27 +22,27 @@
     "details": {
       "license_validation": {
         "license_type": "MIT",
-        "compatibility": "High",
+        "compatibility": "Very High",
         "issues": "None"
       },
       "security_assessment": {
-        "known_vulnerabilities": 2,
+        "known_vulnerabilities": 12,
         "patch_responsiveness": "Low",
-        "last_security_review": "2024-03-15"
+        "last_security_review": "2023-11-20"
       },
       "maintenance_health": {
-        "active_contributors": 87,
-        "release_frequency": "Low",
-        "issue_response_time": "4.5 days"
+        "active_contributors": 65,
+        "release_frequency": "Very High",
+        "issue_response_time": "10.5 days"
       },
       "dependency_management": {
-        "vulnerable_dependencies": 3,
-        "dependency_freshness": "Poor",
+        "vulnerable_dependencies": 15,
+        "dependency_freshness": "Low",
         "supply_chain_security": "Missing SBOM"
       },
       "regulatory_compliance": {
-        "documentation_quality": "Medium",
-        "data_privacy_features": "Basic",
+        "documentation_quality": "High",
+        "data_privacy_features": "Medium",
         "audit_readiness": "Medium"
       }
     }

assessment-results/{langchain-ai_langgraph.json → langgraph.json}

@@ -1,17 +1,17 @@
 {
   "assessment": {
     "library_name": "langchain-ai/langgraph",
-    "version": "v0.2.7",
+    "version": "v0.0.20",
     "language": "Python",
     "framework": "Agent Framework",
-    "completed_time": "2024-06-20T12:00:00Z",
-    "last_updated": "2024-06-20T12:00:00Z",
+    "completed_time": "2024-06-13T12:00:00Z",
+    "last_updated": "2024-06-13T12:00:00Z",
     "active_maintenance": true,
     "independently_verified": true,
-    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/langchain-ai_langgraph.html",
+    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/langgraph.html",
     "repository_url": "https://github.com/langchain-ai/langgraph",
-    "github_stars": 5800,
-    "license": "Missing explicit license",
+    "github_stars": 4500,
+    "license": "Proprietary",
     "scores": {
       "license_validation": 1,
       "security_assessment": 1,
@@ -21,23 +21,23 @@
     },
     "details": {
       "license_validation": {
-        "license_type": "Missing explicit license",
-        "compatibility": "Unknown",
-        "issues": "No license file found"
+        "license_type": "Proprietary",
+        "compatibility": "Very Low",
+        "issues": "Commercial usage restrictions"
       },
       "security_assessment": {
-        "known_vulnerabilities": 3,
+        "known_vulnerabilities": 6,
         "patch_responsiveness": "Low",
-        "last_security_review": "None"
+        "last_security_review": "2023-11-15"
       },
       "maintenance_health": {
-        "active_contributors": 21,
+        "active_contributors": 18,
         "release_frequency": "High",
-        "issue_response_time": "1.2 days"
+        "issue_response_time": "2.5 days"
       },
       "dependency_management": {
-        "vulnerable_dependencies": 2,
-        "dependency_freshness": "Poor",
+        "vulnerable_dependencies": 8,
+        "dependency_freshness": "Low",
         "supply_chain_security": "Missing SBOM"
       },
       "regulatory_compliance": {

assessment-results/{llama-index_llama-index.json → llamaindex.json}

@@ -1,16 +1,16 @@
 {
   "assessment": {
-    "library_name": "llama-index/llama-index",
-    "version": "v0.10.5",
+    "library_name": "jerryjliu/llama_index",
+    "version": "v0.9.14",
     "language": "Python",
     "framework": "LLM Orchestration",
-    "completed_time": "2024-06-19T12:00:00Z",
-    "last_updated": "2024-06-19T12:00:00Z",
+    "completed_time": "2024-06-20T12:00:00Z",
+    "last_updated": "2024-06-20T12:00:00Z",
     "active_maintenance": true,
     "independently_verified": true,
-    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/llama-index_llama-index.html",
-    "repository_url": "https://github.com/run-llama/llama_index",
-    "github_stars": 28500,
+    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/llamaindex.html",
+    "repository_url": "https://github.com/jerryjliu/llama_index",
+    "github_stars": 27000,
     "license": "MIT",
     "scores": {
       "license_validation": 4,
@@ -26,23 +26,23 @@
         "issues": "None"
       },
       "security_assessment": {
-        "known_vulnerabilities": 2,
+        "known_vulnerabilities": 5,
         "patch_responsiveness": "Medium",
-        "last_security_review": "2024-01-10"
+        "last_security_review": "2024-01-25"
       },
       "maintenance_health": {
-        "active_contributors": 46,
-        "release_frequency": "Medium",
-        "issue_response_time": "3.7 days"
+        "active_contributors": 45,
+        "release_frequency": "High",
+        "issue_response_time": "4.2 days"
       },
       "dependency_management": {
-        "vulnerable_dependencies": 3,
-        "dependency_freshness": "Medium",
+        "vulnerable_dependencies": 9,
+        "dependency_freshness": "Low",
         "supply_chain_security": "Missing SBOM"
       },
       "regulatory_compliance": {
         "documentation_quality": "Medium",
-        "data_privacy_features": "Limited",
+        "data_privacy_features": "Low",
         "audit_readiness": "Low"
       }
     }

assessment-results/metagpt.json

@@ -0,0 +1,50 @@
+{
+  "assessment": {
+    "library_name": "geekan/MetaGPT",
+    "version": "v0.7.0",
+    "language": "Python",
+    "framework": "Agent Framework",
+    "completed_time": "2024-06-14T12:00:00Z",
+    "last_updated": "2024-06-14T12:00:00Z",
+    "active_maintenance": true,
+    "independently_verified": true,
+    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/metagpt.html",
+    "repository_url": "https://github.com/geekan/MetaGPT",
+    "github_stars": 32500,
+    "license": "MIT",
+    "scores": {
+      "license_validation": 4,
+      "security_assessment": 2,
+      "maintenance_health": 2,
+      "dependency_management": 1,
+      "regulatory_compliance": 1
+    },
+    "details": {
+      "license_validation": {
+        "license_type": "MIT",
+        "compatibility": "High",
+        "issues": "None"
+      },
+      "security_assessment": {
+        "known_vulnerabilities": 5,
+        "patch_responsiveness": "Medium",
+        "last_security_review": "2024-01-10"
+      },
+      "maintenance_health": {
+        "active_contributors": 30,
+        "release_frequency": "Low",
+        "issue_response_time": "8.5 days"
+      },
+      "dependency_management": {
+        "vulnerable_dependencies": 10,
+        "dependency_freshness": "Low",
+        "supply_chain_security": "Missing SBOM"
+      },
+      "regulatory_compliance": {
+        "documentation_quality": "Low",
+        "data_privacy_features": "Minimal",
+        "audit_readiness": "Low"
+      }
+    }
+  }
+}

assessment-results/microsoft_autogen.json

@@ -1,49 +0,0 @@
-{
-  "assessment": {
-    "library_name": "microsoft/autogen",
-    "version": "v0.2.19",
-    "language": "Python",
-    "framework": "Agent Framework",
-    "completed_time": "2024-06-05T12:00:00Z",
-    "last_updated": "2024-06-05T12:00:00Z",
-    "active_maintenance": true,
-    "independently_verified": true,
-    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/microsoft_autogen.html",
-    "repository_url": "https://github.com/microsoft/autogen",
-    "github_stars": 59200,
-    "scores": {
-      "license_validation": 3.1,
-      "security_assessment": 6.7,
-      "maintenance_health": 2.8,
-      "dependency_management": 5.5,
-      "regulatory_compliance": 7.2
-    },
-    "details": {
-      "license_validation": {
-        "license_type": "MIT",
-        "compatibility": "High",
-        "issues": "None"
-      },
-      "security_assessment": {
-        "known_vulnerabilities": 5,
-        "patch_responsiveness": "Medium",
-        "last_security_review": "2024-02-20"
-      },
-      "maintenance_health": {
-        "active_contributors": 28,
-        "release_frequency": "High",
-        "issue_response_time": "1.8 days"
-      },
-      "dependency_management": {
-        "vulnerable_dependencies": 4,
-        "dependency_freshness": "Medium",
-        "supply_chain_security": "Low"
-      },
-      "regulatory_compliance": {
-        "documentation_quality": "Low",
-        "data_privacy_features": "Limited",
-        "audit_readiness": "Low"
-      }
-    }
-  }
-}

assessment-results/{onnx_onnx.json → onnx.json}

@@ -1,14 +1,14 @@
 {
   "assessment": {
     "library_name": "onnx/onnx",
-    "version": "v1.16.0",
-    "language": "Python",
+    "version": "v1.15.0",
+    "language": "C++/Python",
     "framework": "Machine Learning",
-    "completed_time": "2024-06-14T12:00:00Z",
-    "last_updated": "2024-06-14T12:00:00Z",
+    "completed_time": "2024-06-22T11:00:00Z",
+    "last_updated": "2024-06-22T11:00:00Z",
     "active_maintenance": true,
     "independently_verified": true,
-    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/onnx_onnx.html",
+    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/onnx.html",
     "repository_url": "https://github.com/onnx/onnx",
     "github_stars": 16200,
     "license": "MIT",
@@ -23,26 +23,26 @@
       "license_validation": {
         "license_type": "MIT",
         "compatibility": "High",
-        "issues": "Patent risk concerns"
+        "issues": "None"
       },
       "security_assessment": {
-        "known_vulnerabilities": 1,
+        "known_vulnerabilities": 4,
         "patch_responsiveness": "Medium",
-        "last_security_review": "2024-02-10"
+        "last_security_review": "2024-02-28"
       },
       "maintenance_health": {
-        "active_contributors": 78,
+        "active_contributors": 35,
         "release_frequency": "Medium",
-        "issue_response_time": "5.7 days"
+        "issue_response_time": "6.2 days"
       },
       "dependency_management": {
-        "vulnerable_dependencies": 2,
-        "dependency_freshness": "Medium",
+        "vulnerable_dependencies": 8,
+        "dependency_freshness": "Low",
         "supply_chain_security": "Missing SBOM"
       },
       "regulatory_compliance": {
-        "documentation_quality": "Low",
-        "data_privacy_features": "Limited",
+        "documentation_quality": "Medium",
+        "data_privacy_features": "Low",
         "audit_readiness": "Low"
       }
     }

assessment-results/pydantic_ai.json

@@ -0,0 +1,50 @@
+{
+  "assessment": {
+    "library_name": "pydantic/pydantic-ai",
+    "version": "v0.7.0",
+    "language": "Python",
+    "framework": "Agent Framework",
+    "completed_time": "2024-06-08T12:00:00Z",
+    "last_updated": "2024-06-08T12:00:00Z",
+    "active_maintenance": true,
+    "independently_verified": true,
+    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/pydantic_ai.html",
+    "repository_url": "https://github.com/pydantic/pydantic-ai",
+    "github_stars": 5800,
+    "license": "MIT",
+    "scores": {
+      "license_validation": 5,
+      "security_assessment": 3,
+      "maintenance_health": 3,
+      "dependency_management": 2,
+      "regulatory_compliance": 2
+    },
+    "details": {
+      "license_validation": {
+        "license_type": "MIT",
+        "compatibility": "Very High",
+        "issues": "None"
+      },
+      "security_assessment": {
+        "known_vulnerabilities": 2,
+        "patch_responsiveness": "High",
+        "last_security_review": "2024-03-05"
+      },
+      "maintenance_health": {
+        "active_contributors": 20,
+        "release_frequency": "Medium",
+        "issue_response_time": "3.2 days"
+      },
+      "dependency_management": {
+        "vulnerable_dependencies": 3,
+        "dependency_freshness": "Medium",
+        "supply_chain_security": "Partial SBOM"
+      },
+      "regulatory_compliance": {
+        "documentation_quality": "Medium",
+        "data_privacy_features": "Medium",
+        "audit_readiness": "Low"
+      }
+    }
+  }
+}

assessment-results/{pytorch_pytorch.json → pytorch.json}

@@ -2,13 +2,13 @@
   "assessment": {
     "library_name": "pytorch/pytorch",
     "version": "v2.2.1",
-    "language": "Python",
+    "language": "C++/Python",
     "framework": "Machine Learning",
-    "completed_time": "2024-06-10T12:00:00Z",
-    "last_updated": "2024-06-10T12:00:00Z",
+    "completed_time": "2024-06-25T12:00:00Z",
+    "last_updated": "2024-06-25T12:00:00Z",
     "active_maintenance": true,
     "independently_verified": true,
-    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/pytorch_pytorch.html",
+    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/pytorch.html",
     "repository_url": "https://github.com/pytorch/pytorch",
     "github_stars": 74500,
     "license": "BSD-3-Clause",
@@ -22,28 +22,27 @@
     "details": {
       "license_validation": {
         "license_type": "BSD-3-Clause",
-        "compatibility": "High",
+        "compatibility": "Very High",
         "issues": "None"
       },
       "security_assessment": {
-        "known_vulnerabilities": 3,
-        "patch_responsiveness": "High",
-        "last_security_review": "2024-05-10",
-        "critical_issue": "CVE-2023-43654 (RCE in model deserialization)"
+        "known_vulnerabilities": 8,
+        "patch_responsiveness": "Low",
+        "last_security_review": "2024-02-15"
       },
       "maintenance_health": {
-        "active_contributors": 156,
+        "active_contributors": 120,
         "release_frequency": "Medium",
-        "issue_response_time": "3.2 days"
+        "issue_response_time": "7.5 days"
       },
       "dependency_management": {
-        "vulnerable_dependencies": 4,
-        "dependency_freshness": "Medium",
+        "vulnerable_dependencies": 12,
+        "dependency_freshness": "Low",
         "supply_chain_security": "Missing SBOM"
       },
       "regulatory_compliance": {
         "documentation_quality": "Medium",
-        "data_privacy_features": "Limited",
+        "data_privacy_features": "Medium",
         "audit_readiness": "Medium"
       }
     }

assessment-results/sglang.json

@@ -0,0 +1,50 @@
+{
+  "assessment": {
+    "library_name": "sgl-project/sglang",
+    "version": "v0.1.8",
+    "language": "Python/C++",
+    "framework": "LLM Inference",
+    "completed_time": "2024-06-19T12:00:00Z",
+    "last_updated": "2024-06-19T12:00:00Z",
+    "active_maintenance": true,
+    "independently_verified": true,
+    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/sglang.html",
+    "repository_url": "https://github.com/sgl-project/sglang",
+    "github_stars": 4800,
+    "license": "Apache-2.0",
+    "scores": {
+      "license_validation": 4,
+      "security_assessment": 2,
+      "maintenance_health": 3,
+      "dependency_management": 1,
+      "regulatory_compliance": 1
+    },
+    "details": {
+      "license_validation": {
+        "license_type": "Apache-2.0",
+        "compatibility": "High",
+        "issues": "None"
+      },
+      "security_assessment": {
+        "known_vulnerabilities": 4,
+        "patch_responsiveness": "Medium",
+        "last_security_review": "2024-02-10"
+      },
+      "maintenance_health": {
+        "active_contributors": 15,
+        "release_frequency": "Medium",
+        "issue_response_time": "3.8 days"
+      },
+      "dependency_management": {
+        "vulnerable_dependencies": 6,
+        "dependency_freshness": "Low",
+        "supply_chain_security": "Missing SBOM"
+      },
+      "regulatory_compliance": {
+        "documentation_quality": "Low",
+        "data_privacy_features": "Minimal",
+        "audit_readiness": "Low"
+      }
+    }
+  }
+}

assessment-results/smolagents.json

@@ -0,0 +1,50 @@
+{
+  "assessment": {
+    "library_name": "tinygrad/SmolAgents",
+    "version": "v0.2.1",
+    "language": "Python",
+    "framework": "Agent Framework",
+    "completed_time": "2024-06-12T12:00:00Z",
+    "last_updated": "2024-06-12T12:00:00Z",
+    "active_maintenance": true,
+    "independently_verified": true,
+    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/smolagents.html",
+    "repository_url": "https://github.com/tinygrad/SmolAgents",
+    "github_stars": 2800,
+    "license": "MIT",
+    "scores": {
+      "license_validation": 4,
+      "security_assessment": 2,
+      "maintenance_health": 2,
+      "dependency_management": 1,
+      "regulatory_compliance": 1
+    },
+    "details": {
+      "license_validation": {
+        "license_type": "MIT",
+        "compatibility": "High",
+        "issues": "None"
+      },
+      "security_assessment": {
+        "known_vulnerabilities": 4,
+        "patch_responsiveness": "Medium",
+        "last_security_review": "2024-01-05"
+      },
+      "maintenance_health": {
+        "active_contributors": 8,
+        "release_frequency": "Low",
+        "issue_response_time": "6.8 days"
+      },
+      "dependency_management": {
+        "vulnerable_dependencies": 6,
+        "dependency_freshness": "Low",
+        "supply_chain_security": "Missing SBOM"
+      },
+      "regulatory_compliance": {
+        "documentation_quality": "Low",
+        "data_privacy_features": "Minimal",
+        "audit_readiness": "Low"
+      }
+    }
+  }
+}

assessment-results/stagehand.json

@@ -0,0 +1,50 @@
+{
+  "assessment": {
+    "library_name": "langchain-ai/stagehand",
+    "version": "v0.0.12",
+    "language": "Python",
+    "framework": "Agent Framework",
+    "completed_time": "2024-06-11T12:00:00Z",
+    "last_updated": "2024-06-11T12:00:00Z",
+    "active_maintenance": true,
+    "independently_verified": true,
+    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/stagehand.html",
+    "repository_url": "https://github.com/langchain-ai/stagehand",
+    "github_stars": 1500,
+    "license": "Apache-2.0 with Commons Clause",
+    "scores": {
+      "license_validation": 3,
+      "security_assessment": 2,
+      "maintenance_health": 3,
+      "dependency_management": 1,
+      "regulatory_compliance": 1
+    },
+    "details": {
+      "license_validation": {
+        "license_type": "Apache-2.0 with Commons Clause",
+        "compatibility": "Medium",
+        "issues": "Commercial usage restrictions"
+      },
+      "security_assessment": {
+        "known_vulnerabilities": 3,
+        "patch_responsiveness": "Medium",
+        "last_security_review": "2024-02-18"
+      },
+      "maintenance_health": {
+        "active_contributors": 12,
+        "release_frequency": "Medium",
+        "issue_response_time": "4.8 days"
+      },
+      "dependency_management": {
+        "vulnerable_dependencies": 7,
+        "dependency_freshness": "Low",
+        "supply_chain_security": "Missing SBOM"
+      },
+      "regulatory_compliance": {
+        "documentation_quality": "Low",
+        "data_privacy_features": "Minimal",
+        "audit_readiness": "Low"
+      }
+    }
+  }
+}

assessment-results/{tensorflow_tensorflow.json → tensorflow.json}

@@ -1,16 +1,16 @@
 {
   "assessment": {
     "library_name": "tensorflow/tensorflow",
-    "version": "v2.16.1",
-    "language": "Python",
+    "version": "v2.15.0",
+    "language": "C++/Python",
     "framework": "Machine Learning",
-    "completed_time": "2024-06-08T12:00:00Z",
-    "last_updated": "2024-06-08T12:00:00Z",
+    "completed_time": "2024-06-23T12:00:00Z",
+    "last_updated": "2024-06-23T12:00:00Z",
     "active_maintenance": true,
     "independently_verified": true,
-    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/tensorflow_tensorflow.html",
+    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/tensorflow.html",
     "repository_url": "https://github.com/tensorflow/tensorflow",
-    "github_stars": 181000,
+    "github_stars": 182000,
     "license": "Apache-2.0",
     "scores": {
       "license_validation": 5,
@@ -22,27 +22,27 @@
     "details": {
       "license_validation": {
         "license_type": "Apache-2.0",
-        "compatibility": "High",
+        "compatibility": "Very High",
         "issues": "None"
       },
       "security_assessment": {
-        "known_vulnerabilities": 5,
-        "patch_responsiveness": "High",
-        "last_security_review": "2024-03-20"
+        "known_vulnerabilities": 10,
+        "patch_responsiveness": "Low",
+        "last_security_review": "2024-01-15"
       },
       "maintenance_health": {
-        "active_contributors": 221,
+        "active_contributors": 95,
         "release_frequency": "Medium",
-        "issue_response_time": "4.5 days"
+        "issue_response_time": "8.5 days"
       },
       "dependency_management": {
-        "vulnerable_dependencies": 3,
-        "dependency_freshness": "Medium",
+        "vulnerable_dependencies": 15,
+        "dependency_freshness": "Low",
         "supply_chain_security": "Missing SBOM"
       },
       "regulatory_compliance": {
         "documentation_quality": "Medium",
-        "data_privacy_features": "Basic",
+        "data_privacy_features": "Medium",
         "audit_readiness": "Medium"
       }
     }

assessment-results/tensorrt.json

@@ -0,0 +1,50 @@
+{
+  "assessment": {
+    "library_name": "nvidia/TensorRT",
+    "version": "v9.1.0",
+    "language": "C++/Python",
+    "framework": "Machine Learning Inference",
+    "completed_time": "2024-06-21T12:00:00Z",
+    "last_updated": "2024-06-21T12:00:00Z",
+    "active_maintenance": true,
+    "independently_verified": true,
+    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/tensorrt.html",
+    "repository_url": "https://github.com/NVIDIA/TensorRT",
+    "github_stars": 8500,
+    "license": "Proprietary with Open Components",
+    "scores": {
+      "license_validation": 3,
+      "security_assessment": 2,
+      "maintenance_health": 3,
+      "dependency_management": 1,
+      "regulatory_compliance": 2
+    },
+    "details": {
+      "license_validation": {
+        "license_type": "Proprietary with Open Components",
+        "compatibility": "Medium",
+        "issues": "Some proprietary limitations"
+      },
+      "security_assessment": {
+        "known_vulnerabilities": 5,
+        "patch_responsiveness": "Medium",
+        "last_security_review": "2024-03-18"
+      },
+      "maintenance_health": {
+        "active_contributors": 25,
+        "release_frequency": "Medium",
+        "issue_response_time": "5.8 days"
+      },
+      "dependency_management": {
+        "vulnerable_dependencies": 7,
+        "dependency_freshness": "Low",
+        "supply_chain_security": "Missing SBOM"
+      },
+      "regulatory_compliance": {
+        "documentation_quality": "Medium",
+        "data_privacy_features": "Low",
+        "audit_readiness": "Low"
+      }
+    }
+  }
+}

assessment-results/text_generation_inference.json

@@ -0,0 +1,50 @@
+{
+  "assessment": {
+    "library_name": "huggingface/text-generation-inference",
+    "version": "v1.1.0",
+    "language": "Rust/Python",
+    "framework": "LLM Inference",
+    "completed_time": "2024-06-16T12:00:00Z",
+    "last_updated": "2024-06-16T12:00:00Z",
+    "active_maintenance": true,
+    "independently_verified": true,
+    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/text_generation_inference.html",
+    "repository_url": "https://github.com/huggingface/text-generation-inference",
+    "github_stars": 5600,
+    "license": "Apache-2.0",
+    "scores": {
+      "license_validation": 3,
+      "security_assessment": 2,
+      "maintenance_health": 2,
+      "dependency_management": 1,
+      "regulatory_compliance": 1
+    },
+    "details": {
+      "license_validation": {
+        "license_type": "Apache-2.0",
+        "compatibility": "Medium",
+        "issues": "Some compatibility concerns"
+      },
+      "security_assessment": {
+        "known_vulnerabilities": 4,
+        "patch_responsiveness": "Medium",
+        "last_security_review": "2024-01-08"
+      },
+      "maintenance_health": {
+        "active_contributors": 12,
+        "release_frequency": "Low",
+        "issue_response_time": "7.2 days"
+      },
+      "dependency_management": {
+        "vulnerable_dependencies": 8,
+        "dependency_freshness": "Low",
+        "supply_chain_security": "Missing SBOM"
+      },
+      "regulatory_compliance": {
+        "documentation_quality": "Low",
+        "data_privacy_features": "Minimal",
+        "audit_readiness": "Low"
+      }
+    }
+  }
+}

assessment-results/{vllm_vllm.json → vllm.json}

@@ -1,16 +1,16 @@
 {
   "assessment": {
-    "library_name": "vllm/vllm",
-    "version": "v0.3.2",
-    "language": "Python",
+    "library_name": "vllm-project/vllm",
+    "version": "v0.3.0",
+    "language": "Python/CUDA",
     "framework": "LLM Inference",
-    "completed_time": "2024-06-17T12:00:00Z",
-    "last_updated": "2024-06-17T12:00:00Z",
+    "completed_time": "2024-06-18T12:00:00Z",
+    "last_updated": "2024-06-18T12:00:00Z",
     "active_maintenance": true,
     "independently_verified": true,
-    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/vllm_vllm.html",
+    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/vllm.html",
     "repository_url": "https://github.com/vllm-project/vllm",
-    "github_stars": 19800,
+    "github_stars": 12800,
     "license": "Apache-2.0",
     "scores": {
       "license_validation": 4,
@@ -26,23 +26,23 @@
         "issues": "None"
       },
       "security_assessment": {
-        "known_vulnerabilities": 1,
-        "patch_responsiveness": "High",
-        "last_security_review": "2024-02-28"
+        "known_vulnerabilities": 3,
+        "patch_responsiveness": "Medium",
+        "last_security_review": "2024-03-15"
       },
       "maintenance_health": {
-        "active_contributors": 42,
+        "active_contributors": 22,
         "release_frequency": "Medium",
-        "issue_response_time": "2.9 days"
+        "issue_response_time": "4.1 days"
       },
       "dependency_management": {
-        "vulnerable_dependencies": 2,
-        "dependency_freshness": "Good",
+        "vulnerable_dependencies": 7,
+        "dependency_freshness": "Low",
         "supply_chain_security": "Missing SBOM"
       },
       "regulatory_compliance": {
         "documentation_quality": "Low",
-        "data_privacy_features": "Limited",
+        "data_privacy_features": "Minimal",
         "audit_readiness": "Low"
       }
     }