Spaces:
Running
Running
Commit
·
8a2f31d
1
Parent(s):
4761cc6
add
Browse files- assessment-results/crewai_crewai.json +3 -1
- assessment-results/google_jax.json +3 -1
- assessment-results/huggingface_transformers.json +49 -0
- assessment-results/langchain-ai_langchain.json +3 -1
- assessment-results/langchain-ai_langgraph.json +3 -1
- assessment-results/llama-index_llama-index.json +49 -0
- assessment-results/microsoft_autogen.json +3 -1
- assessment-results/onnx_onnx.json +3 -1
- assessment-results/pytorch_pytorch.json +3 -1
- assessment-results/tensorflow_tensorflow.json +3 -1
- assessment-results/vllm_vllm.json +49 -0
assessment-results/crewai_crewai.json
CHANGED
@@ -1,7 +1,7 @@
|
|
1 |
{
|
2 |
"assessment": {
|
3 |
"library_name": "crewai/crewai",
|
4 |
-
"version": "v0.
|
5 |
"language": "Python",
|
6 |
"framework": "Agent Framework",
|
7 |
"completed_time": "2024-06-18T12:00:00Z",
|
@@ -9,6 +9,8 @@
|
|
9 |
"active_maintenance": true,
|
10 |
"independently_verified": true,
|
11 |
"report_url": "https://github.com/LibVulnWatch/reports/raw/main/crewai_crewai.html",
|
|
|
|
|
12 |
"scores": {
|
13 |
"license_validation": 0.0,
|
14 |
"security_assessment": 8.0,
|
|
|
1 |
{
|
2 |
"assessment": {
|
3 |
"library_name": "crewai/crewai",
|
4 |
+
"version": "v0.28.3",
|
5 |
"language": "Python",
|
6 |
"framework": "Agent Framework",
|
7 |
"completed_time": "2024-06-18T12:00:00Z",
|
|
|
9 |
"active_maintenance": true,
|
10 |
"independently_verified": true,
|
11 |
"report_url": "https://github.com/LibVulnWatch/reports/raw/main/crewai_crewai.html",
|
12 |
+
"repository_url": "https://github.com/crewai/crewai",
|
13 |
+
"github_stars": 12300,
|
14 |
"scores": {
|
15 |
"license_validation": 0.0,
|
16 |
"security_assessment": 8.0,
|
assessment-results/google_jax.json
CHANGED
@@ -1,7 +1,7 @@
|
|
1 |
{
|
2 |
"assessment": {
|
3 |
"library_name": "google/jax",
|
4 |
-
"version": "v0.4.
|
5 |
"language": "Python",
|
6 |
"framework": "Machine Learning",
|
7 |
"completed_time": "2024-06-12T12:00:00Z",
|
@@ -9,6 +9,8 @@
|
|
9 |
"active_maintenance": true,
|
10 |
"independently_verified": true,
|
11 |
"report_url": "https://github.com/LibVulnWatch/reports/raw/main/google_jax.html",
|
|
|
|
|
12 |
"scores": {
|
13 |
"license_validation": 0.0,
|
14 |
"security_assessment": 4.0,
|
|
|
1 |
{
|
2 |
"assessment": {
|
3 |
"library_name": "google/jax",
|
4 |
+
"version": "v0.4.25",
|
5 |
"language": "Python",
|
6 |
"framework": "Machine Learning",
|
7 |
"completed_time": "2024-06-12T12:00:00Z",
|
|
|
9 |
"active_maintenance": true,
|
10 |
"independently_verified": true,
|
11 |
"report_url": "https://github.com/LibVulnWatch/reports/raw/main/google_jax.html",
|
12 |
+
"repository_url": "https://github.com/google/jax",
|
13 |
+
"github_stars": 26400,
|
14 |
"scores": {
|
15 |
"license_validation": 0.0,
|
16 |
"security_assessment": 4.0,
|
assessment-results/huggingface_transformers.json
ADDED
@@ -0,0 +1,49 @@
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
1 |
+
{
|
2 |
+
"assessment": {
|
3 |
+
"library_name": "huggingface/transformers",
|
4 |
+
"version": "v4.38.2",
|
5 |
+
"language": "Python",
|
6 |
+
"framework": "Machine Learning",
|
7 |
+
"completed_time": "2024-06-22T12:00:00Z",
|
8 |
+
"last_updated": "2024-06-22T12:00:00Z",
|
9 |
+
"active_maintenance": true,
|
10 |
+
"independently_verified": true,
|
11 |
+
"report_url": "https://github.com/LibVulnWatch/reports/raw/main/huggingface_transformers.html",
|
12 |
+
"repository_url": "https://github.com/huggingface/transformers",
|
13 |
+
"github_stars": 124000,
|
14 |
+
"scores": {
|
15 |
+
"license_validation": 2.0,
|
16 |
+
"security_assessment": 4.0,
|
17 |
+
"maintenance_health": 2.0,
|
18 |
+
"dependency_management": 6.0,
|
19 |
+
"regulatory_compliance": 4.0
|
20 |
+
},
|
21 |
+
"details": {
|
22 |
+
"license_validation": {
|
23 |
+
"license_type": "Apache-2.0",
|
24 |
+
"compatibility": "High",
|
25 |
+
"issues": "None"
|
26 |
+
},
|
27 |
+
"security_assessment": {
|
28 |
+
"known_vulnerabilities": 3,
|
29 |
+
"patch_responsiveness": "High",
|
30 |
+
"last_security_review": "2024-03-15"
|
31 |
+
},
|
32 |
+
"maintenance_health": {
|
33 |
+
"active_contributors": 345,
|
34 |
+
"release_frequency": "High",
|
35 |
+
"issue_response_time": "2.5 days"
|
36 |
+
},
|
37 |
+
"dependency_management": {
|
38 |
+
"vulnerable_dependencies": 2,
|
39 |
+
"dependency_freshness": "Good",
|
40 |
+
"supply_chain_security": "Missing SBOM"
|
41 |
+
},
|
42 |
+
"regulatory_compliance": {
|
43 |
+
"documentation_quality": "Medium",
|
44 |
+
"data_privacy_features": "Moderate",
|
45 |
+
"audit_readiness": "Medium"
|
46 |
+
}
|
47 |
+
}
|
48 |
+
}
|
49 |
+
}
|
assessment-results/langchain-ai_langchain.json
CHANGED
@@ -1,7 +1,7 @@
|
|
1 |
{
|
2 |
"assessment": {
|
3 |
"library_name": "langchain-ai/langchain",
|
4 |
-
"version": "v0.1.
|
5 |
"language": "Python",
|
6 |
"framework": "LLM Orchestration",
|
7 |
"completed_time": "2024-06-15T12:00:00Z",
|
@@ -9,6 +9,8 @@
|
|
9 |
"active_maintenance": true,
|
10 |
"independently_verified": true,
|
11 |
"report_url": "https://github.com/LibVulnWatch/reports/raw/main/langchain-ai_langchain.html",
|
|
|
|
|
12 |
"scores": {
|
13 |
"license_validation": 0.0,
|
14 |
"security_assessment": 8.0,
|
|
|
1 |
{
|
2 |
"assessment": {
|
3 |
"library_name": "langchain-ai/langchain",
|
4 |
+
"version": "v0.1.8",
|
5 |
"language": "Python",
|
6 |
"framework": "LLM Orchestration",
|
7 |
"completed_time": "2024-06-15T12:00:00Z",
|
|
|
9 |
"active_maintenance": true,
|
10 |
"independently_verified": true,
|
11 |
"report_url": "https://github.com/LibVulnWatch/reports/raw/main/langchain-ai_langchain.html",
|
12 |
+
"repository_url": "https://github.com/langchain-ai/langchain",
|
13 |
+
"github_stars": 78500,
|
14 |
"scores": {
|
15 |
"license_validation": 0.0,
|
16 |
"security_assessment": 8.0,
|
assessment-results/langchain-ai_langgraph.json
CHANGED
@@ -1,7 +1,7 @@
|
|
1 |
{
|
2 |
"assessment": {
|
3 |
"library_name": "langchain-ai/langgraph",
|
4 |
-
"version": "v0.
|
5 |
"language": "Python",
|
6 |
"framework": "Agent Framework",
|
7 |
"completed_time": "2024-06-20T12:00:00Z",
|
@@ -9,6 +9,8 @@
|
|
9 |
"active_maintenance": true,
|
10 |
"independently_verified": true,
|
11 |
"report_url": "https://github.com/LibVulnWatch/reports/raw/main/langchain-ai_langgraph.html",
|
|
|
|
|
12 |
"scores": {
|
13 |
"license_validation": 8.0,
|
14 |
"security_assessment": 8.0,
|
|
|
1 |
{
|
2 |
"assessment": {
|
3 |
"library_name": "langchain-ai/langgraph",
|
4 |
+
"version": "v0.2.7",
|
5 |
"language": "Python",
|
6 |
"framework": "Agent Framework",
|
7 |
"completed_time": "2024-06-20T12:00:00Z",
|
|
|
9 |
"active_maintenance": true,
|
10 |
"independently_verified": true,
|
11 |
"report_url": "https://github.com/LibVulnWatch/reports/raw/main/langchain-ai_langgraph.html",
|
12 |
+
"repository_url": "https://github.com/langchain-ai/langgraph",
|
13 |
+
"github_stars": 5800,
|
14 |
"scores": {
|
15 |
"license_validation": 8.0,
|
16 |
"security_assessment": 8.0,
|
assessment-results/llama-index_llama-index.json
ADDED
@@ -0,0 +1,49 @@
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
1 |
+
{
|
2 |
+
"assessment": {
|
3 |
+
"library_name": "llama-index/llama-index",
|
4 |
+
"version": "v0.10.5",
|
5 |
+
"language": "Python",
|
6 |
+
"framework": "LLM Orchestration",
|
7 |
+
"completed_time": "2024-06-19T12:00:00Z",
|
8 |
+
"last_updated": "2024-06-19T12:00:00Z",
|
9 |
+
"active_maintenance": true,
|
10 |
+
"independently_verified": true,
|
11 |
+
"report_url": "https://github.com/LibVulnWatch/reports/raw/main/llama-index_llama-index.html",
|
12 |
+
"repository_url": "https://github.com/run-llama/llama_index",
|
13 |
+
"github_stars": 28500,
|
14 |
+
"scores": {
|
15 |
+
"license_validation": 2.0,
|
16 |
+
"security_assessment": 6.0,
|
17 |
+
"maintenance_health": 4.0,
|
18 |
+
"dependency_management": 8.0,
|
19 |
+
"regulatory_compliance": 6.0
|
20 |
+
},
|
21 |
+
"details": {
|
22 |
+
"license_validation": {
|
23 |
+
"license_type": "MIT",
|
24 |
+
"compatibility": "High",
|
25 |
+
"issues": "None"
|
26 |
+
},
|
27 |
+
"security_assessment": {
|
28 |
+
"known_vulnerabilities": 2,
|
29 |
+
"patch_responsiveness": "Medium",
|
30 |
+
"last_security_review": "2024-01-10"
|
31 |
+
},
|
32 |
+
"maintenance_health": {
|
33 |
+
"active_contributors": 46,
|
34 |
+
"release_frequency": "Medium",
|
35 |
+
"issue_response_time": "3.7 days"
|
36 |
+
},
|
37 |
+
"dependency_management": {
|
38 |
+
"vulnerable_dependencies": 3,
|
39 |
+
"dependency_freshness": "Medium",
|
40 |
+
"supply_chain_security": "Missing SBOM"
|
41 |
+
},
|
42 |
+
"regulatory_compliance": {
|
43 |
+
"documentation_quality": "Medium",
|
44 |
+
"data_privacy_features": "Limited",
|
45 |
+
"audit_readiness": "Low"
|
46 |
+
}
|
47 |
+
}
|
48 |
+
}
|
49 |
+
}
|
assessment-results/microsoft_autogen.json
CHANGED
@@ -1,7 +1,7 @@
|
|
1 |
{
|
2 |
"assessment": {
|
3 |
"library_name": "microsoft/autogen",
|
4 |
-
"version": "v0.2.
|
5 |
"language": "Python",
|
6 |
"framework": "Agent Framework",
|
7 |
"completed_time": "2024-06-05T12:00:00Z",
|
@@ -9,6 +9,8 @@
|
|
9 |
"active_maintenance": true,
|
10 |
"independently_verified": true,
|
11 |
"report_url": "https://github.com/LibVulnWatch/reports/raw/main/microsoft_autogen.html",
|
|
|
|
|
12 |
"scores": {
|
13 |
"license_validation": 3.1,
|
14 |
"security_assessment": 6.7,
|
|
|
1 |
{
|
2 |
"assessment": {
|
3 |
"library_name": "microsoft/autogen",
|
4 |
+
"version": "v0.2.19",
|
5 |
"language": "Python",
|
6 |
"framework": "Agent Framework",
|
7 |
"completed_time": "2024-06-05T12:00:00Z",
|
|
|
9 |
"active_maintenance": true,
|
10 |
"independently_verified": true,
|
11 |
"report_url": "https://github.com/LibVulnWatch/reports/raw/main/microsoft_autogen.html",
|
12 |
+
"repository_url": "https://github.com/microsoft/autogen",
|
13 |
+
"github_stars": 59200,
|
14 |
"scores": {
|
15 |
"license_validation": 3.1,
|
16 |
"security_assessment": 6.7,
|
assessment-results/onnx_onnx.json
CHANGED
@@ -1,7 +1,7 @@
|
|
1 |
{
|
2 |
"assessment": {
|
3 |
"library_name": "onnx/onnx",
|
4 |
-
"version": "v1.
|
5 |
"language": "Python",
|
6 |
"framework": "Machine Learning",
|
7 |
"completed_time": "2024-06-14T12:00:00Z",
|
@@ -9,6 +9,8 @@
|
|
9 |
"active_maintenance": true,
|
10 |
"independently_verified": true,
|
11 |
"report_url": "https://github.com/LibVulnWatch/reports/raw/main/onnx_onnx.html",
|
|
|
|
|
12 |
"scores": {
|
13 |
"license_validation": 2.0,
|
14 |
"security_assessment": 4.0,
|
|
|
1 |
{
|
2 |
"assessment": {
|
3 |
"library_name": "onnx/onnx",
|
4 |
+
"version": "v1.16.0",
|
5 |
"language": "Python",
|
6 |
"framework": "Machine Learning",
|
7 |
"completed_time": "2024-06-14T12:00:00Z",
|
|
|
9 |
"active_maintenance": true,
|
10 |
"independently_verified": true,
|
11 |
"report_url": "https://github.com/LibVulnWatch/reports/raw/main/onnx_onnx.html",
|
12 |
+
"repository_url": "https://github.com/onnx/onnx",
|
13 |
+
"github_stars": 16200,
|
14 |
"scores": {
|
15 |
"license_validation": 2.0,
|
16 |
"security_assessment": 4.0,
|
assessment-results/pytorch_pytorch.json
CHANGED
@@ -1,7 +1,7 @@
|
|
1 |
{
|
2 |
"assessment": {
|
3 |
"library_name": "pytorch/pytorch",
|
4 |
-
"version": "v2.1
|
5 |
"language": "Python",
|
6 |
"framework": "Machine Learning",
|
7 |
"completed_time": "2024-06-10T12:00:00Z",
|
@@ -9,6 +9,8 @@
|
|
9 |
"active_maintenance": true,
|
10 |
"independently_verified": true,
|
11 |
"report_url": "https://github.com/LibVulnWatch/reports/raw/main/pytorch_pytorch.html",
|
|
|
|
|
12 |
"scores": {
|
13 |
"license_validation": 0.0,
|
14 |
"security_assessment": 8.0,
|
|
|
1 |
{
|
2 |
"assessment": {
|
3 |
"library_name": "pytorch/pytorch",
|
4 |
+
"version": "v2.2.1",
|
5 |
"language": "Python",
|
6 |
"framework": "Machine Learning",
|
7 |
"completed_time": "2024-06-10T12:00:00Z",
|
|
|
9 |
"active_maintenance": true,
|
10 |
"independently_verified": true,
|
11 |
"report_url": "https://github.com/LibVulnWatch/reports/raw/main/pytorch_pytorch.html",
|
12 |
+
"repository_url": "https://github.com/pytorch/pytorch",
|
13 |
+
"github_stars": 74500,
|
14 |
"scores": {
|
15 |
"license_validation": 0.0,
|
16 |
"security_assessment": 8.0,
|
assessment-results/tensorflow_tensorflow.json
CHANGED
@@ -1,7 +1,7 @@
|
|
1 |
{
|
2 |
"assessment": {
|
3 |
"library_name": "tensorflow/tensorflow",
|
4 |
-
"version": "v2.
|
5 |
"language": "Python",
|
6 |
"framework": "Machine Learning",
|
7 |
"completed_time": "2024-06-08T12:00:00Z",
|
@@ -9,6 +9,8 @@
|
|
9 |
"active_maintenance": true,
|
10 |
"independently_verified": true,
|
11 |
"report_url": "https://github.com/LibVulnWatch/reports/raw/main/tensorflow_tensorflow.html",
|
|
|
|
|
12 |
"scores": {
|
13 |
"license_validation": 0.0,
|
14 |
"security_assessment": 8.0,
|
|
|
1 |
{
|
2 |
"assessment": {
|
3 |
"library_name": "tensorflow/tensorflow",
|
4 |
+
"version": "v2.16.1",
|
5 |
"language": "Python",
|
6 |
"framework": "Machine Learning",
|
7 |
"completed_time": "2024-06-08T12:00:00Z",
|
|
|
9 |
"active_maintenance": true,
|
10 |
"independently_verified": true,
|
11 |
"report_url": "https://github.com/LibVulnWatch/reports/raw/main/tensorflow_tensorflow.html",
|
12 |
+
"repository_url": "https://github.com/tensorflow/tensorflow",
|
13 |
+
"github_stars": 181000,
|
14 |
"scores": {
|
15 |
"license_validation": 0.0,
|
16 |
"security_assessment": 8.0,
|
assessment-results/vllm_vllm.json
ADDED
@@ -0,0 +1,49 @@
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
1 |
+
{
|
2 |
+
"assessment": {
|
3 |
+
"library_name": "vllm/vllm",
|
4 |
+
"version": "v0.3.2",
|
5 |
+
"language": "Python",
|
6 |
+
"framework": "LLM Inference",
|
7 |
+
"completed_time": "2024-06-17T12:00:00Z",
|
8 |
+
"last_updated": "2024-06-17T12:00:00Z",
|
9 |
+
"active_maintenance": true,
|
10 |
+
"independently_verified": true,
|
11 |
+
"report_url": "https://github.com/LibVulnWatch/reports/raw/main/vllm_vllm.html",
|
12 |
+
"repository_url": "https://github.com/vllm-project/vllm",
|
13 |
+
"github_stars": 19800,
|
14 |
+
"scores": {
|
15 |
+
"license_validation": 2.0,
|
16 |
+
"security_assessment": 6.0,
|
17 |
+
"maintenance_health": 4.0,
|
18 |
+
"dependency_management": 8.0,
|
19 |
+
"regulatory_compliance": 8.0
|
20 |
+
},
|
21 |
+
"details": {
|
22 |
+
"license_validation": {
|
23 |
+
"license_type": "Apache-2.0",
|
24 |
+
"compatibility": "High",
|
25 |
+
"issues": "None"
|
26 |
+
},
|
27 |
+
"security_assessment": {
|
28 |
+
"known_vulnerabilities": 1,
|
29 |
+
"patch_responsiveness": "High",
|
30 |
+
"last_security_review": "2024-02-28"
|
31 |
+
},
|
32 |
+
"maintenance_health": {
|
33 |
+
"active_contributors": 42,
|
34 |
+
"release_frequency": "Medium",
|
35 |
+
"issue_response_time": "2.9 days"
|
36 |
+
},
|
37 |
+
"dependency_management": {
|
38 |
+
"vulnerable_dependencies": 2,
|
39 |
+
"dependency_freshness": "Good",
|
40 |
+
"supply_chain_security": "Missing SBOM"
|
41 |
+
},
|
42 |
+
"regulatory_compliance": {
|
43 |
+
"documentation_quality": "Low",
|
44 |
+
"data_privacy_features": "Limited",
|
45 |
+
"audit_readiness": "Low"
|
46 |
+
}
|
47 |
+
}
|
48 |
+
}
|
49 |
+
}
|