wu981526092 commited on
Commit
8a2f31d
·
1 Parent(s): 4761cc6
assessment-results/crewai_crewai.json CHANGED
@@ -1,7 +1,7 @@
1
  {
2
  "assessment": {
3
  "library_name": "crewai/crewai",
4
- "version": "v0.19.0",
5
  "language": "Python",
6
  "framework": "Agent Framework",
7
  "completed_time": "2024-06-18T12:00:00Z",
@@ -9,6 +9,8 @@
9
  "active_maintenance": true,
10
  "independently_verified": true,
11
  "report_url": "https://github.com/LibVulnWatch/reports/raw/main/crewai_crewai.html",
 
 
12
  "scores": {
13
  "license_validation": 0.0,
14
  "security_assessment": 8.0,
 
1
  {
2
  "assessment": {
3
  "library_name": "crewai/crewai",
4
+ "version": "v0.28.3",
5
  "language": "Python",
6
  "framework": "Agent Framework",
7
  "completed_time": "2024-06-18T12:00:00Z",
 
9
  "active_maintenance": true,
10
  "independently_verified": true,
11
  "report_url": "https://github.com/LibVulnWatch/reports/raw/main/crewai_crewai.html",
12
+ "repository_url": "https://github.com/crewai/crewai",
13
+ "github_stars": 12300,
14
  "scores": {
15
  "license_validation": 0.0,
16
  "security_assessment": 8.0,
assessment-results/google_jax.json CHANGED
@@ -1,7 +1,7 @@
1
  {
2
  "assessment": {
3
  "library_name": "google/jax",
4
- "version": "v0.4.14",
5
  "language": "Python",
6
  "framework": "Machine Learning",
7
  "completed_time": "2024-06-12T12:00:00Z",
@@ -9,6 +9,8 @@
9
  "active_maintenance": true,
10
  "independently_verified": true,
11
  "report_url": "https://github.com/LibVulnWatch/reports/raw/main/google_jax.html",
 
 
12
  "scores": {
13
  "license_validation": 0.0,
14
  "security_assessment": 4.0,
 
1
  {
2
  "assessment": {
3
  "library_name": "google/jax",
4
+ "version": "v0.4.25",
5
  "language": "Python",
6
  "framework": "Machine Learning",
7
  "completed_time": "2024-06-12T12:00:00Z",
 
9
  "active_maintenance": true,
10
  "independently_verified": true,
11
  "report_url": "https://github.com/LibVulnWatch/reports/raw/main/google_jax.html",
12
+ "repository_url": "https://github.com/google/jax",
13
+ "github_stars": 26400,
14
  "scores": {
15
  "license_validation": 0.0,
16
  "security_assessment": 4.0,
assessment-results/huggingface_transformers.json ADDED
@@ -0,0 +1,49 @@
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
+ {
2
+ "assessment": {
3
+ "library_name": "huggingface/transformers",
4
+ "version": "v4.38.2",
5
+ "language": "Python",
6
+ "framework": "Machine Learning",
7
+ "completed_time": "2024-06-22T12:00:00Z",
8
+ "last_updated": "2024-06-22T12:00:00Z",
9
+ "active_maintenance": true,
10
+ "independently_verified": true,
11
+ "report_url": "https://github.com/LibVulnWatch/reports/raw/main/huggingface_transformers.html",
12
+ "repository_url": "https://github.com/huggingface/transformers",
13
+ "github_stars": 124000,
14
+ "scores": {
15
+ "license_validation": 2.0,
16
+ "security_assessment": 4.0,
17
+ "maintenance_health": 2.0,
18
+ "dependency_management": 6.0,
19
+ "regulatory_compliance": 4.0
20
+ },
21
+ "details": {
22
+ "license_validation": {
23
+ "license_type": "Apache-2.0",
24
+ "compatibility": "High",
25
+ "issues": "None"
26
+ },
27
+ "security_assessment": {
28
+ "known_vulnerabilities": 3,
29
+ "patch_responsiveness": "High",
30
+ "last_security_review": "2024-03-15"
31
+ },
32
+ "maintenance_health": {
33
+ "active_contributors": 345,
34
+ "release_frequency": "High",
35
+ "issue_response_time": "2.5 days"
36
+ },
37
+ "dependency_management": {
38
+ "vulnerable_dependencies": 2,
39
+ "dependency_freshness": "Good",
40
+ "supply_chain_security": "Missing SBOM"
41
+ },
42
+ "regulatory_compliance": {
43
+ "documentation_quality": "Medium",
44
+ "data_privacy_features": "Moderate",
45
+ "audit_readiness": "Medium"
46
+ }
47
+ }
48
+ }
49
+ }
assessment-results/langchain-ai_langchain.json CHANGED
@@ -1,7 +1,7 @@
1
  {
2
  "assessment": {
3
  "library_name": "langchain-ai/langchain",
4
- "version": "v0.1.0",
5
  "language": "Python",
6
  "framework": "LLM Orchestration",
7
  "completed_time": "2024-06-15T12:00:00Z",
@@ -9,6 +9,8 @@
9
  "active_maintenance": true,
10
  "independently_verified": true,
11
  "report_url": "https://github.com/LibVulnWatch/reports/raw/main/langchain-ai_langchain.html",
 
 
12
  "scores": {
13
  "license_validation": 0.0,
14
  "security_assessment": 8.0,
 
1
  {
2
  "assessment": {
3
  "library_name": "langchain-ai/langchain",
4
+ "version": "v0.1.8",
5
  "language": "Python",
6
  "framework": "LLM Orchestration",
7
  "completed_time": "2024-06-15T12:00:00Z",
 
9
  "active_maintenance": true,
10
  "independently_verified": true,
11
  "report_url": "https://github.com/LibVulnWatch/reports/raw/main/langchain-ai_langchain.html",
12
+ "repository_url": "https://github.com/langchain-ai/langchain",
13
+ "github_stars": 78500,
14
  "scores": {
15
  "license_validation": 0.0,
16
  "security_assessment": 8.0,
assessment-results/langchain-ai_langgraph.json CHANGED
@@ -1,7 +1,7 @@
1
  {
2
  "assessment": {
3
  "library_name": "langchain-ai/langgraph",
4
- "version": "v0.0.30",
5
  "language": "Python",
6
  "framework": "Agent Framework",
7
  "completed_time": "2024-06-20T12:00:00Z",
@@ -9,6 +9,8 @@
9
  "active_maintenance": true,
10
  "independently_verified": true,
11
  "report_url": "https://github.com/LibVulnWatch/reports/raw/main/langchain-ai_langgraph.html",
 
 
12
  "scores": {
13
  "license_validation": 8.0,
14
  "security_assessment": 8.0,
 
1
  {
2
  "assessment": {
3
  "library_name": "langchain-ai/langgraph",
4
+ "version": "v0.2.7",
5
  "language": "Python",
6
  "framework": "Agent Framework",
7
  "completed_time": "2024-06-20T12:00:00Z",
 
9
  "active_maintenance": true,
10
  "independently_verified": true,
11
  "report_url": "https://github.com/LibVulnWatch/reports/raw/main/langchain-ai_langgraph.html",
12
+ "repository_url": "https://github.com/langchain-ai/langgraph",
13
+ "github_stars": 5800,
14
  "scores": {
15
  "license_validation": 8.0,
16
  "security_assessment": 8.0,
assessment-results/llama-index_llama-index.json ADDED
@@ -0,0 +1,49 @@
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
+ {
2
+ "assessment": {
3
+ "library_name": "llama-index/llama-index",
4
+ "version": "v0.10.5",
5
+ "language": "Python",
6
+ "framework": "LLM Orchestration",
7
+ "completed_time": "2024-06-19T12:00:00Z",
8
+ "last_updated": "2024-06-19T12:00:00Z",
9
+ "active_maintenance": true,
10
+ "independently_verified": true,
11
+ "report_url": "https://github.com/LibVulnWatch/reports/raw/main/llama-index_llama-index.html",
12
+ "repository_url": "https://github.com/run-llama/llama_index",
13
+ "github_stars": 28500,
14
+ "scores": {
15
+ "license_validation": 2.0,
16
+ "security_assessment": 6.0,
17
+ "maintenance_health": 4.0,
18
+ "dependency_management": 8.0,
19
+ "regulatory_compliance": 6.0
20
+ },
21
+ "details": {
22
+ "license_validation": {
23
+ "license_type": "MIT",
24
+ "compatibility": "High",
25
+ "issues": "None"
26
+ },
27
+ "security_assessment": {
28
+ "known_vulnerabilities": 2,
29
+ "patch_responsiveness": "Medium",
30
+ "last_security_review": "2024-01-10"
31
+ },
32
+ "maintenance_health": {
33
+ "active_contributors": 46,
34
+ "release_frequency": "Medium",
35
+ "issue_response_time": "3.7 days"
36
+ },
37
+ "dependency_management": {
38
+ "vulnerable_dependencies": 3,
39
+ "dependency_freshness": "Medium",
40
+ "supply_chain_security": "Missing SBOM"
41
+ },
42
+ "regulatory_compliance": {
43
+ "documentation_quality": "Medium",
44
+ "data_privacy_features": "Limited",
45
+ "audit_readiness": "Low"
46
+ }
47
+ }
48
+ }
49
+ }
assessment-results/microsoft_autogen.json CHANGED
@@ -1,7 +1,7 @@
1
  {
2
  "assessment": {
3
  "library_name": "microsoft/autogen",
4
- "version": "v0.2.0",
5
  "language": "Python",
6
  "framework": "Agent Framework",
7
  "completed_time": "2024-06-05T12:00:00Z",
@@ -9,6 +9,8 @@
9
  "active_maintenance": true,
10
  "independently_verified": true,
11
  "report_url": "https://github.com/LibVulnWatch/reports/raw/main/microsoft_autogen.html",
 
 
12
  "scores": {
13
  "license_validation": 3.1,
14
  "security_assessment": 6.7,
 
1
  {
2
  "assessment": {
3
  "library_name": "microsoft/autogen",
4
+ "version": "v0.2.19",
5
  "language": "Python",
6
  "framework": "Agent Framework",
7
  "completed_time": "2024-06-05T12:00:00Z",
 
9
  "active_maintenance": true,
10
  "independently_verified": true,
11
  "report_url": "https://github.com/LibVulnWatch/reports/raw/main/microsoft_autogen.html",
12
+ "repository_url": "https://github.com/microsoft/autogen",
13
+ "github_stars": 59200,
14
  "scores": {
15
  "license_validation": 3.1,
16
  "security_assessment": 6.7,
assessment-results/onnx_onnx.json CHANGED
@@ -1,7 +1,7 @@
1
  {
2
  "assessment": {
3
  "library_name": "onnx/onnx",
4
- "version": "v1.15.0",
5
  "language": "Python",
6
  "framework": "Machine Learning",
7
  "completed_time": "2024-06-14T12:00:00Z",
@@ -9,6 +9,8 @@
9
  "active_maintenance": true,
10
  "independently_verified": true,
11
  "report_url": "https://github.com/LibVulnWatch/reports/raw/main/onnx_onnx.html",
 
 
12
  "scores": {
13
  "license_validation": 2.0,
14
  "security_assessment": 4.0,
 
1
  {
2
  "assessment": {
3
  "library_name": "onnx/onnx",
4
+ "version": "v1.16.0",
5
  "language": "Python",
6
  "framework": "Machine Learning",
7
  "completed_time": "2024-06-14T12:00:00Z",
 
9
  "active_maintenance": true,
10
  "independently_verified": true,
11
  "report_url": "https://github.com/LibVulnWatch/reports/raw/main/onnx_onnx.html",
12
+ "repository_url": "https://github.com/onnx/onnx",
13
+ "github_stars": 16200,
14
  "scores": {
15
  "license_validation": 2.0,
16
  "security_assessment": 4.0,
assessment-results/pytorch_pytorch.json CHANGED
@@ -1,7 +1,7 @@
1
  {
2
  "assessment": {
3
  "library_name": "pytorch/pytorch",
4
- "version": "v2.1.0",
5
  "language": "Python",
6
  "framework": "Machine Learning",
7
  "completed_time": "2024-06-10T12:00:00Z",
@@ -9,6 +9,8 @@
9
  "active_maintenance": true,
10
  "independently_verified": true,
11
  "report_url": "https://github.com/LibVulnWatch/reports/raw/main/pytorch_pytorch.html",
 
 
12
  "scores": {
13
  "license_validation": 0.0,
14
  "security_assessment": 8.0,
 
1
  {
2
  "assessment": {
3
  "library_name": "pytorch/pytorch",
4
+ "version": "v2.2.1",
5
  "language": "Python",
6
  "framework": "Machine Learning",
7
  "completed_time": "2024-06-10T12:00:00Z",
 
9
  "active_maintenance": true,
10
  "independently_verified": true,
11
  "report_url": "https://github.com/LibVulnWatch/reports/raw/main/pytorch_pytorch.html",
12
+ "repository_url": "https://github.com/pytorch/pytorch",
13
+ "github_stars": 74500,
14
  "scores": {
15
  "license_validation": 0.0,
16
  "security_assessment": 8.0,
assessment-results/tensorflow_tensorflow.json CHANGED
@@ -1,7 +1,7 @@
1
  {
2
  "assessment": {
3
  "library_name": "tensorflow/tensorflow",
4
- "version": "v2.15.0",
5
  "language": "Python",
6
  "framework": "Machine Learning",
7
  "completed_time": "2024-06-08T12:00:00Z",
@@ -9,6 +9,8 @@
9
  "active_maintenance": true,
10
  "independently_verified": true,
11
  "report_url": "https://github.com/LibVulnWatch/reports/raw/main/tensorflow_tensorflow.html",
 
 
12
  "scores": {
13
  "license_validation": 0.0,
14
  "security_assessment": 8.0,
 
1
  {
2
  "assessment": {
3
  "library_name": "tensorflow/tensorflow",
4
+ "version": "v2.16.1",
5
  "language": "Python",
6
  "framework": "Machine Learning",
7
  "completed_time": "2024-06-08T12:00:00Z",
 
9
  "active_maintenance": true,
10
  "independently_verified": true,
11
  "report_url": "https://github.com/LibVulnWatch/reports/raw/main/tensorflow_tensorflow.html",
12
+ "repository_url": "https://github.com/tensorflow/tensorflow",
13
+ "github_stars": 181000,
14
  "scores": {
15
  "license_validation": 0.0,
16
  "security_assessment": 8.0,
assessment-results/vllm_vllm.json ADDED
@@ -0,0 +1,49 @@
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
+ {
2
+ "assessment": {
3
+ "library_name": "vllm/vllm",
4
+ "version": "v0.3.2",
5
+ "language": "Python",
6
+ "framework": "LLM Inference",
7
+ "completed_time": "2024-06-17T12:00:00Z",
8
+ "last_updated": "2024-06-17T12:00:00Z",
9
+ "active_maintenance": true,
10
+ "independently_verified": true,
11
+ "report_url": "https://github.com/LibVulnWatch/reports/raw/main/vllm_vllm.html",
12
+ "repository_url": "https://github.com/vllm-project/vllm",
13
+ "github_stars": 19800,
14
+ "scores": {
15
+ "license_validation": 2.0,
16
+ "security_assessment": 6.0,
17
+ "maintenance_health": 4.0,
18
+ "dependency_management": 8.0,
19
+ "regulatory_compliance": 8.0
20
+ },
21
+ "details": {
22
+ "license_validation": {
23
+ "license_type": "Apache-2.0",
24
+ "compatibility": "High",
25
+ "issues": "None"
26
+ },
27
+ "security_assessment": {
28
+ "known_vulnerabilities": 1,
29
+ "patch_responsiveness": "High",
30
+ "last_security_review": "2024-02-28"
31
+ },
32
+ "maintenance_health": {
33
+ "active_contributors": 42,
34
+ "release_frequency": "Medium",
35
+ "issue_response_time": "2.9 days"
36
+ },
37
+ "dependency_management": {
38
+ "vulnerable_dependencies": 2,
39
+ "dependency_freshness": "Good",
40
+ "supply_chain_security": "Missing SBOM"
41
+ },
42
+ "regulatory_compliance": {
43
+ "documentation_quality": "Low",
44
+ "data_privacy_features": "Limited",
45
+ "audit_readiness": "Low"
46
+ }
47
+ }
48
+ }
49
+ }