| Key | Value |
|---|---|
| Timestamp | 2023-10-19T14:56:41+00:00 |
| Signature | unsigned |
| Tool |
Vendor: aquasecurity Name: trivy Version: 0.46.0 |
| Component |
bom-ref: 361cc827-7e02-4dd7-bafb-6bf8b06dc38f Type: application Name: https://github.com/codenotary/immudb Properties:
OpenSSF Scorecard: 6.2 / 10 |
Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certi...
A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause exces...
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancell...
urllib3 is a user-friendly HTTP client library for Python. urllib3 doesn't treat the `Cookie` HTTP h...
immudb is a database with built-in cryptographic proof and verification. immudb client SDKs use serv...
Text nodes not in the HTML namespace are incorrectly literally rendered, causing text which should b...
immudb is a database with built-in cryptographic proof and verification. In versions prior to 1.4.1,...
urllib3 is a user-friendly HTTP client library for Python. urllib3 previously wouldn't remove the HT...
| # | Description | Score | Score Progress |
|---|---|---|---|
| 1 | provided sbom is in a supported sbom format of spdx,cyclonedx | 10.0 |
|
| 2 | provided sbom should be in supported spec version for spec:1.5 and versions: 1.0,1.1,1.2,1.3,1.4 | 0.0 |
|
| 3 | provided sbom should be in supported file format for spec: json and version: json,xml | 10.0 |
|
| 4 | provided sbom is parsable | 10.0 |
|
| # | Description | Score | Score Progress |
|---|---|---|---|
| 1 | 0/184 have supplier names | 0.0 |
|
| 2 | 184/184 have names | 10.0 |
|
| 3 | 174/184 have versions | 9.5 |
|
| 4 | 184/184 have unique ID's | 10.0 |
|
| 5 | doc has 410 relationships | 10.0 |
|
| 6 | doc has 1 authors | 10.0 |
|
| 7 | doc has creation timestamp 2023-10-19T14:56:41+00:00 | 10.0 |
|
| # | Description | Score | Score Progress |
|---|---|---|---|
| 1 | Doc Fields:true Pkg Fields:true | 10.0 |
|
| 2 | 0/184 have licenses | 0.0 |
|
| 3 | 0/184 have checksums | 0.0 |
|
| # | Description | Score | Score Progress |
|---|---|---|---|
| 1 | 0/184 components with valid license | 0.0 |
|
| 2 | 184/184 components have primary purpose specified | 10.0 |
|
| 3 | no licenses found | 0.0 |
|
| 4 | no licenses found | 0.0 |
|
| 5 | 174/184 components have any lookup id | 9.5 |
|
| 6 | 0/184 components have multiple lookup id | 0.0 |
|
| 7 | 1/1 tools have creator and version | 10.0 |
|
| # | Description | Score | Score Progress |
|---|---|---|---|
| 1 | doc has a sharable license free 0 :: of 0 | 0.0 |
|