Public record
Software health reportschema 0.16.0 · metrics 1.13.0 · 2026-07-21 01:25 UTC

GoogleCloudPlatform / opentelemetry-operations-python

OpenTelemetry Python exporters for Google Cloud Monitoring and Trace

PythonApache-2.0★ 83 stars⑂ 47 forkssince Mar 2020View on GitHub ↗
#opentelemetry#opentelemetry-python#python

GoogleCloudPlatform/opentelemetry-operations-python holds a health index of 74 out of 100, placing it in the Good band. It scores highest on Engineering Quality (90/100) and lowest on AI Readiness (54/100). It was last updated 4 days ago. A single contributor accounts for most of its recent work.

74
overall / 100
Good

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.

74
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
VitalityCommunity &AdoptionSustainability &GovernanceEngineeringQualitySecurityAI Readiness

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

Ownership

Google Cloud PlatformOrganization
21,253 followers1,498 public repossince Nov 2012

This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.

Package ecosystems

RegistryPackageVersionDownloads / moVersionsLast publishTags
PyPItest-commonpoints to another repo — not scored1.3.0.post3115191682 days agotest
PyPIopentelemetry-propagator-gcp1.12.01,519,5021483 days ago—
PyPIopentelemetry-exporter-gcp-trace1.12.010,700,7961483 days ago—
PyPIopentelemetry-exporter-gcp-logging1.12.0a07,083,292483 days ago—
PyPIopentelemetry-resourcedetector-gcp1.12.0a017,285,3051383 days ago—
PyPIopentelemetry-exporter-gcp-monitoring1.12.0a05,955,5131383 days ago—

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

71Good · 22% of overall

Development activity

62Moderate
How it's scored
36/36Push recency — last push 4 days ago
6.9/36Commit cadence — 10/52 weeks with commits
13/18Commit volume — 27 commits in the last year
6/10OpenSSF Scorecard: Maintained — 7 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 6
Inputs used
commits_last_year27
human_commit_share—
days_since_last_push4
active_weeks_last_year10

Release discipline

84Good
How it's scored
27/27Ships releases — 24 releases published
36/36Release recency — latest release 83 days ago
12.6/27Release cadence — a release every ~163.1 days
0/10OpenSSF Scorecard: Signed-Releases — no data
Inputs used
releases_count24
latest_release_tagv1.12.0
releases_from_tagsno
days_since_latest_release83
mean_days_between_releases163.1
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

76Good · 18% of overall

Popularity & adoption

53Moderate
How it's scored
31/60Stars — 83 stars
13.9/25Forks — 47 forks
8.4/15Watchers — 33 watchers
Inputs used
forks47
stars83
watchers33
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

Community health

85Excellent
How it's scored
22.5/22.5README
22.5/22.5License — recognized license (Apache-2.0)
18/18CONTRIBUTING guide
13.5/13.5Code of conduct
0/7.2Issue template
0/6.3PR template
Inputs used
has_readmeyes
has_licenseyes
has_contributingyes
has_issue_templateno
has_code_of_conductyes
has_pull_request_templateno

Ecosystem adoption (downloads)

100Excellent
How it's scored
80/80Monthly downloads — 42,544,408 downloads/month across pypi
0/20Registry dependents — not reported by this ecosystem
Inputs used
packagesopentelemetry-propagator-gcp, opentelemetry-exporter-gcp-trace, opentelemetry-exporter-gcp-logging, opentelemetry-resourcedetector-gcp, opentelemetry-exporter-gcp-monitoring
dependents—
ecosystemspypi
total_downloads—
monthly_downloads42,544,408
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

71Good · 24% of overall

Maintainer resilience (bus factor)

39At risk
How it's scored
9/54Bus factor — 1 contributor(s) cover half of all commits
6.8/22.5Commit distribution — top contributor authored 70% of commits
13.5/13.5Contributor breadth — 24 contributors
10/10OpenSSF Scorecard: Contributors — project has 6 contributing companies or organizations
Inputs used
bus_factor1
contributors_sampled24
top_contributor_share0.697

Issue & PR responsiveness

79Good
How it's scored
37.9/46.8Issue resolution — 81% of issues closed
26/38.3PR acceptance — 250/368 decided PRs merged
15/15OpenSSF Scorecard: Code-Review — all changesets reviewed
Inputs used
merged_prs250
open_issues23
closed_issues99
issue_closed_ratio0.811
closed_unmerged_prs118

Ownership & stewardship

80Good
How it's scored
30/30Ownership backing — organization-owned
0/20Verified domain
25/25Owner reach — 21,253 followers of GoogleCloudPlatform
25/25Track record — 1,498 public repos, account ~13 yr old
Inputs used
followers21,253
owner_typeOrganization
is_verified—
owner_loginGoogleCloudPlatform
public_repos1,498
account_age_days4,994

Package maintenance

100Excellent
How it's scored
25/25Published & resolvable — 5 package(s) on pypi
35/35Publish recency — latest publish 83 days ago
20/20Version history — 14 published versions
20/20Not deprecated — active, not deprecated or yanked
Inputs used
packagesopentelemetry-propagator-gcp, opentelemetry-exporter-gcp-trace, opentelemetry-exporter-gcp-logging, opentelemetry-resourcedetector-gcp, opentelemetry-exporter-gcp-monitoring
ecosystemspypi
any_deprecatedno
min_days_since_publish83

Engineering Quality

Are baseline engineering and documentation practices in place?

90Excellent · 20% of overall

Engineering practices

84Good
How it's scored
24/24CI workflows — 2 workflow(s)
24/24Tests present
16/16Linter config — .flake8, .pylintrc, tox.ini
0/9.6Pre-commit hooks
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 27 out of 27 merged PRs checked by a CI test -- score normalized to 10
Inputs used
has_ciyes
has_testsyes
has_editorconfigno
has_linter_configyes
has_precommit_configno

Documentation

100Excellent
How it's scored
30/30README
25/25Documentation directory
15/15Documentation / homepage site — https://google-cloud-opentelemetry.readthedocs.io/en/stable/
10/10Repository description
10/10Topics — 3 topics
10/10Wiki
Inputs used
topicsopentelemetry, opentelemetry-python, python
has_wikiyes
homepagehttps://google-cloud-opentelemetry.readthedocs.io/en/stable/
has_readmeyes
has_docs_diryes
has_descriptionyes

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

63Moderate · 16% of overall

Security posture

62Moderate
How it's scored
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — no data
2.5/2.5CI-Tests — 27 out of 27 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
7.5/7.5Code-Review — all changesets reviewed
2.5/2.5Contributors — project has 6 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5License — license file detected
4.5/7.5Maintained — 7 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 6
0/5Packaging — no data
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
3.5/5SAST — SAST tool detected but not run on all commits
5/5Security-Policy — security policy file detected
0/7.5Signed-Releases — no data
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
0/7.5Vulnerabilities — 111 existing vulnerabilities detected
Inputs used
sourceopenssf_scorecard
checks_evaluated15
scorecard_versionv5.5.0
checks_inconclusive3
scorecard_aggregate6.2
Excluded from scoring (no data or not applicable): branch_protection, packaging, signed_releases. Remaining weights renormalized.

Dependency advisories

65Moderate
How it's scored
17.2/35Direct dependencies free of known advisories — 2 affected: requests 2.32.3 (moderate 5.5), requests 2.32.5 (moderate 5.5)
0/25Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope
31.4/40No advisories left outstanding — 2 advisory-carrying package(s) unaddressed past 90 days; oldest published 406 days ago
Inputs used
sourceosv
advisories369
affected_packages63
assessed_packages493
unassessed_packages13
affected_by_severitycritical 3, high 7, moderate 6, unknown 47
direct_affected_packages2
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 493 resolved dependencies against OSV. 13 could not be assessed — no resolved version, an unsupported ecosystem, or beyond the reported package list. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.

54Moderate · 0% of overall

Agent context & guidance

1Critical
How it's scored
0/45Agent instructions — no CLAUDE.md / AGENTS.md / editor rules
0/15Machine-readable docs (llms.txt)
0/40Legible commit history — no data
Inputs used
has_llms_txtno
legible_history_share—
agent_instruction_files—
agent_instruction_max_bytes—
Excluded from scoring (no data or not applicable): Legible commit history. Remaining weights renormalized.

Verify loop (build / test / typecheck)

88Excellent
How it's scored
18/18One-command bootstrap — docs/Makefile
22/22Automated tests
11/11Lint / format config — .flake8, .pylintrc, tox.ini
11/11Static type checking — opentelemetry-exporter-gcp-logging/mypy.ini, opentelemetry-exporter-gcp-monitoring/mypy.ini, opentelemetry-exporter-gcp-monitoring/src/opentelemetry/py.typed, opentelemetry-exporter-gcp-trace/mypy.ini, opentelemetry-exporter-gcp-trace/src/opentelemetry/py.typed, opentelemetry-propagator-gcp/mypy.ini, opentelemetry-propagator-gcp/src/opentelemetry/py.typed, opentelemetry-resourcedetector-gcp/mypy.ini, opentelemetry-resourcedetector-gcp/src/opentelemetry/py.typed
10/10Reproducible environment — Dockerfile, lockfile
0/10Demonstrated agent practice — no data
0/8Automated maintenance — no data
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Inputs used
has_nixno
has_testsyes
lockfilesgo.sum, uv.lock
has_dockerfileyes
typed_languageno
bootstrap_filesdocs/Makefile
has_devcontainerno
has_linter_configyes
typecheck_configsopentelemetry-exporter-gcp-logging/mypy.ini, opentelemetry-exporter-gcp-monitoring/mypy.ini, opentelemetry-exporter-gcp-monitoring/src/opentelemetry/py.typed, opentelemetry-exporter-gcp-trace/mypy.ini, opentelemetry-exporter-gcp-trace/src/opentelemetry/py.typed, opentelemetry-propagator-gcp/mypy.ini, opentelemetry-propagator-gcp/src/opentelemetry/py.typed, opentelemetry-resourcedetector-gcp/mypy.ini, opentelemetry-resourcedetector-gcp/src/opentelemetry/py.typed
agent_commit_share—
toolchain_manifests—
dependency_bot_commit_share—
Excluded from scoring (no data or not applicable): Demonstrated agent practice, Automated maintenance. Remaining weights renormalized.

Code legibility for models

82Good
How it's scored
27/45Type-checkable code — Python with type-check config (opentelemetry-exporter-gcp-logging/mypy.ini, opentelemetry-exporter-gcp-monitoring/mypy.ini, opentelemetry-exporter-gcp-monitoring/src/opentelemetry/py.typed, opentelemetry-exporter-gcp-trace/mypy.ini, opentelemetry-exporter-gcp-trace/src/opentelemetry/py.typed, opentelemetry-propagator-gcp/mypy.ini, opentelemetry-propagator-gcp/src/opentelemetry/py.typed, opentelemetry-resourcedetector-gcp/mypy.ini, opentelemetry-resourcedetector-gcp/src/opentelemetry/py.typed)
55/55Manageable file sizes — 0/81 source files over 60KB
Inputs used
primary_languagePython
largest_source_bytes27,696
source_files_sampled81
oversized_source_files0

Machine-readable interfaces

40At risk
How it's scored
0/40API schema (OpenAPI/GraphQL/proto)
0/20MCP server
40/40Runnable examples — examples, samples
Inputs used
example_dirsexamples, samples
has_mcp_signalno
api_schema_files—

Key facts

83GitHub stars
24contributors
27commits, last 12 months
4days since last push
24releases
1bus factor
23open issues
PyPIpackage ecosystems

Data collection warnings

  • pypi package 'test-common' points at a different repository (https://github.com/dante-signal31/test_common_python); excluded from ecosystem scoring
  • Advisory severity resolved for 120 of 308 advisories (lookup cap); the remainder are reported as unknown severity

More detail

OpenSSF Scorecard 6.2 / 10
6.2aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-21 01:24 UTC

10Binary-Artifactsno binaries found in the repo
n/aBranch-Protectioninternal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
10CI-Tests27 out of 27 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
10Code-Reviewall changesets reviewed
10Contributorsproject has 6 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
6Maintained7 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 6
n/aPackagingpackaging workflow not detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
7SASTSAST tool detected but not run on all commits
10Security-Policysecurity policy file detected
n/aSigned-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
0Vulnerabilities111 existing vulnerabilities detected
Direct dependencies 17
RegistryPackageVersion constraintManifest
PyPIgoogle-cloud-logging~= 3.0opentelemetry-exporter-gcp-logging/setup.cfg
PyPIopentelemetry-sdk>= 1.39.0opentelemetry-exporter-gcp-logging/setup.cfg
PyPIopentelemetry-api>= 1.39.0opentelemetry-exporter-gcp-logging/setup.cfg
PyPIopentelemetry-resourcedetector-gcp>= 1.5.0dev0, == 1.*opentelemetry-exporter-gcp-logging/setup.cfg
PyPIgoogle-cloud-monitoring~= 2.0opentelemetry-exporter-gcp-monitoring/setup.cfg
PyPIopentelemetry-api~= 1.30opentelemetry-exporter-gcp-monitoring/setup.cfg
PyPIopentelemetry-sdk~= 1.30opentelemetry-exporter-gcp-monitoring/setup.cfg
PyPIopentelemetry-resourcedetector-gcp>= 1.5.0dev0, == 1.*opentelemetry-exporter-gcp-monitoring/setup.cfg
PyPIgoogle-cloud-trace~= 1.1opentelemetry-exporter-gcp-trace/setup.cfg
PyPIopentelemetry-api~= 1.30opentelemetry-exporter-gcp-trace/setup.cfg
PyPIopentelemetry-sdk~= 1.30opentelemetry-exporter-gcp-trace/setup.cfg
PyPIopentelemetry-resourcedetector-gcp>= 1.5.0dev0, == 1.*opentelemetry-exporter-gcp-trace/setup.cfg
PyPIopentelemetry-api~= 1.0opentelemetry-propagator-gcp/setup.cfg
PyPIopentelemetry-api~= 1.30opentelemetry-resourcedetector-gcp/setup.cfg
PyPIopentelemetry-sdk~= 1.30opentelemetry-resourcedetector-gcp/setup.cfg
PyPIrequests~= 2.24opentelemetry-resourcedetector-gcp/setup.cfg
PyPItyping_extensions~= 4.0opentelemetry-resourcedetector-gcp/setup.cfg
All dependencies 506

Full resolved dependency set from the GitHub dependency graph: 25 direct and 481 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

RegistryPackageVersionRelation
PyPIgoogle-cloud-logging3.12.1direct
PyPIgoogle-cloud-monitoring2.22.1direct
PyPIgoogle-cloud-monitoring2.28.0direct
PyPIgoogle-cloud-trace1.13.4direct
PyPIgoogle-cloud-trace1.17.0direct
PyPIopentelemetry-api—direct
PyPIopentelemetry-api1.24.0direct
PyPIopentelemetry-api1.25.0direct
PyPIopentelemetry-api1.37.0direct
PyPIopentelemetry-api1.38.0direct
PyPIopentelemetry-api1.41.1direct
PyPIopentelemetry-resourcedetector-gcp—direct
PyPIopentelemetry-resourcedetector-gcp1.10.0a0direct
PyPIopentelemetry-resourcedetector-gcp1.11.0a0direct
PyPIopentelemetry-resourcedetector-gcp1.8.0direct
PyPIopentelemetry-sdk—direct
PyPIopentelemetry-sdk1.24.0direct
PyPIopentelemetry-sdk1.25.0direct
PyPIopentelemetry-sdk1.37.0direct
PyPIopentelemetry-sdk1.38.0direct
PyPIopentelemetry-sdk1.41.1direct
PyPIrequests2.32.3direct
PyPIrequests2.32.5direct
PyPItyping-extensions4.12.2direct
PyPItyping-extensions4.15.0direct
Godario.cat/mergov1.0.2indirect
Gogithub.com/acarl005/stripansiv0.0.0-20180116102854-5a71ef0e047dindirect
Gogithub.com/apparentlymart/go-textseg/v15v15.0.0indirect
Gogithub.com/aws/aws-sdk-go-v2v1.39.6indirect
Gogithub.com/aws/aws-sdk-go-v2/configv1.31.17indirect
Gogithub.com/aws/aws-sdk-go-v2/credentialsv1.18.21indirect
Gogithub.com/aws/aws-sdk-go-v2/feature/ec2/imdsv1.18.13indirect
Gogithub.com/aws/aws-sdk-go-v2/internal/configsourcesv1.4.13indirect
Gogithub.com/aws/aws-sdk-go-v2/internal/endpoints/v2v2.7.13indirect
Gogithub.com/aws/aws-sdk-go-v2/internal/iniv1.8.4indirect
Gogithub.com/aws/aws-sdk-go-v2/service/internal/accept-encodingv1.13.3indirect
Gogithub.com/aws/aws-sdk-go-v2/service/internal/presigned-urlv1.13.13indirect
Gogithub.com/aws/aws-sdk-go-v2/service/ssov1.30.1indirect
Gogithub.com/aws/aws-sdk-go-v2/service/ssooidcv1.35.5indirect
Gogithub.com/aws/aws-sdk-go-v2/service/stsv1.39.1indirect
Gogithub.com/aws/smithy-gov1.23.2indirect
Gogithub.com/azure/go-ansitermv0.0.0-20250102033503-faa5f7b0171cindirect
Gogithub.com/beorn7/perksv1.0.1indirect
Gogithub.com/buger/gotermv1.0.4indirect
Gogithub.com/cenkalti/backoff/v4v4.3.0indirect
Gogithub.com/cenkalti/backoff/v5v5.0.3indirect
Gogithub.com/cespare/xxhash/v2v2.3.0indirect
Gogithub.com/clipperhouse/stringishv0.1.1indirect
Gogithub.com/clipperhouse/uax29/v2v2.3.0indirect
Gogithub.com/compose-spec/compose-go/v2v2.9.1indirect
Gogithub.com/containerd/consolev1.0.5indirect
Gogithub.com/containerd/containerd/apiv1.9.0indirect
Gogithub.com/containerd/containerd/v2v2.1.4indirect
Gogithub.com/containerd/continuityv0.4.5indirect
Gogithub.com/containerd/errdefsv1.0.0indirect
Gogithub.com/containerd/errdefs/pkgv0.3.0indirect
Gogithub.com/containerd/logv0.1.0indirect
Gogithub.com/containerd/platformsv1.0.0-rc.2indirect
Gogithub.com/containerd/ttrpcv1.2.7indirect
Gogithub.com/containerd/typeurl/v2v2.2.3indirect
Gogithub.com/cpuguy83/dockercfgv0.3.2indirect
Gogithub.com/davecgh/go-spewv1.1.2-0.20180830191138-d8f796af33ccindirect
Gogithub.com/defanglabs/secret-detectorv0.0.0-20250811234530-d4b4214cd679indirect
Gogithub.com/distribution/referencev0.6.0indirect
Gogithub.com/docker/buildxv0.29.1indirect
Gogithub.com/docker/cliv28.5.2+incompatibleindirect
Gogithub.com/docker/cli-docs-toolv0.10.0indirect
Gogithub.com/docker/compose/v2v2.40.3indirect
Gogithub.com/docker/distributionv2.8.3+incompatibleindirect
Gogithub.com/docker/dockerv28.5.2+incompatibleindirect
Gogithub.com/docker/docker-credential-helpersv0.9.4indirect
Gogithub.com/docker/gov1.5.1-1.0.20160303222718-d30aec9fd63cindirect
Gogithub.com/docker/go-connectionsv0.6.0indirect
Gogithub.com/docker/go-metricsv0.0.1indirect
Gogithub.com/docker/go-unitsv0.5.0indirect
Gogithub.com/ebitengine/puregov0.9.1indirect
Gogithub.com/eiannone/keyboardv0.0.0-20220611211555-0d226195f203indirect
Gogithub.com/emicklei/go-restful/v3v3.13.0indirect
Gogithub.com/felixge/httpsnoopv1.0.4indirect
Gogithub.com/fsnotify/fseventsv0.2.0indirect
Gogithub.com/fvbommel/sortorderv1.1.0indirect
Gogithub.com/fxamacker/cbor/v2v2.9.0indirect
Gogithub.com/go-logr/logrv1.4.3indirect
Gogithub.com/go-logr/stdrv1.2.2indirect
Gogithub.com/go-ole/go-olev1.3.0indirect
Gogithub.com/go-openapi/jsonpointerv0.22.1indirect
Gogithub.com/go-openapi/jsonreferencev0.21.2indirect
Gogithub.com/go-openapi/swagv0.25.1indirect
Gogithub.com/go-openapi/swag/cmdutilsv0.25.1indirect
Gogithub.com/go-openapi/swag/convv0.25.1indirect
Gogithub.com/go-openapi/swag/fileutilsv0.25.1indirect
Gogithub.com/go-openapi/swag/jsonnamev0.25.1indirect
Gogithub.com/go-openapi/swag/jsonutilsv0.25.1indirect
Gogithub.com/go-openapi/swag/loadingv0.25.1indirect
Gogithub.com/go-openapi/swag/manglingv0.25.1indirect
Gogithub.com/go-openapi/swag/netutilsv0.25.1indirect
Gogithub.com/go-openapi/swag/stringutilsv0.25.1indirect
Gogithub.com/go-openapi/swag/typeutilsv0.25.1indirect
Gogithub.com/go-openapi/swag/yamlutilsv0.25.1indirect
Gogithub.com/go-viper/mapstructure/v2v2.4.0indirect
Gogithub.com/gofrs/flockv0.13.0indirect
Gogithub.com/gogo/protobufv1.3.2indirect
Gogithub.com/golang-jwt/jwt/v5v5.3.0indirect
Gogithub.com/golang/protobufv1.5.4indirect
Gogithub.com/google/gnostic-modelsv0.7.0indirect
Gogithub.com/google/go-cmpv0.7.0indirect
Gogithub.com/google/shlexv0.0.0-20191202100458-e7afc7fbc510indirect
Gogithub.com/google/uuidv1.6.0indirect
Gogithub.com/googlecloudplatform/opentelemetry-operations-e2e-testing/quickstarttestv0.0.0-20251208180208-d58ab0851963indirect
Gogithub.com/gorilla/muxv1.8.1indirect
Gogithub.com/gorilla/websocketv1.5.4-0.20250319132907-e064f32e3674indirect
Gogithub.com/grpc-ecosystem/grpc-gateway/v2v2.27.3indirect
Gogithub.com/hashicorp/errwrapv1.1.0indirect
Gogithub.com/hashicorp/go-cleanhttpv0.5.2indirect
Gogithub.com/hashicorp/go-multierrorv1.1.1indirect
Gogithub.com/hashicorp/go-versionv1.7.0indirect
Gogithub.com/in-toto/in-toto-golangv0.9.0indirect
Gogithub.com/inconshreveable/mousetrapv1.1.0indirect
Gogithub.com/inhies/go-bytesizev0.0.0-20220417184213-4913239db9cfindirect
Gogithub.com/jonboulle/clockworkv0.5.0indirect
Gogithub.com/json-iterator/gov1.1.12indirect
Gogithub.com/klauspost/compressv1.18.1indirect
Gogithub.com/lufia/plan9statsv0.0.0-20251013123823-9fd1530e3ec3indirect
Gogithub.com/magiconair/propertiesv1.8.10indirect
Gogithub.com/masterminds/semver/v3v3.4.0indirect
Gogithub.com/mattn/go-runewidthv0.0.19indirect
Gogithub.com/mattn/go-shellwordsv1.0.12indirect
Gogithub.com/microsoft/go-winiov0.6.2indirect
Gogithub.com/miekg/pkcs11v1.1.1indirect
Gogithub.com/mitchellh/hashstructure/v2v2.0.2indirect
Gogithub.com/moby/buildkitv0.25.2indirect
Gogithub.com/moby/docker-image-specv1.3.1indirect
Gogithub.com/moby/go-archivev0.1.0indirect
Gogithub.com/moby/lockerv1.0.1indirect
Gogithub.com/moby/patternmatcherv0.6.0indirect
Gogithub.com/moby/spdystreamv0.5.1indirect
Gogithub.com/moby/sys/atomicwriterv0.1.0indirect
Gogithub.com/moby/sys/capabilityv0.4.0indirect
Gogithub.com/moby/sys/mountinfov0.7.2indirect
Gogithub.com/moby/sys/sequentialv0.6.0indirect
Gogithub.com/moby/sys/signalv0.7.1indirect
Gogithub.com/moby/sys/symlinkv0.3.0indirect
Gogithub.com/moby/sys/userv0.4.0indirect
Gogithub.com/moby/sys/usernsv0.1.0indirect
Gogithub.com/moby/termv0.5.2indirect
Gogithub.com/modern-go/concurrentv0.0.0-20180306012644-bacd9c7ef1ddindirect
Gogithub.com/modern-go/reflect2v1.0.3-0.20250322232337-35a7c28c31eeindirect
Gogithub.com/morikuni/aecv1.0.0indirect
Gogithub.com/munnerz/goautonegv0.0.0-20191010083416-a7dc8b61c822indirect
Gogithub.com/mxk/go-flowratev0.0.0-20140419014527-cca7078d478findirect
Gogithub.com/opencontainers/go-digestv1.0.0indirect
Gogithub.com/opencontainers/image-specv1.1.1indirect
Gogithub.com/pelletier/go-tomlv1.9.5indirect
Gogithub.com/pkg/errorsv0.9.1indirect
Gogithub.com/planetscale/vtprotobufv0.6.1-0.20240319094008-0393e58bdf10indirect
Gogithub.com/pmezard/go-difflibv1.0.1-0.20181226105442-5d4384ee4fb2indirect
Gogithub.com/power-devops/perfstatv0.0.0-20240221224432-82ca36839d55indirect
Gogithub.com/prometheus/client_golangv1.23.2indirect
Gogithub.com/prometheus/client_modelv0.6.2indirect
Gogithub.com/prometheus/commonv0.67.4indirect
Gogithub.com/prometheus/procfsv0.19.2indirect
Gogithub.com/santhosh-tekuri/jsonschema/v6v6.0.2indirect
Gogithub.com/secure-systems-lab/go-securesystemslibv0.9.1indirect
Gogithub.com/serialx/hashringv0.0.0-20200727003509-22c0c7ab6b1bindirect
Gogithub.com/shibumi/go-pathspecv1.3.0indirect
Gogithub.com/shirou/gopsutil/v4v4.25.10indirect
Gogithub.com/sirupsen/logrusv1.9.3indirect
Gogithub.com/skratchdot/open-golangv0.0.0-20200116055534-eef842397966indirect
Gogithub.com/spf13/cobrav1.10.1indirect
Gogithub.com/spf13/pflagv1.0.10indirect
Gogithub.com/stretchr/testifyv1.11.1indirect
Gogithub.com/testcontainers/testcontainers-gov0.40.0indirect
Gogithub.com/testcontainers/testcontainers-go/modules/composev0.40.0indirect
Gogithub.com/theupdateframework/notaryv0.7.0indirect
Gogithub.com/tilt-dev/fsnotifyv1.4.8-0.20220602155310-fff9c274a375indirect
Gogithub.com/tklauser/go-sysconfv0.3.15indirect
Gogithub.com/tklauser/numcpusv0.10.0indirect
Gogithub.com/tonistiigi/dchapes-modev0.0.0-20250318174251-73d941a28323indirect
Gogithub.com/tonistiigi/fsutilv0.0.0-20250605211040-586307ad452findirect
Gogithub.com/tonistiigi/go-csvvaluev0.0.0-20240814133006-030d3b2625d0indirect
Gogithub.com/tonistiigi/unitsv0.0.0-20180711220420-6950e57a87eaindirect
Gogithub.com/tonistiigi/vt100v0.0.0-20240514184818-90bafcd6ababindirect
Gogithub.com/x448/float16v0.8.4indirect
Gogithub.com/xhit/go-str2duration/v2v2.1.0indirect
Gogithub.com/yusufpapurcu/wmiv1.2.4indirect
Gogithub.com/zclconf/go-ctyv1.17.0indirect
Gogo.opentelemetry.io/auto/sdkv1.2.1indirect
Gogo.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpcv0.63.0indirect
Gogo.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptracev0.63.0indirect
Gogo.opentelemetry.io/contrib/instrumentation/net/http/otelhttpv0.63.0indirect
Gogo.opentelemetry.io/otelv1.38.0indirect
Gogo.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpcv1.38.0indirect
Gogo.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttpv1.38.0indirect
Gogo.opentelemetry.io/otel/exporters/otlp/otlptracev1.38.0indirect
Gogo.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpcv1.38.0indirect
Gogo.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttpv1.38.0indirect
Gogo.opentelemetry.io/otel/metricv1.38.0indirect
Gogo.opentelemetry.io/otel/sdkv1.38.0indirect
Gogo.opentelemetry.io/otel/sdk/metricv1.38.0indirect
Gogo.opentelemetry.io/otel/tracev1.38.0indirect
Gogo.opentelemetry.io/proto/otlpv1.9.0indirect
Gogo.yaml.in/yaml/v2v2.4.3indirect
Gogo.yaml.in/yaml/v3v3.0.4indirect
Gogolang.org/x/cryptov0.43.0indirect
Gogolang.org/x/modv0.29.0indirect
Gogolang.org/x/netv0.46.0indirect
Gogolang.org/x/oauth2v0.32.0indirect
Gogolang.org/x/syncv0.17.0indirect
Gogolang.org/x/sysv0.37.0indirect
Gogolang.org/x/termv0.36.0indirect
Gogolang.org/x/textv0.30.0indirect
Gogolang.org/x/timev0.14.0indirect
Gogolang.org/x/toolsv0.38.0indirect
Gogoogle.golang.org/genproto/googleapis/apiv0.0.0-20251103181224-f26f9409b101indirect
Gogoogle.golang.org/genproto/googleapis/rpcv0.0.0-20251103181224-f26f9409b101indirect
Gogoogle.golang.org/grpcv1.76.0indirect
Gogoogle.golang.org/protobufv1.36.10indirect
Gogopkg.in/evanphx/json-patch.v4v4.13.0indirect
Gogopkg.in/inf.v0v0.9.1indirect
Gogopkg.in/ini.v1v1.67.0indirect
Gogopkg.in/yaml.v3v3.0.1indirect
Gok8s.io/apiv0.34.1indirect
Gok8s.io/apimachineryv0.34.1indirect
Gok8s.io/client-gov0.34.1indirect
Gok8s.io/klog/v2v2.130.1indirect
Gok8s.io/kube-openapiv0.0.0-20250910181357-589584f1c912indirect
Gok8s.io/utilsv0.0.0-20251002143259-bc988d571ff4indirect
Gosigs.k8s.io/jsonv0.0.0-20250730193827-2d320260d730indirect
Gosigs.k8s.io/randfillv1.0.0indirect
Gosigs.k8s.io/structured-merge-diff/v6v6.3.0indirect
Gosigs.k8s.io/yamlv1.6.0indirect
Gotags.cncf.io/container-device-interfacev1.0.1indirect
PyPIabsolufy-imports0.3.1indirect
PyPIadk-sql-agent0.1.0indirect
PyPIaiohappyeyeballs2.6.1indirect
PyPIaiohttp3.13.2indirect
PyPIaiohttp3.13.5indirect
PyPIaiosignal1.4.0indirect
PyPIaiosqlite0.22.1indirect
PyPIalembic1.17.1indirect
PyPIannotated-doc0.0.3indirect
PyPIannotated-types0.7.0indirect
PyPIanyio4.11.0indirect
PyPIattrs25.4.0indirect
PyPIauthlib1.6.5indirect
PyPIblinker1.8.2indirect
PyPIblinker1.9.0indirect
PyPIbottleneck1.6.0indirect
PyPIcachetools5.4.0indirect
PyPIcachetools6.2.1indirect
PyPIcertifi2024.7.4indirect
PyPIcertifi2025.10.5indirect
PyPIcertifi2026.4.22indirect
PyPIcffi2.0.0indirect
PyPIcharset-normalizer3.3.2indirect
PyPIcharset-normalizer3.4.4indirect
PyPIcharset-normalizer3.4.7indirect
PyPIclick8.1.7indirect
PyPIclick8.1.8indirect
PyPIclick8.3.0indirect
PyPIcloudpickle3.1.2indirect
PyPIcolorama0.4.6indirect
PyPIcryptography46.0.3indirect
PyPIcryptography47.0.0indirect
PyPIdataclasses-json0.6.7indirect
PyPIdeprecated1.2.14indirect
PyPIdistro1.9.0indirect
PyPIdocstring-parser0.17.0indirect
PyPIfastapi0.121.0indirect
PyPIflask—indirect
PyPIflask3.0.3indirect
PyPIflask3.1.2indirect
PyPIflask3.1.3indirect
PyPIfrozenlist1.8.0indirect
PyPIfunctions-framework—indirect
PyPIgoogle-adk1.17.0indirect
PyPIgoogle-api-core2.19.1indirect
PyPIgoogle-api-core2.28.1indirect
PyPIgoogle-api-python-client2.186.0indirect
PyPIgoogle-auth2.18.1indirect
PyPIgoogle-auth2.32.0indirect
PyPIgoogle-auth2.42.1indirect
PyPIgoogle-auth-httplib20.2.1indirect
PyPIgoogle-cloud-aiplatform1.124.0indirect
PyPIgoogle-cloud-aiplatform1.125.0indirect
PyPIgoogle-cloud-appengine-logging1.7.0indirect
PyPIgoogle-cloud-audit-log0.4.0indirect
PyPIgoogle-cloud-bigquery3.38.0indirect
PyPIgoogle-cloud-bigquery-storage2.37.0indirect
PyPIgoogle-cloud-bigtable2.34.0indirect
PyPIgoogle-cloud-core2.5.0indirect
PyPIgoogle-cloud-dataplex2.18.0indirect
PyPIgoogle-cloud-discoveryengine0.13.12indirect
PyPIgoogle-cloud-iam2.22.0indirect
PyPIgoogle-cloud-pubsub—indirect
PyPIgoogle-cloud-pubsub2.37.0indirect
PyPIgoogle-cloud-resource-manager1.15.0indirect
PyPIgoogle-cloud-secret-manager2.25.0indirect
PyPIgoogle-cloud-spanner3.59.0indirect
PyPIgoogle-cloud-speech2.34.0indirect
PyPIgoogle-cloud-storage2.19.0indirect
PyPIgoogle-cloud-vectorsearch0.10.0indirect
PyPIgoogle-crc32c1.7.1indirect
PyPIgoogle-genai1.48.0indirect
PyPIgoogle-resumable-media2.7.2indirect
PyPIgoogleapis-common-protos—indirect
PyPIgoogleapis-common-protos1.63.2indirect
PyPIgoogleapis-common-protos1.71.0indirect
PyPIgoogleapis-common-protos1.74.0indirect
PyPIgraphviz0.21indirect
PyPIgreenlet3.2.4indirect
PyPIgrpc-google-iam-v10.14.3indirect
PyPIgrpc-interceptor0.15.4indirect
PyPIgrpcio1.63.0indirect
PyPIgrpcio1.64.1indirect
PyPIgrpcio1.76.0indirect
PyPIgrpcio-status1.64.1indirect
PyPIgrpcio-status1.76.0indirect
PyPIgunicorn23.0.0indirect
PyPIh110.16.0indirect
PyPIhttpcore1.0.9indirect
PyPIhttplib20.31.0indirect
PyPIhttpx0.28.1indirect
PyPIhttpx-sse0.4.3indirect
PyPIidna3.11indirect
PyPIidna3.13indirect
PyPIidna3.7indirect
PyPIimportlib-metadata7.1.0indirect
PyPIimportlib-metadata8.7.0indirect
PyPIimportlib-metadata8.7.1indirect
PyPIiniconfig2.3.0indirect
PyPIinstrumentation-quickstart0.1.0indirect
PyPIitsdangerous2.2.0indirect
PyPIjinja23.1.4indirect
PyPIjinja23.1.6indirect
PyPIjoserfc1.6.4indirect
PyPIjsonpatch1.33indirect
PyPIjsonpointer3.0.0indirect
PyPIjsonschema4.25.1indirect
PyPIjsonschema-specifications2025.9.1indirect
PyPIlangchain-classic1.0.0indirect
PyPIlangchain-community0.4.1indirect
PyPIlangchain-core1.0.3indirect
PyPIlangchain-google-vertexai3.0.2indirect
PyPIlangchain-protocol0.0.12indirect
PyPIlangchain-tests1.1.6indirect
PyPIlangchain-text-splitters1.0.0indirect
PyPIlanggraph1.0.2indirect
PyPIlanggraph-checkpoint3.0.1indirect
PyPIlanggraph-prebuilt1.0.2indirect
PyPIlanggraph-sdk0.2.9indirect
PyPIlanggraph-sql-agent0.1.0indirect
PyPIlangsmith0.4.41indirect
PyPImako1.3.10indirect
PyPImarkdown-it-py4.0.0indirect
PyPImarkupsafe2.1.5indirect
PyPImarkupsafe3.0.3indirect
PyPImarshmallow3.26.1indirect
PyPImcp1.20.0indirect
PyPImdurl0.1.2indirect
PyPImmh35.2.1indirect
PyPImultidict6.7.0indirect
PyPImultidict6.7.1indirect
PyPImypy-extensions1.1.0indirect
PyPInumexpr2.14.1indirect
PyPInumpy2.3.4indirect
PyPIopentelemetry-exporter-gcp-logging1.10.0a0indirect
PyPIopentelemetry-exporter-gcp-logging1.11.0a0indirect
PyPIopentelemetry-exporter-gcp-monitoring1.10.0a0indirect
PyPIopentelemetry-exporter-gcp-monitoring1.11.0a0indirect
PyPIopentelemetry-exporter-gcp-trace—indirect
PyPIopentelemetry-exporter-gcp-trace1.10.0indirect
PyPIopentelemetry-exporter-otlp-proto-common1.37.0indirect
PyPIopentelemetry-exporter-otlp-proto-common1.38.0indirect
PyPIopentelemetry-exporter-otlp-proto-common1.41.1indirect
PyPIopentelemetry-exporter-otlp-proto-grpc1.24.0indirect
PyPIopentelemetry-exporter-otlp-proto-grpc1.37.0indirect
PyPIopentelemetry-exporter-otlp-proto-grpc1.38.0indirect
PyPIopentelemetry-exporter-otlp-proto-http1.24.0indirect
PyPIopentelemetry-exporter-otlp-proto-http1.37.0indirect
PyPIopentelemetry-exporter-otlp-proto-http1.41.1indirect
PyPIopentelemetry-instrumentation0.46b0indirect
PyPIopentelemetry-instrumentation0.58b0indirect
PyPIopentelemetry-instrumentation0.59b0indirect
PyPIopentelemetry-instrumentation0.62b1indirect
PyPIopentelemetry-instrumentation-dbapi0.58b0indirect
PyPIopentelemetry-instrumentation-dbapi0.59b0indirect
PyPIopentelemetry-instrumentation-flask0.46b0indirect
PyPIopentelemetry-instrumentation-flask0.59b0indirect
PyPIopentelemetry-instrumentation-flask0.62b1indirect
PyPIopentelemetry-instrumentation-google-genai0.4b0indirect
PyPIopentelemetry-instrumentation-httpx0.59b0indirect
PyPIopentelemetry-instrumentation-logging0.62b1indirect
PyPIopentelemetry-instrumentation-requests0.46b0indirect
PyPIopentelemetry-instrumentation-requests0.59b0indirect
PyPIopentelemetry-instrumentation-requests0.62b1indirect
PyPIopentelemetry-instrumentation-sqlite30.58b0indirect
PyPIopentelemetry-instrumentation-sqlite30.59b0indirect
PyPIopentelemetry-instrumentation-vertexai2.0b0indirect
PyPIopentelemetry-instrumentation-vertexai2.1b0indirect
PyPIopentelemetry-instrumentation-wsgi0.46b0indirect
PyPIopentelemetry-instrumentation-wsgi0.59b0indirect
PyPIopentelemetry-instrumentation-wsgi0.62b1indirect
PyPIopentelemetry-propagator-gcp—indirect
PyPIopentelemetry-proto1.37.0indirect
PyPIopentelemetry-proto1.38.0indirect
PyPIopentelemetry-proto1.41.1indirect
PyPIopentelemetry-semantic-conventions0.46b0indirect
PyPIopentelemetry-semantic-conventions0.58b0indirect
PyPIopentelemetry-semantic-conventions0.59b0indirect
PyPIopentelemetry-semantic-conventions0.62b1indirect
PyPIopentelemetry-util-genai0.2b0indirect
PyPIopentelemetry-util-http0.46b0indirect
PyPIopentelemetry-util-http0.59b0indirect
PyPIopentelemetry-util-http0.62b1indirect
PyPIorjson3.11.4indirect
PyPIormsgpack1.12.0indirect
PyPIpackaging24.1indirect
PyPIpackaging25.0indirect
PyPIpackaging26.2indirect
PyPIpluggy1.6.0indirect
PyPIprometheus-client0.23.1indirect
PyPIpropcache0.4.1indirect
PyPIproto-plus1.24.0indirect
PyPIproto-plus1.26.1indirect
PyPIprotobuf5.27.2indirect
PyPIprotobuf6.33.0indirect
PyPIprotobuf6.33.6indirect
PyPIpy-cpuinfo9.0.0indirect
PyPIpyarrow21.0.0indirect
PyPIpyarrow24.0.0indirect
PyPIpyasn10.6.0indirect
PyPIpyasn10.6.1indirect
PyPIpyasn1-modules0.4.0indirect
PyPIpyasn1-modules0.4.2indirect
PyPIpycparser2.23indirect
PyPIpycparser3.0indirect
PyPIpydantic—indirect
PyPIpydantic2.12.3indirect
PyPIpydantic2.12.4indirect
PyPIpydantic-core2.41.4indirect
PyPIpydantic-core2.41.5indirect
PyPIpydantic-settings2.11.0indirect
PyPIpygments2.19.2indirect
PyPIpyjwt2.10.1indirect
PyPIpyopenssl26.1.0indirect
PyPIpyparsing3.2.5indirect
PyPIpytest9.0.3indirect
PyPIpytest-asyncio1.3.0indirect
PyPIpytest-benchmark5.2.3indirect
PyPIpytest-codspeed4.5.0indirect
PyPIpytest-recording0.13.4indirect
PyPIpytest-socket0.7.0indirect
PyPIpython-dateutil2.9.0.post0indirect
PyPIpython-dotenv1.2.1indirect
PyPIpython-json-logger4.0.0indirect
PyPIpython-multipart0.0.20indirect
PyPIpywin32311indirect
PyPIpyyaml6.0.3indirect
PyPIreferencing0.37.0indirect
PyPIrequests-toolbelt1.0.0indirect
PyPIrich14.2.0indirect
PyPIrpds-py0.28.0indirect
PyPIrsa4.9indirect
PyPIrsa4.9.1indirect
PyPIshapely2.1.2indirect
PyPIsix1.17.0indirect
PyPIsniffio1.3.1indirect
PyPIsphinx—indirect
PyPIsphinx-autodoc-typehints—indirect
PyPIsqlalchemy2.0.44indirect
PyPIsqlalchemy-spanner1.17.1indirect
PyPIsqlparse0.5.3indirect
PyPIsse-starlette3.0.3indirect
PyPIstarlette0.49.3indirect
PyPIsyrupy5.1.0indirect
PyPItenacity8.5.0indirect
PyPItenacity9.1.2indirect
PyPItyping-inspect0.9.0indirect
PyPItyping-inspection0.4.2indirect
PyPItzdata2025.2indirect
PyPItzlocal5.3.1indirect
PyPIuritemplate4.2.0indirect
PyPIurllib32.2.2indirect
PyPIurllib32.5.0indirect
PyPIurllib32.6.3indirect
PyPIuuid-utils0.14.1indirect
PyPIuvicorn0.38.0indirect
PyPIvalidators0.35.0indirect
PyPIvcrpy8.1.1indirect
PyPIwaitress—indirect
PyPIwatchdog6.0.0indirect
PyPIwebsockets15.0.1indirect
PyPIwerkzeug3.0.3indirect
PyPIwerkzeug3.1.3indirect
PyPIwerkzeug3.1.8indirect
PyPIwrapt1.16.0indirect
PyPIwrapt1.17.3indirect
PyPIwrapt2.1.2indirect
PyPIxxhash3.6.0indirect
PyPIyarl1.22.0indirect
PyPIyarl1.23.0indirect
PyPIzipp3.19.2indirect
PyPIzipp3.23.0indirect
PyPIzipp3.23.1indirect
PyPIzstandard0.25.0indirect
Dependency advisories 63

This repository publishes no package the index resolves, so its own dependency graph was assessed — 493 packages, which also include development and test pins that never ship: 63 carry known advisories, of which 2 are direct. 13 could not be assessed — no resolved version, an unsupported ecosystem, or beyond the reported package list.

PackageVersionRelationSeverityAdvisoriesFixed in
aiohttp3.13.2indirectcritical583.14.1
golang.org/x/cryptov0.43.0indirectcritical310.52.0
google.golang.org/grpcv1.76.0indirectcritical21.79.3
aiohttp3.13.5indirecthigh223.14.1
github.com/containerd/containerd/v2v2.1.4indirecthigh162.3.2
github.com/docker/cliv28.5.2+incompatibleindirecthigh229.2.0+incompatible
github.com/docker/dockerv28.5.2+incompatibleindirecthigh1029.3.1
github.com/moby/buildkitv0.25.2indirecthigh40.28.1
go.opentelemetry.io/otelv1.38.0indirecthigh11.41.0
go.opentelemetry.io/otel/sdkv1.38.0indirecthigh31.43.0
requests2.32.3directmoderate42.33.0
requests2.32.5directmoderate22.33.0
github.com/in-toto/in-toto-golangv0.9.0indirectmoderate20.11.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttpv1.38.0indirectmoderate21.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttpv1.38.0indirectmoderate21.43.0
golang.org/x/netv0.46.0indirectmoderate81.26.3
authlib1.6.5indirectunknown16—
click8.1.7indirectunknown1—
click8.1.8indirectunknown1—
click8.3.0indirectunknown1—
cryptography46.0.3indirectunknown7—
cryptography47.0.0indirectunknown1—
flask3.0.3indirectunknown2—
flask3.1.2indirectunknown2—
github.com/docker/compose/v2v2.40.3indirectunknown129.2.0+incompatible
golang.org/x/sysv0.37.0indirectunknown10.44.0
google-adk1.17.0indirectunknown2—
google-cloud-aiplatform1.124.0indirectunknown4—
google-cloud-aiplatform1.125.0indirectunknown4—
httplib20.31.0indirectunknown1—
idna3.11indirectunknown2—
idna3.13indirectunknown2—
idna3.7indirectunknown2—
jinja23.1.4indirectunknown6—
joserfc1.6.4indirectunknown4—
langchain-classic1.0.0indirectunknown2—
langchain-core1.0.3indirectunknown12—
langchain-text-splitters1.0.0indirectunknown2—
langgraph1.0.2indirectunknown2—
langgraph-checkpoint3.0.1indirectunknown4—
langgraph-sdk0.2.9indirectunknown2—
langsmith0.4.41indirectunknown7—
mako1.3.10indirectunknown4—
marshmallow3.26.1indirectunknown2—
mcp1.20.0indirectunknown4—
orjson3.11.4indirectunknown2—
protobuf5.27.2indirectunknown4—
protobuf6.33.0indirectunknown2—
pyarrow21.0.0indirectunknown2—
pyasn10.6.0indirectunknown2—
pyasn10.6.1indirectunknown4—
pygments2.19.2indirectunknown2—
pyjwt2.10.1indirectunknown13—
python-dotenv1.2.1indirectunknown2—
python-multipart0.0.20indirectunknown14—
sqlparse0.5.3indirectunknown1—
starlette0.49.3indirectunknown10—
urllib32.2.2indirectunknown12—
urllib32.5.0indirectunknown8—
urllib32.6.3indirectunknown4—
vcrpy8.1.1indirectunknown1—
werkzeug3.0.3indirectunknown10—
werkzeug3.1.3indirectunknown6—

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

Raw JSON report machine-readable
{
  "data": {
    "repo": {
      "topics": [
        "opentelemetry",
        "opentelemetry-python",
        "python"
      ],
      "is_fork": false,
      "size_kb": 4293,
      "has_wiki": true,
      "homepage": "https://google-cloud-opentelemetry.readthedocs.io/en/stable/",
      "languages": {
        "Shell": 1806,
        "Python": 220685,
        "Dockerfile": 1521
      },
      "pushed_at": "2026-07-16T20:18:30Z",
      "created_at": "2020-03-02T22:00:22Z",
      "owner_type": "Organization",
      "updated_at": "2026-06-30T16:39:01Z",
      "description": "OpenTelemetry Python exporters for Google Cloud Monitoring and Trace",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Python",
      "significant_languages": [
        "Python"
      ]
    },
    "owner": {
      "blog": "https://cloud.google.com",
      "name": "Google Cloud Platform",
      "type": "Organization",
      "login": "GoogleCloudPlatform",
      "company": null,
      "location": null,
      "followers": 21253,
      "avatar_url": "https://avatars.githubusercontent.com/u/2810941?v=4",
      "created_at": "2012-11-16T04:52:17Z",
      "is_verified": null,
      "public_repos": 1498,
      "account_age_days": 4994
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases_count": 24,
      "commits_last_year": 27,
      "latest_release_at": "2026-04-28T20:35:58Z",
      "latest_release_tag": "v1.12.0",
      "releases_from_tags": false,
      "days_since_last_push": 4,
      "active_weeks_last_year": 10,
      "days_since_latest_release": 83,
      "mean_days_between_releases": 163.1
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 75,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "test-common",
          "exists": true,
          "license": "BSD-3",
          "keywords": [
            "test",
            "Development Status :: 4 - Beta",
            "Intended Audience :: Developers",
            "Intended Audience :: Other Audience",
            "License :: OSI Approved :: BSD License",
            "Operating System :: POSIX :: Linux",
            "Programming Language :: Python :: 3",
            "Programming Language :: Python :: 3.7",
            "Topic :: System"
          ],
          "ecosystem": "pypi",
          "matches_repo": false,
          "registry_url": "https://pypi.org/project/test-common/",
          "is_deprecated": false,
          "latest_version": "1.3.0.post3",
          "repository_url": "https://github.com/dante-signal31/test_common_python",
          "versions_count": 19,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 115,
          "first_published_at": "2020-01-17T23:30:26.679862Z",
          "latest_published_at": "2021-12-11T19:03:46.401764Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 1682
        },
        {
          "name": "opentelemetry-propagator-gcp",
          "exists": true,
          "license": "Apache-2.0",
          "keywords": [
            "Development Status :: 4 - Beta",
            "Intended Audience :: Developers",
            "License :: OSI Approved :: Apache Software License",
            "Programming Language :: Python",
            "Programming Language :: Python :: 3",
            "Programming Language :: Python :: 3.10",
            "Programming Language :: Python :: 3.11",
            "Programming Language :: Python :: 3.12",
            "Programming Language :: Python :: 3.13",
            "Programming Language :: Python :: 3.9"
          ],
          "ecosystem": "pypi",
          "matches_repo": true,
          "registry_url": "https://pypi.org/project/opentelemetry-propagator-gcp/",
          "is_deprecated": false,
          "latest_version": "1.12.0",
          "repository_url": "https://github.com/GoogleCloudPlatform/opentelemetry-operations-python/tree/main/opentelemetry-propagator-gcp",
          "versions_count": 14,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 1519502,
          "first_published_at": "2021-04-22T19:39:41.742882Z",
          "latest_published_at": "2026-04-28T20:59:42.634698Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 83
        },
        {
          "name": "opentelemetry-exporter-gcp-trace",
          "exists": true,
          "license": "Apache-2.0",
          "keywords": [
            "Development Status :: 4 - Beta",
            "Intended Audience :: Developers",
            "License :: OSI Approved :: Apache Software License",
            "Programming Language :: Python",
            "Programming Language :: Python :: 3",
            "Programming Language :: Python :: 3.10",
            "Programming Language :: Python :: 3.11",
            "Programming Language :: Python :: 3.12",
            "Programming Language :: Python :: 3.13",
            "Programming Language :: Python :: 3.9"
          ],
          "ecosystem": "pypi",
          "matches_repo": true,
          "registry_url": "https://pypi.org/project/opentelemetry-exporter-gcp-trace/",
          "is_deprecated": false,
          "latest_version": "1.12.0",
          "repository_url": "https://github.com/GoogleCloudPlatform/opentelemetry-operations-python/tree/main/opentelemetry-exporter-gcp-trace",
          "versions_count": 14,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 10700796,
          "first_published_at": "2021-04-22T19:39:40.084312Z",
          "latest_published_at": "2026-04-28T20:59:41.974418Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 83
        },
        {
          "name": "opentelemetry-exporter-gcp-logging",
          "exists": true,
          "license": "Apache-2.0",
          "keywords": [
            "Development Status :: 4 - Beta",
            "Intended Audience :: Developers",
            "License :: OSI Approved :: Apache Software License",
            "Programming Language :: Python",
            "Programming Language :: Python :: 3",
            "Programming Language :: Python :: 3.10",
            "Programming Language :: Python :: 3.11",
            "Programming Language :: Python :: 3.12",
            "Programming Language :: Python :: 3.9"
          ],
          "ecosystem": "pypi",
          "matches_repo": true,
          "registry_url": "https://pypi.org/project/opentelemetry-exporter-gcp-logging/",
          "is_deprecated": false,
          "latest_version": "1.12.0a0",
          "repository_url": "https://github.com/GoogleCloudPlatform/opentelemetry-operations-python/tree/main/opentelemetry-exporter-gcp-logging",
          "versions_count": 4,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 7083292,
          "first_published_at": "2025-02-04T19:44:55.568156Z",
          "latest_published_at": "2026-04-28T20:59:40.237591Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 83
        },
        {
          "name": "opentelemetry-resourcedetector-gcp",
          "exists": true,
          "license": "Apache-2.0",
          "keywords": [
            "Development Status :: 4 - Beta",
            "Intended Audience :: Developers",
            "License :: OSI Approved :: Apache Software License",
            "Programming Language :: Python",
            "Programming Language :: Python :: 3",
            "Programming Language :: Python :: 3.10",
            "Programming Language :: Python :: 3.11",
            "Programming Language :: Python :: 3.12",
            "Programming Language :: Python :: 3.13",
            "Programming Language :: Python :: 3.9"
          ],
          "ecosystem": "pypi",
          "matches_repo": true,
          "registry_url": "https://pypi.org/project/opentelemetry-resourcedetector-gcp/",
          "is_deprecated": false,
          "latest_version": "1.12.0a0",
          "repository_url": "https://github.com/GoogleCloudPlatform/opentelemetry-operations-python/tree/main/opentelemetry-resourcedetector-gcp",
          "versions_count": 13,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 17285305,
          "first_published_at": "2021-04-22T19:39:43.334784Z",
          "latest_published_at": "2026-04-28T20:59:43.195878Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 83
        },
        {
          "name": "opentelemetry-exporter-gcp-monitoring",
          "exists": true,
          "license": "Apache-2.0",
          "keywords": [
            "Development Status :: 4 - Beta",
            "Intended Audience :: Developers",
            "License :: OSI Approved :: Apache Software License",
            "Programming Language :: Python",
            "Programming Language :: Python :: 3",
            "Programming Language :: Python :: 3.10",
            "Programming Language :: Python :: 3.11",
            "Programming Language :: Python :: 3.12",
            "Programming Language :: Python :: 3.13",
            "Programming Language :: Python :: 3.9"
          ],
          "ecosystem": "pypi",
          "matches_repo": true,
          "registry_url": "https://pypi.org/project/opentelemetry-exporter-gcp-monitoring/",
          "is_deprecated": false,
          "latest_version": "1.12.0a0",
          "repository_url": "https://github.com/GoogleCloudPlatform/opentelemetry-operations-python/tree/main/opentelemetry-exporter-gcp-monitoring",
          "versions_count": 13,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 5955513,
          "first_published_at": "2021-04-22T19:39:38.632557Z",
          "latest_published_at": "2026-04-28T20:59:40.982673Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 83
        }
      ]
    },
    "popularity": {
      "forks": 47,
      "stars": 83,
      "watchers": 33,
      "open_issues_and_prs": 76
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples",
        "samples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "docs/Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "opentelemetry-exporter-gcp-logging/mypy.ini",
        "opentelemetry-exporter-gcp-monitoring/mypy.ini",
        "opentelemetry-exporter-gcp-monitoring/src/opentelemetry/py.typed",
        "opentelemetry-exporter-gcp-trace/mypy.ini",
        "opentelemetry-exporter-gcp-trace/src/opentelemetry/py.typed",
        "opentelemetry-propagator-gcp/mypy.ini",
        "opentelemetry-propagator-gcp/src/opentelemetry/py.typed",
        "opentelemetry-resourcedetector-gcp/mypy.ini",
        "opentelemetry-resourcedetector-gcp/src/opentelemetry/py.typed"
      ],
      "largest_source_bytes": 27696,
      "source_files_sampled": 81,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "e2e-test-server/requirements-dockerfile.txt",
        "e2e-test-server/requirements-shared.txt",
        "e2e-test-server/requirements.txt",
        "opentelemetry-exporter-gcp-logging/setup.cfg",
        "opentelemetry-exporter-gcp-logging/setup.py",
        "opentelemetry-exporter-gcp-monitoring/setup.cfg",
        "opentelemetry-exporter-gcp-monitoring/setup.py",
        "opentelemetry-exporter-gcp-trace/setup.cfg",
        "opentelemetry-exporter-gcp-trace/setup.py",
        "opentelemetry-propagator-gcp/setup.cfg",
        "opentelemetry-propagator-gcp/setup.py",
        "opentelemetry-resourcedetector-gcp/setup.cfg",
        "opentelemetry-resourcedetector-gcp/setup.py",
        "pyproject.toml",
        "test-common/setup.cfg",
        "test-common/setup.py"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "aiohttp",
            "direct": false,
            "version": "3.13.2",
            "severity": "critical",
            "ecosystem": "pypi",
            "cvss_score": 9.1,
            "advisory_ids": [
              "GHSA-2fqr-mr3j-6wp8",
              "GHSA-2vrm-gr82-f7m5",
              "GHSA-3wq7-rqq7-wx6j",
              "GHSA-4fvr-rgm6-gqmc",
              "GHSA-4m7w-qmgq-4wj5",
              "GHSA-54jq-c3m8-4m76",
              "GHSA-63hf-3vf5-4wqf",
              "GHSA-63hw-fmq6-xxg2",
              "GHSA-69f9-5gxw-wvc2",
              "GHSA-6jhg-hg63-jvvf"
            ],
            "fixed_version": "3.14.1",
            "advisory_count": 58,
            "oldest_advisory_days": 196
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.43.0",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 10,
            "advisory_ids": [
              "GHSA-45gg-vh54-h5m9",
              "GHSA-5cgq-3rg8-m6cv",
              "GHSA-78mq-xcr3-xm33",
              "GHSA-89gr-r52h-f8rx",
              "GHSA-9m57-25v3-79x9",
              "GHSA-f5wc-c3c7-36mc",
              "GHSA-f6x5-jh6r-wrfv",
              "GHSA-j5w8-q4qc-rx2x",
              "GHSA-jppx-rxg9-jmrx",
              "GHSA-q4h4-gmj2-qvw2"
            ],
            "fixed_version": "0.52.0",
            "advisory_count": 31,
            "oldest_advisory_days": 243
          },
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.76.0",
            "severity": "critical",
            "ecosystem": "go",
            "cvss_score": 9.1,
            "advisory_ids": [
              "GHSA-p77j-4mvh-x3m3",
              "GO-2026-4762"
            ],
            "fixed_version": "1.79.3",
            "advisory_count": 2,
            "oldest_advisory_days": 124
          },
          {
            "name": "aiohttp",
            "direct": false,
            "version": "3.13.5",
            "severity": "high",
            "ecosystem": "pypi",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-2fqr-mr3j-6wp8",
              "GHSA-4fvr-rgm6-gqmc",
              "GHSA-4m7w-qmgq-4wj5",
              "GHSA-63hw-fmq6-xxg2",
              "GHSA-9x8q-7h8h-wcw9",
              "GHSA-g3cq-j2xw-wf74",
              "GHSA-hg6j-4rv6-33pg",
              "GHSA-hpj7-wq8m-9hgp",
              "GHSA-jg22-mg44-37j8",
              "GHSA-m6qw-4cw2-hm4m"
            ],
            "fixed_version": "3.14.1",
            "advisory_count": 22,
            "oldest_advisory_days": 47
          },
          {
            "name": "github.com/containerd/containerd/v2",
            "direct": false,
            "version": "v2.1.4",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 8.8,
            "advisory_ids": [
              "GHSA-33vj-92qq-66hc",
              "GHSA-cvxm-645q-p574",
              "GHSA-fqw6-gf59-qr4w",
              "GHSA-jpcc-p29g-p8mq",
              "GHSA-m6hq-p25p-ffr2",
              "GHSA-pwhc-rpq9-4c8w",
              "GHSA-rgh6-rfwx-v388",
              "GHSA-xhf5-7wjv-pqxp",
              "GO-2025-4100",
              "GO-2025-4108"
            ],
            "fixed_version": "2.3.2",
            "advisory_count": 16,
            "oldest_advisory_days": 256
          },
          {
            "name": "github.com/docker/cli",
            "direct": false,
            "version": "v28.5.2+incompatible",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-p436-gjf2-799p",
              "GO-2026-4610"
            ],
            "fixed_version": "29.2.0+incompatible",
            "advisory_count": 2,
            "oldest_advisory_days": 138
          },
          {
            "name": "github.com/docker/docker",
            "direct": false,
            "version": "v28.5.2+incompatible",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 8.8,
            "advisory_ids": [
              "GHSA-pxq6-2prw-chj9",
              "GHSA-rg2x-37c3-w2rh",
              "GHSA-vp62-88p7-qqf5",
              "GHSA-x744-4wpc-v9h2",
              "GHSA-x86f-5xw2-fm2r",
              "GO-2026-4883",
              "GO-2026-4887",
              "GO-2026-5617",
              "GO-2026-5668",
              "GO-2026-5746"
            ],
            "fixed_version": "29.3.1",
            "advisory_count": 10,
            "oldest_advisory_days": 115
          },
          {
            "name": "github.com/moby/buildkit",
            "direct": false,
            "version": "v0.25.2",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 8.4,
            "advisory_ids": [
              "GHSA-4c29-8rgm-jvjj",
              "GHSA-4vrq-3vrq-g6gg",
              "GO-2026-4858",
              "GO-2026-4859"
            ],
            "fixed_version": "0.28.1",
            "advisory_count": 4,
            "oldest_advisory_days": 116
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": false,
            "version": "v1.38.0",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-mh2q-q3fh-2475"
            ],
            "fixed_version": "1.41.0",
            "advisory_count": 1,
            "oldest_advisory_days": 104
          },
          {
            "name": "go.opentelemetry.io/otel/sdk",
            "direct": false,
            "version": "v1.38.0",
            "severity": "high",
            "ecosystem": "go",
            "cvss_score": 7,
            "advisory_ids": [
              "GHSA-9h8m-3fm2-qjrq",
              "GHSA-hfvc-g4fc-pqhx",
              "GO-2026-4394"
            ],
            "fixed_version": "1.43.0",
            "advisory_count": 3,
            "oldest_advisory_days": 168
          },
          {
            "name": "requests",
            "direct": true,
            "version": "2.32.3",
            "severity": "moderate",
            "ecosystem": "pypi",
            "cvss_score": 5.5,
            "advisory_ids": [
              "GHSA-9hjg-9r4m-mvj7",
              "GHSA-gc5v-m9x4-r6x2",
              "PYSEC-2026-1872",
              "PYSEC-2026-2275"
            ],
            "fixed_version": "2.33.0",
            "advisory_count": 4,
            "oldest_advisory_days": 406
          },
          {
            "name": "requests",
            "direct": true,
            "version": "2.32.5",
            "severity": "moderate",
            "ecosystem": "pypi",
            "cvss_score": 5.5,
            "advisory_ids": [
              "GHSA-gc5v-m9x4-r6x2",
              "PYSEC-2026-2275"
            ],
            "fixed_version": "2.33.0",
            "advisory_count": 2,
            "oldest_advisory_days": 117
          },
          {
            "name": "github.com/in-toto/in-toto-golang",
            "direct": false,
            "version": "v0.9.0",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": 4.1,
            "advisory_ids": [
              "GHSA-pmwq-pjrm-6p5r",
              "GO-2026-5547"
            ],
            "fixed_version": "0.11.0",
            "advisory_count": 2,
            "oldest_advisory_days": 73
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp",
            "direct": false,
            "version": "v1.38.0",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-w8rr-5gcm-pp58",
              "GO-2026-4985"
            ],
            "fixed_version": "1.43.0",
            "advisory_count": 2,
            "oldest_advisory_days": 103
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp",
            "direct": false,
            "version": "v1.38.0",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-w8rr-5gcm-pp58",
              "GO-2026-4985"
            ],
            "fixed_version": "1.43.0",
            "advisory_count": 2,
            "oldest_advisory_days": 103
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.46.0",
            "severity": "moderate",
            "ecosystem": "go",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-5cv4-jp36-h3mw",
              "GO-2026-4918",
              "GO-2026-5025",
              "GO-2026-5026",
              "GO-2026-5027",
              "GO-2026-5028",
              "GO-2026-5029",
              "GO-2026-5030"
            ],
            "fixed_version": "1.26.3",
            "advisory_count": 8,
            "oldest_advisory_days": 74
          },
          {
            "name": "authlib",
            "direct": false,
            "version": "1.6.5",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-7432-952r-cw78",
              "GHSA-7wc2-qxgw-g8gg",
              "GHSA-fg6f-75jq-6523",
              "GHSA-jj8c-mmj3-mmgv",
              "GHSA-m344-f55w-2m6j",
              "GHSA-r95x-qfjj-fjj2",
              "GHSA-w8p2-r796-3vmq",
              "GHSA-wvwj-cvrp-7pv5",
              "PYSEC-2026-1201",
              "PYSEC-2026-188"
            ],
            "fixed_version": null,
            "advisory_count": 16,
            "oldest_advisory_days": null
          },
          {
            "name": "click",
            "direct": false,
            "version": "8.1.7",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "PYSEC-2026-2132"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": null
          },
          {
            "name": "click",
            "direct": false,
            "version": "8.1.8",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "PYSEC-2026-2132"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": null
          },
          {
            "name": "click",
            "direct": false,
            "version": "8.3.0",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "PYSEC-2026-2132"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": null
          },
          {
            "name": "cryptography",
            "direct": false,
            "version": "46.0.3",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-537c-gmf6-5ccf",
              "GHSA-m959-cc7f-wv43",
              "GHSA-p423-j2cm-9vmq",
              "GHSA-r6ph-v2qm-q3c2",
              "PYSEC-2026-2141",
              "PYSEC-2026-35",
              "PYSEC-2026-36"
            ],
            "fixed_version": null,
            "advisory_count": 7,
            "oldest_advisory_days": null
          },
          {
            "name": "cryptography",
            "direct": false,
            "version": "47.0.0",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-537c-gmf6-5ccf"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": null
          },
          {
            "name": "flask",
            "direct": false,
            "version": "3.0.3",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-68rp-wp8r-4726",
              "PYSEC-2026-2151"
            ],
            "fixed_version": null,
            "advisory_count": 2,
            "oldest_advisory_days": null
          },
          {
            "name": "flask",
            "direct": false,
            "version": "3.1.2",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-68rp-wp8r-4726",
              "PYSEC-2026-2151"
            ],
            "fixed_version": null,
            "advisory_count": 2,
            "oldest_advisory_days": null
          },
          {
            "name": "github.com/docker/compose/v2",
            "direct": false,
            "version": "v2.40.3",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-4610"
            ],
            "fixed_version": "29.2.0+incompatible",
            "advisory_count": 1,
            "oldest_advisory_days": 132
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.37.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5024"
            ],
            "fixed_version": "0.44.0",
            "advisory_count": 1,
            "oldest_advisory_days": 59
          },
          {
            "name": "google-adk",
            "direct": false,
            "version": "1.17.0",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-rg7c-g689-fr3x",
              "PYSEC-2026-344"
            ],
            "fixed_version": null,
            "advisory_count": 2,
            "oldest_advisory_days": null
          },
          {
            "name": "google-cloud-aiplatform",
            "direct": false,
            "version": "1.124.0",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-qv8j-hgpc-vrq8",
              "GHSA-wh2j-26j7-9728",
              "PYSEC-2026-2499",
              "PYSEC-2026-2500"
            ],
            "fixed_version": null,
            "advisory_count": 4,
            "oldest_advisory_days": null
          },
          {
            "name": "google-cloud-aiplatform",
            "direct": false,
            "version": "1.125.0",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-qv8j-hgpc-vrq8",
              "GHSA-wh2j-26j7-9728",
              "PYSEC-2026-2499",
              "PYSEC-2026-2500"
            ],
            "fixed_version": null,
            "advisory_count": 4,
            "oldest_advisory_days": null
          },
          {
            "name": "httplib2",
            "direct": false,
            "version": "0.31.0",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "PYSEC-2026-3444"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": null
          },
          {
            "name": "idna",
            "direct": false,
            "version": "3.11",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-65pc-fj4g-8rjx",
              "PYSEC-2026-215"
            ],
            "fixed_version": null,
            "advisory_count": 2,
            "oldest_advisory_days": null
          },
          {
            "name": "idna",
            "direct": false,
            "version": "3.13",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-65pc-fj4g-8rjx",
              "PYSEC-2026-215"
            ],
            "fixed_version": null,
            "advisory_count": 2,
            "oldest_advisory_days": null
          },
          {
            "name": "idna",
            "direct": false,
            "version": "3.7",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-65pc-fj4g-8rjx",
              "PYSEC-2026-215"
            ],
            "fixed_version": null,
            "advisory_count": 2,
            "oldest_advisory_days": null
          },
          {
            "name": "jinja2",
            "direct": false,
            "version": "3.1.4",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-cpwx-vrp4-4pq7",
              "GHSA-gmj6-6f8f-6699",
              "GHSA-q2x7-8rv6-6q7h",
              "PYSEC-2026-1471",
              "PYSEC-2026-1472",
              "PYSEC-2026-1475"
            ],
            "fixed_version": null,
            "advisory_count": 6,
            "oldest_advisory_days": null
          },
          {
            "name": "joserfc",
            "direct": false,
            "version": "1.6.4",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-gg9x-qcx2-xmrh",
              "GHSA-wphv-vfrh-23q5",
              "PYSEC-2026-2528",
              "PYSEC-2026-2530"
            ],
            "fixed_version": null,
            "advisory_count": 4,
            "oldest_advisory_days": null
          },
          {
            "name": "langchain-classic",
            "direct": false,
            "version": "1.0.0",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-3644-q5cj-c5c7",
              "PYSEC-2026-2560"
            ],
            "fixed_version": null,
            "advisory_count": 2,
            "oldest_advisory_days": null
          },
          {
            "name": "langchain-core",
            "direct": false,
            "version": "1.0.3",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-2g6r-c272-w58r",
              "GHSA-6qv9-48xg-fc7f",
              "GHSA-926x-3r5x-gfhw",
              "GHSA-c67j-w6g6-q2cm",
              "GHSA-pjwx-r37v-7724",
              "GHSA-qh6h-p6c9-ff54",
              "PYSEC-2026-1518",
              "PYSEC-2026-2193",
              "PYSEC-2026-2562",
              "PYSEC-2026-2563"
            ],
            "fixed_version": null,
            "advisory_count": 12,
            "oldest_advisory_days": null
          },
          {
            "name": "langchain-text-splitters",
            "direct": false,
            "version": "1.0.0",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-fv5p-p927-qmxr",
              "PYSEC-2026-77"
            ],
            "fixed_version": null,
            "advisory_count": 2,
            "oldest_advisory_days": null
          },
          {
            "name": "langgraph",
            "direct": false,
            "version": "1.0.2",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-g48c-2wqr-h844",
              "PYSEC-2026-83"
            ],
            "fixed_version": null,
            "advisory_count": 2,
            "oldest_advisory_days": null
          },
          {
            "name": "langgraph-checkpoint",
            "direct": false,
            "version": "3.0.1",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-fjqc-hq36-qh5p",
              "GHSA-mhr3-j7m5-c7c9",
              "PYSEC-2026-2573",
              "PYSEC-2026-2574"
            ],
            "fixed_version": null,
            "advisory_count": 4,
            "oldest_advisory_days": null
          },
          {
            "name": "langgraph-sdk",
            "direct": false,
            "version": "0.2.9",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-w39p-vh2g-g8g5",
              "PYSEC-2026-2575"
            ],
            "fixed_version": null,
            "advisory_count": 2,
            "oldest_advisory_days": null
          },
          {
            "name": "langsmith",
            "direct": false,
            "version": "0.4.41",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-3644-q5cj-c5c7",
              "GHSA-f4xh-w4cj-qxq8",
              "GHSA-rr7j-v2q5-chgv",
              "GHSA-v34v-rq6j-cj6p",
              "PYSEC-2026-2582",
              "PYSEC-2026-2583",
              "PYSEC-2026-2584"
            ],
            "fixed_version": null,
            "advisory_count": 7,
            "oldest_advisory_days": null
          },
          {
            "name": "mako",
            "direct": false,
            "version": "1.3.10",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-2h4p-vjrc-8xpq",
              "GHSA-v92g-xgxw-vvmm",
              "PYSEC-2026-2617",
              "PYSEC-2026-88"
            ],
            "fixed_version": null,
            "advisory_count": 4,
            "oldest_advisory_days": null
          },
          {
            "name": "marshmallow",
            "direct": false,
            "version": "3.26.1",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-428g-f7cq-pgp5",
              "PYSEC-2026-1605"
            ],
            "fixed_version": null,
            "advisory_count": 2,
            "oldest_advisory_days": null
          },
          {
            "name": "mcp",
            "direct": false,
            "version": "1.20.0",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-9h52-p55h-vw2f",
              "GHSA-jpw9-pfvf-9f58",
              "GHSA-vj7q-gjh5-988w",
              "PYSEC-2026-1617"
            ],
            "fixed_version": null,
            "advisory_count": 4,
            "oldest_advisory_days": null
          },
          {
            "name": "orjson",
            "direct": false,
            "version": "3.11.4",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-hx9q-6w63-j58v",
              "PYSEC-2026-107"
            ],
            "fixed_version": null,
            "advisory_count": 2,
            "oldest_advisory_days": null
          },
          {
            "name": "protobuf",
            "direct": false,
            "version": "5.27.2",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-7gcm-g887-7qv7",
              "GHSA-8qvm-5x2c-j2w7",
              "PYSEC-2026-1805",
              "PYSEC-2026-1806"
            ],
            "fixed_version": null,
            "advisory_count": 4,
            "oldest_advisory_days": null
          },
          {
            "name": "protobuf",
            "direct": false,
            "version": "6.33.0",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-7gcm-g887-7qv7",
              "PYSEC-2026-1805"
            ],
            "fixed_version": null,
            "advisory_count": 2,
            "oldest_advisory_days": null
          },
          {
            "name": "pyarrow",
            "direct": false,
            "version": "21.0.0",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-rgxp-2hwp-jwgg",
              "PYSEC-2026-113"
            ],
            "fixed_version": null,
            "advisory_count": 2,
            "oldest_advisory_days": null
          },
          {
            "name": "pyasn1",
            "direct": false,
            "version": "0.6.0",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-jr27-m4p2-rc6r",
              "PYSEC-2026-2263"
            ],
            "fixed_version": null,
            "advisory_count": 2,
            "oldest_advisory_days": null
          },
          {
            "name": "pyasn1",
            "direct": false,
            "version": "0.6.1",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-63vm-454h-vhhq",
              "GHSA-jr27-m4p2-rc6r",
              "PYSEC-2026-1810",
              "PYSEC-2026-2263"
            ],
            "fixed_version": null,
            "advisory_count": 4,
            "oldest_advisory_days": null
          },
          {
            "name": "pygments",
            "direct": false,
            "version": "2.19.2",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-5239-wwwm-4pmq",
              "PYSEC-2026-2987"
            ],
            "fixed_version": null,
            "advisory_count": 2,
            "oldest_advisory_days": null
          },
          {
            "name": "pyjwt",
            "direct": false,
            "version": "2.10.1",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-752w-5fwx-jx9f",
              "GHSA-993g-76c3-p5m4",
              "GHSA-fhv5-28vv-h8m8",
              "GHSA-jq35-7prp-9v3f",
              "GHSA-w7vc-732c-9m39",
              "GHSA-xgmm-8j9v-c9wx",
              "PYSEC-2025-183",
              "PYSEC-2026-120",
              "PYSEC-2026-175",
              "PYSEC-2026-176"
            ],
            "fixed_version": null,
            "advisory_count": 13,
            "oldest_advisory_days": null
          },
          {
            "name": "python-dotenv",
            "direct": false,
            "version": "1.2.1",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-mf9w-mj56-hr94",
              "PYSEC-2026-2270"
            ],
            "fixed_version": null,
            "advisory_count": 2,
            "oldest_advisory_days": null
          },
          {
            "name": "python-multipart",
            "direct": false,
            "version": "0.0.20",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-5rvq-cxj2-64vf",
              "GHSA-6jv3-5f52-599m",
              "GHSA-mj87-hwqh-73pj",
              "GHSA-pp6c-gr5w-3c5g",
              "GHSA-v9pg-7xvm-68hf",
              "GHSA-vffw-93wf-4j4q",
              "GHSA-wp53-j4wj-2cfg",
              "PYSEC-2026-1852",
              "PYSEC-2026-3036",
              "PYSEC-2026-3037"
            ],
            "fixed_version": null,
            "advisory_count": 14,
            "oldest_advisory_days": null
          },
          {
            "name": "sqlparse",
            "direct": false,
            "version": "0.5.3",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-27jp-wm6q-gp25"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": null
          },
          {
            "name": "starlette",
            "direct": false,
            "version": "0.49.3",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-82w8-qh3p-5jfq",
              "GHSA-86qp-5c8j-p5mr",
              "GHSA-jp82-jpqv-5vv3",
              "GHSA-wqp7-x3pw-xc5r",
              "GHSA-x746-7m8f-x49c",
              "PYSEC-2026-161",
              "PYSEC-2026-2280",
              "PYSEC-2026-2281",
              "PYSEC-2026-248",
              "PYSEC-2026-249"
            ],
            "fixed_version": null,
            "advisory_count": 10,
            "oldest_advisory_days": null
          },
          {
            "name": "urllib3",
            "direct": false,
            "version": "2.2.2",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-2xpw-w6gg-jr37",
              "GHSA-38jv-5279-wg99",
              "GHSA-48p4-8xcf-vxj5",
              "GHSA-gm62-xv2j-4w53",
              "GHSA-pq67-6m6q-mj2v",
              "GHSA-qccp-gfcp-xxvc",
              "PYSEC-2026-141",
              "PYSEC-2026-1994",
              "PYSEC-2026-1996",
              "PYSEC-2026-1997"
            ],
            "fixed_version": null,
            "advisory_count": 12,
            "oldest_advisory_days": null
          },
          {
            "name": "urllib3",
            "direct": false,
            "version": "2.5.0",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-2xpw-w6gg-jr37",
              "GHSA-38jv-5279-wg99",
              "GHSA-gm62-xv2j-4w53",
              "GHSA-qccp-gfcp-xxvc",
              "PYSEC-2026-141",
              "PYSEC-2026-1994",
              "PYSEC-2026-1996",
              "PYSEC-2026-1998"
            ],
            "fixed_version": null,
            "advisory_count": 8,
            "oldest_advisory_days": null
          },
          {
            "name": "urllib3",
            "direct": false,
            "version": "2.6.3",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-mf9v-mfxr-j63j",
              "GHSA-qccp-gfcp-xxvc",
              "PYSEC-2026-141",
              "PYSEC-2026-142"
            ],
            "fixed_version": null,
            "advisory_count": 4,
            "oldest_advisory_days": null
          },
          {
            "name": "vcrpy",
            "direct": false,
            "version": "8.1.1",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-rpj2-4hq8-938g"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": null
          },
          {
            "name": "werkzeug",
            "direct": false,
            "version": "3.0.3",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-29vq-49wr-vm6x",
              "GHSA-87hc-h4r5-73f7",
              "GHSA-f9vj-2wh5-fj8j",
              "GHSA-hgf8-39gv-g3f2",
              "GHSA-q34m-jh98-gwm2",
              "PYSEC-2026-2044",
              "PYSEC-2026-2045",
              "PYSEC-2026-2046",
              "PYSEC-2026-2320",
              "PYSEC-2026-3417"
            ],
            "fixed_version": null,
            "advisory_count": 10,
            "oldest_advisory_days": null
          },
          {
            "name": "werkzeug",
            "direct": false,
            "version": "3.1.3",
            "severity": "unknown",
            "ecosystem": "pypi",
            "cvss_score": null,
            "advisory_ids": [
              "GHSA-29vq-49wr-vm6x",
              "GHSA-87hc-h4r5-73f7",
              "GHSA-hgf8-39gv-g3f2",
              "PYSEC-2026-2044",
              "PYSEC-2026-2046",
              "PYSEC-2026-2320"
            ],
            "fixed_version": null,
            "advisory_count": 6,
            "oldest_advisory_days": null
          }
        ],
        "collected": true,
        "truncated": false,
        "by_severity": {
          "high": 7,
          "unknown": 47,
          "critical": 3,
          "moderate": 6
        },
        "advisory_count": 369,
        "affected_count": 63,
        "assessed_count": 493,
        "assessed_package": null,
        "unassessed_count": 13,
        "direct_affected_count": 2
      },
      "ecosystems": [
        "pypi"
      ],
      "dependencies": [
        {
          "name": "google-cloud-logging",
          "manifest": "opentelemetry-exporter-gcp-logging/setup.cfg",
          "ecosystem": "pypi",
          "version_constraint": "~= 3.0"
        },
        {
          "name": "opentelemetry-sdk",
          "manifest": "opentelemetry-exporter-gcp-logging/setup.cfg",
          "ecosystem": "pypi",
          "version_constraint": ">= 1.39.0"
        },
        {
          "name": "opentelemetry-api",
          "manifest": "opentelemetry-exporter-gcp-logging/setup.cfg",
          "ecosystem": "pypi",
          "version_constraint": ">= 1.39.0"
        },
        {
          "name": "opentelemetry-resourcedetector-gcp",
          "manifest": "opentelemetry-exporter-gcp-logging/setup.cfg",
          "ecosystem": "pypi",
          "version_constraint": ">= 1.5.0dev0, == 1.*"
        },
        {
          "name": "google-cloud-monitoring",
          "manifest": "opentelemetry-exporter-gcp-monitoring/setup.cfg",
          "ecosystem": "pypi",
          "version_constraint": "~= 2.0"
        },
        {
          "name": "opentelemetry-api",
          "manifest": "opentelemetry-exporter-gcp-monitoring/setup.cfg",
          "ecosystem": "pypi",
          "version_constraint": "~= 1.30"
        },
        {
          "name": "opentelemetry-sdk",
          "manifest": "opentelemetry-exporter-gcp-monitoring/setup.cfg",
          "ecosystem": "pypi",
          "version_constraint": "~= 1.30"
        },
        {
          "name": "opentelemetry-resourcedetector-gcp",
          "manifest": "opentelemetry-exporter-gcp-monitoring/setup.cfg",
          "ecosystem": "pypi",
          "version_constraint": ">= 1.5.0dev0, == 1.*"
        },
        {
          "name": "google-cloud-trace",
          "manifest": "opentelemetry-exporter-gcp-trace/setup.cfg",
          "ecosystem": "pypi",
          "version_constraint": "~= 1.1"
        },
        {
          "name": "opentelemetry-api",
          "manifest": "opentelemetry-exporter-gcp-trace/setup.cfg",
          "ecosystem": "pypi",
          "version_constraint": "~= 1.30"
        },
        {
          "name": "opentelemetry-sdk",
          "manifest": "opentelemetry-exporter-gcp-trace/setup.cfg",
          "ecosystem": "pypi",
          "version_constraint": "~= 1.30"
        },
        {
          "name": "opentelemetry-resourcedetector-gcp",
          "manifest": "opentelemetry-exporter-gcp-trace/setup.cfg",
          "ecosystem": "pypi",
          "version_constraint": ">= 1.5.0dev0, == 1.*"
        },
        {
          "name": "opentelemetry-api",
          "manifest": "opentelemetry-propagator-gcp/setup.cfg",
          "ecosystem": "pypi",
          "version_constraint": "~= 1.0"
        },
        {
          "name": "opentelemetry-api",
          "manifest": "opentelemetry-resourcedetector-gcp/setup.cfg",
          "ecosystem": "pypi",
          "version_constraint": "~= 1.30"
        },
        {
          "name": "opentelemetry-sdk",
          "manifest": "opentelemetry-resourcedetector-gcp/setup.cfg",
          "ecosystem": "pypi",
          "version_constraint": "~= 1.30"
        },
        {
          "name": "requests",
          "manifest": "opentelemetry-resourcedetector-gcp/setup.cfg",
          "ecosystem": "pypi",
          "version_constraint": "~= 2.24"
        },
        {
          "name": "typing_extensions",
          "manifest": "opentelemetry-resourcedetector-gcp/setup.cfg",
          "ecosystem": "pypi",
          "version_constraint": "~= 4.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "google-cloud-logging",
            "direct": true,
            "version": "3.12.1",
            "ecosystem": "pypi"
          },
          {
            "name": "google-cloud-monitoring",
            "direct": true,
            "version": "2.22.1",
            "ecosystem": "pypi"
          },
          {
            "name": "google-cloud-monitoring",
            "direct": true,
            "version": "2.28.0",
            "ecosystem": "pypi"
          },
          {
            "name": "google-cloud-trace",
            "direct": true,
            "version": "1.13.4",
            "ecosystem": "pypi"
          },
          {
            "name": "google-cloud-trace",
            "direct": true,
            "version": "1.17.0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-api",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-api",
            "direct": true,
            "version": "1.24.0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-api",
            "direct": true,
            "version": "1.25.0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-api",
            "direct": true,
            "version": "1.37.0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-api",
            "direct": true,
            "version": "1.38.0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-api",
            "direct": true,
            "version": "1.41.1",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-resourcedetector-gcp",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-resourcedetector-gcp",
            "direct": true,
            "version": "1.10.0a0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-resourcedetector-gcp",
            "direct": true,
            "version": "1.11.0a0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-resourcedetector-gcp",
            "direct": true,
            "version": "1.8.0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-sdk",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-sdk",
            "direct": true,
            "version": "1.24.0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-sdk",
            "direct": true,
            "version": "1.25.0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-sdk",
            "direct": true,
            "version": "1.37.0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-sdk",
            "direct": true,
            "version": "1.38.0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-sdk",
            "direct": true,
            "version": "1.41.1",
            "ecosystem": "pypi"
          },
          {
            "name": "requests",
            "direct": true,
            "version": "2.32.3",
            "ecosystem": "pypi"
          },
          {
            "name": "requests",
            "direct": true,
            "version": "2.32.5",
            "ecosystem": "pypi"
          },
          {
            "name": "typing-extensions",
            "direct": true,
            "version": "4.12.2",
            "ecosystem": "pypi"
          },
          {
            "name": "typing-extensions",
            "direct": true,
            "version": "4.15.0",
            "ecosystem": "pypi"
          },
          {
            "name": "dario.cat/mergo",
            "direct": false,
            "version": "v1.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/acarl005/stripansi",
            "direct": false,
            "version": "v0.0.0-20180116102854-5a71ef0e047d",
            "ecosystem": "go"
          },
          {
            "name": "github.com/apparentlymart/go-textseg/v15",
            "direct": false,
            "version": "v15.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2",
            "direct": false,
            "version": "v1.39.6",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/config",
            "direct": false,
            "version": "v1.31.17",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/credentials",
            "direct": false,
            "version": "v1.18.21",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
            "direct": false,
            "version": "v1.18.13",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/configsources",
            "direct": false,
            "version": "v1.4.13",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2",
            "direct": false,
            "version": "v2.7.13",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/internal/ini",
            "direct": false,
            "version": "v1.8.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding",
            "direct": false,
            "version": "v1.13.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
            "direct": false,
            "version": "v1.13.13",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/sso",
            "direct": false,
            "version": "v1.30.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc",
            "direct": false,
            "version": "v1.35.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/aws-sdk-go-v2/service/sts",
            "direct": false,
            "version": "v1.39.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/aws/smithy-go",
            "direct": false,
            "version": "v1.23.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/azure/go-ansiterm",
            "direct": false,
            "version": "v0.0.0-20250102033503-faa5f7b0171c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/beorn7/perks",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/buger/goterm",
            "direct": false,
            "version": "v1.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cenkalti/backoff/v4",
            "direct": false,
            "version": "v4.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cenkalti/backoff/v5",
            "direct": false,
            "version": "v5.0.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cespare/xxhash/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/clipperhouse/stringish",
            "direct": false,
            "version": "v0.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/clipperhouse/uax29/v2",
            "direct": false,
            "version": "v2.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/compose-spec/compose-go/v2",
            "direct": false,
            "version": "v2.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/console",
            "direct": false,
            "version": "v1.0.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/containerd/api",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/containerd/v2",
            "direct": false,
            "version": "v2.1.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/continuity",
            "direct": false,
            "version": "v0.4.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/errdefs",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/errdefs/pkg",
            "direct": false,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/log",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/platforms",
            "direct": false,
            "version": "v1.0.0-rc.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/ttrpc",
            "direct": false,
            "version": "v1.2.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/containerd/typeurl/v2",
            "direct": false,
            "version": "v2.2.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/cpuguy83/dockercfg",
            "direct": false,
            "version": "v0.3.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/davecgh/go-spew",
            "direct": false,
            "version": "v1.1.2-0.20180830191138-d8f796af33cc",
            "ecosystem": "go"
          },
          {
            "name": "github.com/defanglabs/secret-detector",
            "direct": false,
            "version": "v0.0.0-20250811234530-d4b4214cd679",
            "ecosystem": "go"
          },
          {
            "name": "github.com/distribution/reference",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/buildx",
            "direct": false,
            "version": "v0.29.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/cli",
            "direct": false,
            "version": "v28.5.2+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/cli-docs-tool",
            "direct": false,
            "version": "v0.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/compose/v2",
            "direct": false,
            "version": "v2.40.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/distribution",
            "direct": false,
            "version": "v2.8.3+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/docker",
            "direct": false,
            "version": "v28.5.2+incompatible",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/docker-credential-helpers",
            "direct": false,
            "version": "v0.9.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go",
            "direct": false,
            "version": "v1.5.1-1.0.20160303222718-d30aec9fd63c",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go-connections",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go-metrics",
            "direct": false,
            "version": "v0.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/docker/go-units",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/ebitengine/purego",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/eiannone/keyboard",
            "direct": false,
            "version": "v0.0.0-20220611211555-0d226195f203",
            "ecosystem": "go"
          },
          {
            "name": "github.com/emicklei/go-restful/v3",
            "direct": false,
            "version": "v3.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/felixge/httpsnoop",
            "direct": false,
            "version": "v1.0.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fsnotify/fsevents",
            "direct": false,
            "version": "v0.2.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fvbommel/sortorder",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fxamacker/cbor/v2",
            "direct": false,
            "version": "v2.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/logr",
            "direct": false,
            "version": "v1.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logr/stdr",
            "direct": false,
            "version": "v1.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-ole/go-ole",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonpointer",
            "direct": false,
            "version": "v0.22.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/jsonreference",
            "direct": false,
            "version": "v0.21.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag",
            "direct": false,
            "version": "v0.25.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/cmdutils",
            "direct": false,
            "version": "v0.25.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/conv",
            "direct": false,
            "version": "v0.25.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/fileutils",
            "direct": false,
            "version": "v0.25.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/jsonname",
            "direct": false,
            "version": "v0.25.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/jsonutils",
            "direct": false,
            "version": "v0.25.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/loading",
            "direct": false,
            "version": "v0.25.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/mangling",
            "direct": false,
            "version": "v0.25.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/netutils",
            "direct": false,
            "version": "v0.25.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/stringutils",
            "direct": false,
            "version": "v0.25.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/typeutils",
            "direct": false,
            "version": "v0.25.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-openapi/swag/yamlutils",
            "direct": false,
            "version": "v0.25.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-viper/mapstructure/v2",
            "direct": false,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gofrs/flock",
            "direct": false,
            "version": "v0.13.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gogo/protobuf",
            "direct": false,
            "version": "v1.3.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang-jwt/jwt/v5",
            "direct": false,
            "version": "v5.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/golang/protobuf",
            "direct": false,
            "version": "v1.5.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/gnostic-models",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/go-cmp",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/shlex",
            "direct": false,
            "version": "v0.0.0-20191202100458-e7afc7fbc510",
            "ecosystem": "go"
          },
          {
            "name": "github.com/google/uuid",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/googlecloudplatform/opentelemetry-operations-e2e-testing/quickstarttest",
            "direct": false,
            "version": "v0.0.0-20251208180208-d58ab0851963",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gorilla/mux",
            "direct": false,
            "version": "v1.8.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gorilla/websocket",
            "direct": false,
            "version": "v1.5.4-0.20250319132907-e064f32e3674",
            "ecosystem": "go"
          },
          {
            "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
            "direct": false,
            "version": "v2.27.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/errwrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-cleanhttp",
            "direct": false,
            "version": "v0.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-multierror",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/hashicorp/go-version",
            "direct": false,
            "version": "v1.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/in-toto/in-toto-golang",
            "direct": false,
            "version": "v0.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inconshreveable/mousetrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inhies/go-bytesize",
            "direct": false,
            "version": "v0.0.0-20220417184213-4913239db9cf",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jonboulle/clockwork",
            "direct": false,
            "version": "v0.5.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/json-iterator/go",
            "direct": false,
            "version": "v1.1.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/klauspost/compress",
            "direct": false,
            "version": "v1.18.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lufia/plan9stats",
            "direct": false,
            "version": "v0.0.0-20251013123823-9fd1530e3ec3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/magiconair/properties",
            "direct": false,
            "version": "v1.8.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/masterminds/semver/v3",
            "direct": false,
            "version": "v3.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-runewidth",
            "direct": false,
            "version": "v0.0.19",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-shellwords",
            "direct": false,
            "version": "v1.0.12",
            "ecosystem": "go"
          },
          {
            "name": "github.com/microsoft/go-winio",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/miekg/pkcs11",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mitchellh/hashstructure/v2",
            "direct": false,
            "version": "v2.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/buildkit",
            "direct": false,
            "version": "v0.25.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/docker-image-spec",
            "direct": false,
            "version": "v1.3.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/go-archive",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/locker",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/patternmatcher",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/spdystream",
            "direct": false,
            "version": "v0.5.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/atomicwriter",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/capability",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/mountinfo",
            "direct": false,
            "version": "v0.7.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/sequential",
            "direct": false,
            "version": "v0.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/signal",
            "direct": false,
            "version": "v0.7.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/symlink",
            "direct": false,
            "version": "v0.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/user",
            "direct": false,
            "version": "v0.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/sys/userns",
            "direct": false,
            "version": "v0.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/moby/term",
            "direct": false,
            "version": "v0.5.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/concurrent",
            "direct": false,
            "version": "v0.0.0-20180306012644-bacd9c7ef1dd",
            "ecosystem": "go"
          },
          {
            "name": "github.com/modern-go/reflect2",
            "direct": false,
            "version": "v1.0.3-0.20250322232337-35a7c28c31ee",
            "ecosystem": "go"
          },
          {
            "name": "github.com/morikuni/aec",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/munnerz/goautoneg",
            "direct": false,
            "version": "v0.0.0-20191010083416-a7dc8b61c822",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mxk/go-flowrate",
            "direct": false,
            "version": "v0.0.0-20140419014527-cca7078d478f",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/go-digest",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/opencontainers/image-spec",
            "direct": false,
            "version": "v1.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pelletier/go-toml",
            "direct": false,
            "version": "v1.9.5",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pkg/errors",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/planetscale/vtprotobuf",
            "direct": false,
            "version": "v0.6.1-0.20240319094008-0393e58bdf10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pmezard/go-difflib",
            "direct": false,
            "version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/power-devops/perfstat",
            "direct": false,
            "version": "v0.0.0-20240221224432-82ca36839d55",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_golang",
            "direct": false,
            "version": "v1.23.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/client_model",
            "direct": false,
            "version": "v0.6.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/common",
            "direct": false,
            "version": "v0.67.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/prometheus/procfs",
            "direct": false,
            "version": "v0.19.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/santhosh-tekuri/jsonschema/v6",
            "direct": false,
            "version": "v6.0.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/secure-systems-lab/go-securesystemslib",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/serialx/hashring",
            "direct": false,
            "version": "v0.0.0-20200727003509-22c0c7ab6b1b",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shibumi/go-pathspec",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/shirou/gopsutil/v4",
            "direct": false,
            "version": "v4.25.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sirupsen/logrus",
            "direct": false,
            "version": "v1.9.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/skratchdot/open-golang",
            "direct": false,
            "version": "v0.0.0-20200116055534-eef842397966",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cobra",
            "direct": false,
            "version": "v1.10.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": false,
            "version": "v1.0.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/stretchr/testify",
            "direct": false,
            "version": "v1.11.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/testcontainers/testcontainers-go",
            "direct": false,
            "version": "v0.40.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/testcontainers/testcontainers-go/modules/compose",
            "direct": false,
            "version": "v0.40.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/theupdateframework/notary",
            "direct": false,
            "version": "v0.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tilt-dev/fsnotify",
            "direct": false,
            "version": "v1.4.8-0.20220602155310-fff9c274a375",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tklauser/go-sysconf",
            "direct": false,
            "version": "v0.3.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tklauser/numcpus",
            "direct": false,
            "version": "v0.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tonistiigi/dchapes-mode",
            "direct": false,
            "version": "v0.0.0-20250318174251-73d941a28323",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tonistiigi/fsutil",
            "direct": false,
            "version": "v0.0.0-20250605211040-586307ad452f",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tonistiigi/go-csvvalue",
            "direct": false,
            "version": "v0.0.0-20240814133006-030d3b2625d0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tonistiigi/units",
            "direct": false,
            "version": "v0.0.0-20180711220420-6950e57a87ea",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tonistiigi/vt100",
            "direct": false,
            "version": "v0.0.0-20240514184818-90bafcd6abab",
            "ecosystem": "go"
          },
          {
            "name": "github.com/x448/float16",
            "direct": false,
            "version": "v0.8.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xhit/go-str2duration/v2",
            "direct": false,
            "version": "v2.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/yusufpapurcu/wmi",
            "direct": false,
            "version": "v1.2.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/zclconf/go-cty",
            "direct": false,
            "version": "v1.17.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/auto/sdk",
            "direct": false,
            "version": "v1.2.1",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
            "direct": false,
            "version": "v0.63.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace",
            "direct": false,
            "version": "v0.63.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
            "direct": false,
            "version": "v0.63.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel",
            "direct": false,
            "version": "v1.38.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc",
            "direct": false,
            "version": "v1.38.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp",
            "direct": false,
            "version": "v1.38.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
            "direct": false,
            "version": "v1.38.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc",
            "direct": false,
            "version": "v1.38.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp",
            "direct": false,
            "version": "v1.38.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/metric",
            "direct": false,
            "version": "v1.38.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk",
            "direct": false,
            "version": "v1.38.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/sdk/metric",
            "direct": false,
            "version": "v1.38.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/otel/trace",
            "direct": false,
            "version": "v1.38.0",
            "ecosystem": "go"
          },
          {
            "name": "go.opentelemetry.io/proto/otlp",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v2",
            "direct": false,
            "version": "v2.4.3",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v3",
            "direct": false,
            "version": "v3.0.4",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": false,
            "version": "v0.43.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/mod",
            "direct": false,
            "version": "v0.29.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/net",
            "direct": false,
            "version": "v0.46.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/oauth2",
            "direct": false,
            "version": "v0.32.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": false,
            "version": "v0.17.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.37.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/term",
            "direct": false,
            "version": "v0.36.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.30.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/time",
            "direct": false,
            "version": "v0.14.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/tools",
            "direct": false,
            "version": "v0.38.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/api",
            "direct": false,
            "version": "v0.0.0-20251103181224-f26f9409b101",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/genproto/googleapis/rpc",
            "direct": false,
            "version": "v0.0.0-20251103181224-f26f9409b101",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/grpc",
            "direct": false,
            "version": "v1.76.0",
            "ecosystem": "go"
          },
          {
            "name": "google.golang.org/protobuf",
            "direct": false,
            "version": "v1.36.10",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/evanphx/json-patch.v4",
            "direct": false,
            "version": "v4.13.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/inf.v0",
            "direct": false,
            "version": "v0.9.1",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/ini.v1",
            "direct": false,
            "version": "v1.67.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": false,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/api",
            "direct": false,
            "version": "v0.34.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/apimachinery",
            "direct": false,
            "version": "v0.34.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/client-go",
            "direct": false,
            "version": "v0.34.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/klog/v2",
            "direct": false,
            "version": "v2.130.1",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/kube-openapi",
            "direct": false,
            "version": "v0.0.0-20250910181357-589584f1c912",
            "ecosystem": "go"
          },
          {
            "name": "k8s.io/utils",
            "direct": false,
            "version": "v0.0.0-20251002143259-bc988d571ff4",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/json",
            "direct": false,
            "version": "v0.0.0-20250730193827-2d320260d730",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/randfill",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/structured-merge-diff/v6",
            "direct": false,
            "version": "v6.3.0",
            "ecosystem": "go"
          },
          {
            "name": "sigs.k8s.io/yaml",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "tags.cncf.io/container-device-interface",
            "direct": false,
            "version": "v1.0.1",
            "ecosystem": "go"
          },
          {
            "name": "absolufy-imports",
            "direct": false,
            "version": "0.3.1",
            "ecosystem": "pypi"
          },
          {
            "name": "adk-sql-agent",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "aiohappyeyeballs",
            "direct": false,
            "version": "2.6.1",
            "ecosystem": "pypi"
          },
          {
            "name": "aiohttp",
            "direct": false,
            "version": "3.13.2",
            "ecosystem": "pypi"
          },
          {
            "name": "aiohttp",
            "direct": false,
            "version": "3.13.5",
            "ecosystem": "pypi"
          },
          {
            "name": "aiosignal",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "pypi"
          },
          {
            "name": "aiosqlite",
            "direct": false,
            "version": "0.22.1",
            "ecosystem": "pypi"
          },
          {
            "name": "alembic",
            "direct": false,
            "version": "1.17.1",
            "ecosystem": "pypi"
          },
          {
            "name": "annotated-doc",
            "direct": false,
            "version": "0.0.3",
            "ecosystem": "pypi"
          },
          {
            "name": "annotated-types",
            "direct": false,
            "version": "0.7.0",
            "ecosystem": "pypi"
          },
          {
            "name": "anyio",
            "direct": false,
            "version": "4.11.0",
            "ecosystem": "pypi"
          },
          {
            "name": "attrs",
            "direct": false,
            "version": "25.4.0",
            "ecosystem": "pypi"
          },
          {
            "name": "authlib",
            "direct": false,
            "version": "1.6.5",
            "ecosystem": "pypi"
          },
          {
            "name": "blinker",
            "direct": false,
            "version": "1.8.2",
            "ecosystem": "pypi"
          },
          {
            "name": "blinker",
            "direct": false,
            "version": "1.9.0",
            "ecosystem": "pypi"
          },
          {
            "name": "bottleneck",
            "direct": false,
            "version": "1.6.0",
            "ecosystem": "pypi"
          },
          {
            "name": "cachetools",
            "direct": false,
            "version": "5.4.0",
            "ecosystem": "pypi"
          },
          {
            "name": "cachetools",
            "direct": false,
            "version": "6.2.1",
            "ecosystem": "pypi"
          },
          {
            "name": "certifi",
            "direct": false,
            "version": "2024.7.4",
            "ecosystem": "pypi"
          },
          {
            "name": "certifi",
            "direct": false,
            "version": "2025.10.5",
            "ecosystem": "pypi"
          },
          {
            "name": "certifi",
            "direct": false,
            "version": "2026.4.22",
            "ecosystem": "pypi"
          },
          {
            "name": "cffi",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "charset-normalizer",
            "direct": false,
            "version": "3.3.2",
            "ecosystem": "pypi"
          },
          {
            "name": "charset-normalizer",
            "direct": false,
            "version": "3.4.4",
            "ecosystem": "pypi"
          },
          {
            "name": "charset-normalizer",
            "direct": false,
            "version": "3.4.7",
            "ecosystem": "pypi"
          },
          {
            "name": "click",
            "direct": false,
            "version": "8.1.7",
            "ecosystem": "pypi"
          },
          {
            "name": "click",
            "direct": false,
            "version": "8.1.8",
            "ecosystem": "pypi"
          },
          {
            "name": "click",
            "direct": false,
            "version": "8.3.0",
            "ecosystem": "pypi"
          },
          {
            "name": "cloudpickle",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "pypi"
          },
          {
            "name": "colorama",
            "direct": false,
            "version": "0.4.6",
            "ecosystem": "pypi"
          },
          {
            "name": "cryptography",
            "direct": false,
            "version": "46.0.3",
            "ecosystem": "pypi"
          },
          {
            "name": "cryptography",
            "direct": false,
            "version": "47.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "dataclasses-json",
            "direct": false,
            "version": "0.6.7",
            "ecosystem": "pypi"
          },
          {
            "name": "deprecated",
            "direct": false,
            "version": "1.2.14",
            "ecosystem": "pypi"
          },
          {
            "name": "distro",
            "direct": false,
            "version": "1.9.0",
            "ecosystem": "pypi"
          },
          {
            "name": "docstring-parser",
            "direct": false,
            "version": "0.17.0",
            "ecosystem": "pypi"
          },
          {
            "name": "fastapi",
            "direct": false,
            "version": "0.121.0",
            "ecosystem": "pypi"
          },
          {
            "name": "flask",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "flask",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "pypi"
          },
          {
            "name": "flask",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "pypi"
          },
          {
            "name": "flask",
            "direct": false,
            "version": "3.1.3",
            "ecosystem": "pypi"
          },
          {
            "name": "frozenlist",
            "direct": false,
            "version": "1.8.0",
            "ecosystem": "pypi"
          },
          {
            "name": "functions-framework",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "google-adk",
            "direct": false,
            "version": "1.17.0",
            "ecosystem": "pypi"
          },
          {
            "name": "google-api-core",
            "direct": false,
            "version": "2.19.1",
            "ecosystem": "pypi"
          },
          {
            "name": "google-api-core",
            "direct": false,
            "version": "2.28.1",
            "ecosystem": "pypi"
          },
          {
            "name": "google-api-python-client",
            "direct": false,
            "version": "2.186.0",
            "ecosystem": "pypi"
          },
          {
            "name": "google-auth",
            "direct": false,
            "version": "2.18.1",
            "ecosystem": "pypi"
          },
          {
            "name": "google-auth",
            "direct": false,
            "version": "2.32.0",
            "ecosystem": "pypi"
          },
          {
            "name": "google-auth",
            "direct": false,
            "version": "2.42.1",
            "ecosystem": "pypi"
          },
          {
            "name": "google-auth-httplib2",
            "direct": false,
            "version": "0.2.1",
            "ecosystem": "pypi"
          },
          {
            "name": "google-cloud-aiplatform",
            "direct": false,
            "version": "1.124.0",
            "ecosystem": "pypi"
          },
          {
            "name": "google-cloud-aiplatform",
            "direct": false,
            "version": "1.125.0",
            "ecosystem": "pypi"
          },
          {
            "name": "google-cloud-appengine-logging",
            "direct": false,
            "version": "1.7.0",
            "ecosystem": "pypi"
          },
          {
            "name": "google-cloud-audit-log",
            "direct": false,
            "version": "0.4.0",
            "ecosystem": "pypi"
          },
          {
            "name": "google-cloud-bigquery",
            "direct": false,
            "version": "3.38.0",
            "ecosystem": "pypi"
          },
          {
            "name": "google-cloud-bigquery-storage",
            "direct": false,
            "version": "2.37.0",
            "ecosystem": "pypi"
          },
          {
            "name": "google-cloud-bigtable",
            "direct": false,
            "version": "2.34.0",
            "ecosystem": "pypi"
          },
          {
            "name": "google-cloud-core",
            "direct": false,
            "version": "2.5.0",
            "ecosystem": "pypi"
          },
          {
            "name": "google-cloud-dataplex",
            "direct": false,
            "version": "2.18.0",
            "ecosystem": "pypi"
          },
          {
            "name": "google-cloud-discoveryengine",
            "direct": false,
            "version": "0.13.12",
            "ecosystem": "pypi"
          },
          {
            "name": "google-cloud-iam",
            "direct": false,
            "version": "2.22.0",
            "ecosystem": "pypi"
          },
          {
            "name": "google-cloud-pubsub",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "google-cloud-pubsub",
            "direct": false,
            "version": "2.37.0",
            "ecosystem": "pypi"
          },
          {
            "name": "google-cloud-resource-manager",
            "direct": false,
            "version": "1.15.0",
            "ecosystem": "pypi"
          },
          {
            "name": "google-cloud-secret-manager",
            "direct": false,
            "version": "2.25.0",
            "ecosystem": "pypi"
          },
          {
            "name": "google-cloud-spanner",
            "direct": false,
            "version": "3.59.0",
            "ecosystem": "pypi"
          },
          {
            "name": "google-cloud-speech",
            "direct": false,
            "version": "2.34.0",
            "ecosystem": "pypi"
          },
          {
            "name": "google-cloud-storage",
            "direct": false,
            "version": "2.19.0",
            "ecosystem": "pypi"
          },
          {
            "name": "google-cloud-vectorsearch",
            "direct": false,
            "version": "0.10.0",
            "ecosystem": "pypi"
          },
          {
            "name": "google-crc32c",
            "direct": false,
            "version": "1.7.1",
            "ecosystem": "pypi"
          },
          {
            "name": "google-genai",
            "direct": false,
            "version": "1.48.0",
            "ecosystem": "pypi"
          },
          {
            "name": "google-resumable-media",
            "direct": false,
            "version": "2.7.2",
            "ecosystem": "pypi"
          },
          {
            "name": "googleapis-common-protos",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "googleapis-common-protos",
            "direct": false,
            "version": "1.63.2",
            "ecosystem": "pypi"
          },
          {
            "name": "googleapis-common-protos",
            "direct": false,
            "version": "1.71.0",
            "ecosystem": "pypi"
          },
          {
            "name": "googleapis-common-protos",
            "direct": false,
            "version": "1.74.0",
            "ecosystem": "pypi"
          },
          {
            "name": "graphviz",
            "direct": false,
            "version": "0.21",
            "ecosystem": "pypi"
          },
          {
            "name": "greenlet",
            "direct": false,
            "version": "3.2.4",
            "ecosystem": "pypi"
          },
          {
            "name": "grpc-google-iam-v1",
            "direct": false,
            "version": "0.14.3",
            "ecosystem": "pypi"
          },
          {
            "name": "grpc-interceptor",
            "direct": false,
            "version": "0.15.4",
            "ecosystem": "pypi"
          },
          {
            "name": "grpcio",
            "direct": false,
            "version": "1.63.0",
            "ecosystem": "pypi"
          },
          {
            "name": "grpcio",
            "direct": false,
            "version": "1.64.1",
            "ecosystem": "pypi"
          },
          {
            "name": "grpcio",
            "direct": false,
            "version": "1.76.0",
            "ecosystem": "pypi"
          },
          {
            "name": "grpcio-status",
            "direct": false,
            "version": "1.64.1",
            "ecosystem": "pypi"
          },
          {
            "name": "grpcio-status",
            "direct": false,
            "version": "1.76.0",
            "ecosystem": "pypi"
          },
          {
            "name": "gunicorn",
            "direct": false,
            "version": "23.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "h11",
            "direct": false,
            "version": "0.16.0",
            "ecosystem": "pypi"
          },
          {
            "name": "httpcore",
            "direct": false,
            "version": "1.0.9",
            "ecosystem": "pypi"
          },
          {
            "name": "httplib2",
            "direct": false,
            "version": "0.31.0",
            "ecosystem": "pypi"
          },
          {
            "name": "httpx",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "pypi"
          },
          {
            "name": "httpx-sse",
            "direct": false,
            "version": "0.4.3",
            "ecosystem": "pypi"
          },
          {
            "name": "idna",
            "direct": false,
            "version": "3.11",
            "ecosystem": "pypi"
          },
          {
            "name": "idna",
            "direct": false,
            "version": "3.13",
            "ecosystem": "pypi"
          },
          {
            "name": "idna",
            "direct": false,
            "version": "3.7",
            "ecosystem": "pypi"
          },
          {
            "name": "importlib-metadata",
            "direct": false,
            "version": "7.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "importlib-metadata",
            "direct": false,
            "version": "8.7.0",
            "ecosystem": "pypi"
          },
          {
            "name": "importlib-metadata",
            "direct": false,
            "version": "8.7.1",
            "ecosystem": "pypi"
          },
          {
            "name": "iniconfig",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "pypi"
          },
          {
            "name": "instrumentation-quickstart",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "itsdangerous",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "pypi"
          },
          {
            "name": "jinja2",
            "direct": false,
            "version": "3.1.4",
            "ecosystem": "pypi"
          },
          {
            "name": "jinja2",
            "direct": false,
            "version": "3.1.6",
            "ecosystem": "pypi"
          },
          {
            "name": "joserfc",
            "direct": false,
            "version": "1.6.4",
            "ecosystem": "pypi"
          },
          {
            "name": "jsonpatch",
            "direct": false,
            "version": "1.33",
            "ecosystem": "pypi"
          },
          {
            "name": "jsonpointer",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "jsonschema",
            "direct": false,
            "version": "4.25.1",
            "ecosystem": "pypi"
          },
          {
            "name": "jsonschema-specifications",
            "direct": false,
            "version": "2025.9.1",
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-classic",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-community",
            "direct": false,
            "version": "0.4.1",
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-core",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-google-vertexai",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-protocol",
            "direct": false,
            "version": "0.0.12",
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-tests",
            "direct": false,
            "version": "1.1.6",
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-text-splitters",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "langgraph",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "pypi"
          },
          {
            "name": "langgraph-checkpoint",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "pypi"
          },
          {
            "name": "langgraph-prebuilt",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "pypi"
          },
          {
            "name": "langgraph-sdk",
            "direct": false,
            "version": "0.2.9",
            "ecosystem": "pypi"
          },
          {
            "name": "langgraph-sql-agent",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "langsmith",
            "direct": false,
            "version": "0.4.41",
            "ecosystem": "pypi"
          },
          {
            "name": "mako",
            "direct": false,
            "version": "1.3.10",
            "ecosystem": "pypi"
          },
          {
            "name": "markdown-it-py",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "markupsafe",
            "direct": false,
            "version": "2.1.5",
            "ecosystem": "pypi"
          },
          {
            "name": "markupsafe",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "pypi"
          },
          {
            "name": "marshmallow",
            "direct": false,
            "version": "3.26.1",
            "ecosystem": "pypi"
          },
          {
            "name": "mcp",
            "direct": false,
            "version": "1.20.0",
            "ecosystem": "pypi"
          },
          {
            "name": "mdurl",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "pypi"
          },
          {
            "name": "mmh3",
            "direct": false,
            "version": "5.2.1",
            "ecosystem": "pypi"
          },
          {
            "name": "multidict",
            "direct": false,
            "version": "6.7.0",
            "ecosystem": "pypi"
          },
          {
            "name": "multidict",
            "direct": false,
            "version": "6.7.1",
            "ecosystem": "pypi"
          },
          {
            "name": "mypy-extensions",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "numexpr",
            "direct": false,
            "version": "2.14.1",
            "ecosystem": "pypi"
          },
          {
            "name": "numpy",
            "direct": false,
            "version": "2.3.4",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-exporter-gcp-logging",
            "direct": false,
            "version": "1.10.0a0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-exporter-gcp-logging",
            "direct": false,
            "version": "1.11.0a0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-exporter-gcp-monitoring",
            "direct": false,
            "version": "1.10.0a0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-exporter-gcp-monitoring",
            "direct": false,
            "version": "1.11.0a0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-exporter-gcp-trace",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-exporter-gcp-trace",
            "direct": false,
            "version": "1.10.0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-exporter-otlp-proto-common",
            "direct": false,
            "version": "1.37.0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-exporter-otlp-proto-common",
            "direct": false,
            "version": "1.38.0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-exporter-otlp-proto-common",
            "direct": false,
            "version": "1.41.1",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-exporter-otlp-proto-grpc",
            "direct": false,
            "version": "1.24.0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-exporter-otlp-proto-grpc",
            "direct": false,
            "version": "1.37.0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-exporter-otlp-proto-grpc",
            "direct": false,
            "version": "1.38.0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-exporter-otlp-proto-http",
            "direct": false,
            "version": "1.24.0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-exporter-otlp-proto-http",
            "direct": false,
            "version": "1.37.0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-exporter-otlp-proto-http",
            "direct": false,
            "version": "1.41.1",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-instrumentation",
            "direct": false,
            "version": "0.46b0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-instrumentation",
            "direct": false,
            "version": "0.58b0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-instrumentation",
            "direct": false,
            "version": "0.59b0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-instrumentation",
            "direct": false,
            "version": "0.62b1",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-instrumentation-dbapi",
            "direct": false,
            "version": "0.58b0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-instrumentation-dbapi",
            "direct": false,
            "version": "0.59b0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-instrumentation-flask",
            "direct": false,
            "version": "0.46b0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-instrumentation-flask",
            "direct": false,
            "version": "0.59b0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-instrumentation-flask",
            "direct": false,
            "version": "0.62b1",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-instrumentation-google-genai",
            "direct": false,
            "version": "0.4b0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-instrumentation-httpx",
            "direct": false,
            "version": "0.59b0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-instrumentation-logging",
            "direct": false,
            "version": "0.62b1",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-instrumentation-requests",
            "direct": false,
            "version": "0.46b0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-instrumentation-requests",
            "direct": false,
            "version": "0.59b0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-instrumentation-requests",
            "direct": false,
            "version": "0.62b1",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-instrumentation-sqlite3",
            "direct": false,
            "version": "0.58b0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-instrumentation-sqlite3",
            "direct": false,
            "version": "0.59b0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-instrumentation-vertexai",
            "direct": false,
            "version": "2.0b0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-instrumentation-vertexai",
            "direct": false,
            "version": "2.1b0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-instrumentation-wsgi",
            "direct": false,
            "version": "0.46b0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-instrumentation-wsgi",
            "direct": false,
            "version": "0.59b0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-instrumentation-wsgi",
            "direct": false,
            "version": "0.62b1",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-propagator-gcp",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-proto",
            "direct": false,
            "version": "1.37.0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-proto",
            "direct": false,
            "version": "1.38.0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-proto",
            "direct": false,
            "version": "1.41.1",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-semantic-conventions",
            "direct": false,
            "version": "0.46b0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-semantic-conventions",
            "direct": false,
            "version": "0.58b0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-semantic-conventions",
            "direct": false,
            "version": "0.59b0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-semantic-conventions",
            "direct": false,
            "version": "0.62b1",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-util-genai",
            "direct": false,
            "version": "0.2b0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-util-http",
            "direct": false,
            "version": "0.46b0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-util-http",
            "direct": false,
            "version": "0.59b0",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-util-http",
            "direct": false,
            "version": "0.62b1",
            "ecosystem": "pypi"
          },
          {
            "name": "orjson",
            "direct": false,
            "version": "3.11.4",
            "ecosystem": "pypi"
          },
          {
            "name": "ormsgpack",
            "direct": false,
            "version": "1.12.0",
            "ecosystem": "pypi"
          },
          {
            "name": "packaging",
            "direct": false,
            "version": "24.1",
            "ecosystem": "pypi"
          },
          {
            "name": "packaging",
            "direct": false,
            "version": "25.0",
            "ecosystem": "pypi"
          },
          {
            "name": "packaging",
            "direct": false,
            "version": "26.2",
            "ecosystem": "pypi"
          },
          {
            "name": "pluggy",
            "direct": false,
            "version": "1.6.0",
            "ecosystem": "pypi"
          },
          {
            "name": "prometheus-client",
            "direct": false,
            "version": "0.23.1",
            "ecosystem": "pypi"
          },
          {
            "name": "propcache",
            "direct": false,
            "version": "0.4.1",
            "ecosystem": "pypi"
          },
          {
            "name": "proto-plus",
            "direct": false,
            "version": "1.24.0",
            "ecosystem": "pypi"
          },
          {
            "name": "proto-plus",
            "direct": false,
            "version": "1.26.1",
            "ecosystem": "pypi"
          },
          {
            "name": "protobuf",
            "direct": false,
            "version": "5.27.2",
            "ecosystem": "pypi"
          },
          {
            "name": "protobuf",
            "direct": false,
            "version": "6.33.0",
            "ecosystem": "pypi"
          },
          {
            "name": "protobuf",
            "direct": false,
            "version": "6.33.6",
            "ecosystem": "pypi"
          },
          {
            "name": "py-cpuinfo",
            "direct": false,
            "version": "9.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pyarrow",
            "direct": false,
            "version": "21.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pyarrow",
            "direct": false,
            "version": "24.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pyasn1",
            "direct": false,
            "version": "0.6.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pyasn1",
            "direct": false,
            "version": "0.6.1",
            "ecosystem": "pypi"
          },
          {
            "name": "pyasn1-modules",
            "direct": false,
            "version": "0.4.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pyasn1-modules",
            "direct": false,
            "version": "0.4.2",
            "ecosystem": "pypi"
          },
          {
            "name": "pycparser",
            "direct": false,
            "version": "2.23",
            "ecosystem": "pypi"
          },
          {
            "name": "pycparser",
            "direct": false,
            "version": "3.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pydantic",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "pydantic",
            "direct": false,
            "version": "2.12.3",
            "ecosystem": "pypi"
          },
          {
            "name": "pydantic",
            "direct": false,
            "version": "2.12.4",
            "ecosystem": "pypi"
          },
          {
            "name": "pydantic-core",
            "direct": false,
            "version": "2.41.4",
            "ecosystem": "pypi"
          },
          {
            "name": "pydantic-core",
            "direct": false,
            "version": "2.41.5",
            "ecosystem": "pypi"
          },
          {
            "name": "pydantic-settings",
            "direct": false,
            "version": "2.11.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pygments",
            "direct": false,
            "version": "2.19.2",
            "ecosystem": "pypi"
          },
          {
            "name": "pyjwt",
            "direct": false,
            "version": "2.10.1",
            "ecosystem": "pypi"
          },
          {
            "name": "pyopenssl",
            "direct": false,
            "version": "26.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pyparsing",
            "direct": false,
            "version": "3.2.5",
            "ecosystem": "pypi"
          },
          {
            "name": "pytest",
            "direct": false,
            "version": "9.0.3",
            "ecosystem": "pypi"
          },
          {
            "name": "pytest-asyncio",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pytest-benchmark",
            "direct": false,
            "version": "5.2.3",
            "ecosystem": "pypi"
          },
          {
            "name": "pytest-codspeed",
            "direct": false,
            "version": "4.5.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pytest-recording",
            "direct": false,
            "version": "0.13.4",
            "ecosystem": "pypi"
          },
          {
            "name": "pytest-socket",
            "direct": false,
            "version": "0.7.0",
            "ecosystem": "pypi"
          },
          {
            "name": "python-dateutil",
            "direct": false,
            "version": "2.9.0.post0",
            "ecosystem": "pypi"
          },
          {
            "name": "python-dotenv",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "pypi"
          },
          {
            "name": "python-json-logger",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "python-multipart",
            "direct": false,
            "version": "0.0.20",
            "ecosystem": "pypi"
          },
          {
            "name": "pywin32",
            "direct": false,
            "version": "311",
            "ecosystem": "pypi"
          },
          {
            "name": "pyyaml",
            "direct": false,
            "version": "6.0.3",
            "ecosystem": "pypi"
          },
          {
            "name": "referencing",
            "direct": false,
            "version": "0.37.0",
            "ecosystem": "pypi"
          },
          {
            "name": "requests-toolbelt",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "rich",
            "direct": false,
            "version": "14.2.0",
            "ecosystem": "pypi"
          },
          {
            "name": "rpds-py",
            "direct": false,
            "version": "0.28.0",
            "ecosystem": "pypi"
          },
          {
            "name": "rsa",
            "direct": false,
            "version": "4.9",
            "ecosystem": "pypi"
          },
          {
            "name": "rsa",
            "direct": false,
            "version": "4.9.1",
            "ecosystem": "pypi"
          },
          {
            "name": "shapely",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "pypi"
          },
          {
            "name": "six",
            "direct": false,
            "version": "1.17.0",
            "ecosystem": "pypi"
          },
          {
            "name": "sniffio",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "pypi"
          },
          {
            "name": "sphinx",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "sphinx-autodoc-typehints",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "sqlalchemy",
            "direct": false,
            "version": "2.0.44",
            "ecosystem": "pypi"
          },
          {
            "name": "sqlalchemy-spanner",
            "direct": false,
            "version": "1.17.1",
            "ecosystem": "pypi"
          },
          {
            "name": "sqlparse",
            "direct": false,
            "version": "0.5.3",
            "ecosystem": "pypi"
          },
          {
            "name": "sse-starlette",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "pypi"
          },
          {
            "name": "starlette",
            "direct": false,
            "version": "0.49.3",
            "ecosystem": "pypi"
          },
          {
            "name": "syrupy",
            "direct": false,
            "version": "5.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "tenacity",
            "direct": false,
            "version": "8.5.0",
            "ecosystem": "pypi"
          },
          {
            "name": "tenacity",
            "direct": false,
            "version": "9.1.2",
            "ecosystem": "pypi"
          },
          {
            "name": "typing-inspect",
            "direct": false,
            "version": "0.9.0",
            "ecosystem": "pypi"
          },
          {
            "name": "typing-inspection",
            "direct": false,
            "version": "0.4.2",
            "ecosystem": "pypi"
          },
          {
            "name": "tzdata",
            "direct": false,
            "version": "2025.2",
            "ecosystem": "pypi"
          },
          {
            "name": "tzlocal",
            "direct": false,
            "version": "5.3.1",
            "ecosystem": "pypi"
          },
          {
            "name": "uritemplate",
            "direct": false,
            "version": "4.2.0",
            "ecosystem": "pypi"
          },
          {
            "name": "urllib3",
            "direct": false,
            "version": "2.2.2",
            "ecosystem": "pypi"
          },
          {
            "name": "urllib3",
            "direct": false,
            "version": "2.5.0",
            "ecosystem": "pypi"
          },
          {
            "name": "urllib3",
            "direct": false,
            "version": "2.6.3",
            "ecosystem": "pypi"
          },
          {
            "name": "uuid-utils",
            "direct": false,
            "version": "0.14.1",
            "ecosystem": "pypi"
          },
          {
            "name": "uvicorn",
            "direct": false,
            "version": "0.38.0",
            "ecosystem": "pypi"
          },
          {
            "name": "validators",
            "direct": false,
            "version": "0.35.0",
            "ecosystem": "pypi"
          },
          {
            "name": "vcrpy",
            "direct": false,
            "version": "8.1.1",
            "ecosystem": "pypi"
          },
          {
            "name": "waitress",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "watchdog",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "websockets",
            "direct": false,
            "version": "15.0.1",
            "ecosystem": "pypi"
          },
          {
            "name": "werkzeug",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "pypi"
          },
          {
            "name": "werkzeug",
            "direct": false,
            "version": "3.1.3",
            "ecosystem": "pypi"
          },
          {
            "name": "werkzeug",
            "direct": false,
            "version": "3.1.8",
            "ecosystem": "pypi"
          },
          {
            "name": "wrapt",
            "direct": false,
            "version": "1.16.0",
            "ecosystem": "pypi"
          },
          {
            "name": "wrapt",
            "direct": false,
            "version": "1.17.3",
            "ecosystem": "pypi"
          },
          {
            "name": "wrapt",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "pypi"
          },
          {
            "name": "xxhash",
            "direct": false,
            "version": "3.6.0",
            "ecosystem": "pypi"
          },
          {
            "name": "yarl",
            "direct": false,
            "version": "1.22.0",
            "ecosystem": "pypi"
          },
          {
            "name": "yarl",
            "direct": false,
            "version": "1.23.0",
            "ecosystem": "pypi"
          },
          {
            "name": "zipp",
            "direct": false,
            "version": "3.19.2",
            "ecosystem": "pypi"
          },
          {
            "name": "zipp",
            "direct": false,
            "version": "3.23.0",
            "ecosystem": "pypi"
          },
          {
            "name": "zipp",
            "direct": false,
            "version": "3.23.1",
            "ecosystem": "pypi"
          },
          {
            "name": "zstandard",
            "direct": false,
            "version": "0.25.0",
            "ecosystem": "pypi"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 506,
        "direct_count": 25,
        "indirect_count": 481
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 53,
        "merged_prs": 250,
        "open_issues": 23,
        "closed_ratio": 0.811,
        "closed_issues": 99,
        "closed_unmerged_prs": 118
      },
      "bus_factor": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "aabmass",
          "commits": 182,
          "avatar_url": "https://avatars.githubusercontent.com/u/1510004?v=4"
        },
        {
          "type": "User",
          "login": "DylanRussell",
          "commits": 16,
          "avatar_url": "https://avatars.githubusercontent.com/u/7339604?v=4"
        },
        {
          "type": "User",
          "login": "dashpole",
          "commits": 14,
          "avatar_url": "https://avatars.githubusercontent.com/u/3262098?v=4"
        },
        {
          "type": "Bot",
          "login": "dependabot[bot]",
          "commits": 11,
          "avatar_url": "https://avatars.githubusercontent.com/in/29110?v=4"
        },
        {
          "type": "User",
          "login": "psx95",
          "commits": 6,
          "avatar_url": "https://avatars.githubusercontent.com/u/22191775?v=4"
        },
        {
          "type": "User",
          "login": "AndrewAXue",
          "commits": 5,
          "avatar_url": "https://avatars.githubusercontent.com/u/25035666?v=4"
        },
        {
          "type": "User",
          "login": "DouglasHeriot",
          "commits": 5,
          "avatar_url": "https://avatars.githubusercontent.com/u/238401?v=4"
        },
        {
          "type": "User",
          "login": "muncus",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/195950?v=4"
        },
        {
          "type": "User",
          "login": "xrmx",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/12932?v=4"
        },
        {
          "type": "User",
          "login": "cnnradams",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/10487992?v=4"
        }
      ],
      "contributors_sampled": 24,
      "top_contributor_share": 0.697
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yaml",
        "codeql-analysis.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".flake8",
        ".pylintrc",
        "tox.ini"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum",
        "uv.lock"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "27 out of 27 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 10,
            "reason": "all changesets reviewed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 6 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 6,
            "reason": "7 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 7,
            "reason": "SAST tool detected but not run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "111 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "8cba89a602c51d5defafc802eb24be90a9edbc75",
        "ran_at": "2026-07-21T01:24:33Z",
        "aggregate_score": 6.2,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": true,
      "has_security_policy": true,
      "has_dependabot_config": false
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/GoogleCloudPlatform/opentelemetry-operations-python",
    "host": "github.com",
    "name": "opentelemetry-operations-python",
    "owner": "GoogleCloudPlatform"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "good",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 74,
      "inputs": {
        "security": 63,
        "vitality": 71,
        "community": 76,
        "governance": 71,
        "engineering": 90
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 71,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 62,
            "inputs": {
              "commits_last_year": 27,
              "human_commit_share": null,
              "days_since_last_push": 4,
              "active_weeks_last_year": 10
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 4 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 4
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "10/52 weeks with commits",
                "points": 6.9,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 10
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "27 commits in the last year",
                "points": 13,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 27
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "7 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "good",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 84,
            "inputs": {
              "releases_count": 24,
              "latest_release_tag": "v1.12.0",
              "releases_from_tags": false,
              "days_since_latest_release": 83,
              "mean_days_between_releases": 163.1
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "24 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 24
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 83 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 83
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~163.1 days",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 163.1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "no_commit_sample",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "good",
        "name": "Community & Adoption",
        "value": 76,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "moderate",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 53,
            "inputs": {
              "forks": 47,
              "stars": 83,
              "watchers": 33,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "83 stars",
                "points": 31,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 83
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "47 forks",
                "points": 13.9,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 47
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "33 watchers",
                "points": 8.4,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 33
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "excellent",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "packages": [
                "opentelemetry-propagator-gcp",
                "opentelemetry-exporter-gcp-trace",
                "opentelemetry-exporter-gcp-logging",
                "opentelemetry-resourcedetector-gcp",
                "opentelemetry-exporter-gcp-monitoring"
              ],
              "dependents": null,
              "ecosystems": "pypi",
              "total_downloads": null,
              "monthly_downloads": 42544408
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "42,544,408 downloads/month across pypi",
                "points": 80,
                "status": "met",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 42544408,
                      "ecosystems": "pypi"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "good",
        "name": "Sustainability & Governance",
        "value": 71,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 39,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 24,
              "top_contributor_share": 0.697
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 70% of commits",
                "points": 6.8,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 70
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "24 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 24
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 6 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 79,
            "inputs": {
              "merged_prs": 250,
              "open_issues": 23,
              "closed_issues": 99,
              "issue_closed_ratio": 0.811,
              "closed_unmerged_prs": 118
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "81% of issues closed",
                "points": 37.9,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 81
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "250/368 decided PRs merged",
                "points": 26,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 250,
                      "decided": 368
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "all changesets reviewed",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 80,
            "inputs": {
              "followers": 21253,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "GoogleCloudPlatform",
              "public_repos": 1498,
              "account_age_days": 4994
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "21,253 followers of GoogleCloudPlatform",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 21253,
                      "login": "GoogleCloudPlatform"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "1498 public repos, account ~13 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 1498
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 13
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "opentelemetry-propagator-gcp",
                "opentelemetry-exporter-gcp-trace",
                "opentelemetry-exporter-gcp-logging",
                "opentelemetry-resourcedetector-gcp",
                "opentelemetry-exporter-gcp-monitoring"
              ],
              "ecosystems": "pypi",
              "any_deprecated": false,
              "min_days_since_publish": 83
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "5 package(s) on pypi",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 5,
                      "ecosystems": "pypi"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 83 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 83
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "14 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 14
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "excellent",
        "name": "Engineering Quality",
        "value": 90,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "2 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".flake8, .pylintrc, tox.ini",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".flake8, .pylintrc, tox.ini"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "27 out of 27 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "excellent",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "topics": [
                "opentelemetry",
                "opentelemetry-python",
                "python"
              ],
              "has_wiki": true,
              "homepage": "https://google-cloud-opentelemetry.readthedocs.io/en/stable/",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://google-cloud-opentelemetry.readthedocs.io/en/stable/",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "3 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 63,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 62,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 6.2
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "27 out of 27 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "all changesets reviewed",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 6 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "7 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 6",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool detected but not run on all commits",
                "points": 3.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "111 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "moderate",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 493 resolved dependencies against OSV; 13 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 493
                }
              },
              {
                "code": "advisories_unassessed",
                "params": {
                  "count": 13
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 65,
            "inputs": {
              "source": "osv",
              "advisories": 369,
              "affected_packages": 63,
              "assessed_packages": 493,
              "unassessed_packages": 13,
              "affected_by_severity": "critical 3, high 7, moderate 6, unknown 47",
              "direct_affected_packages": 2
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "2 affected: requests 2.32.3 (moderate 5.5), requests 2.32.5 (moderate 5.5)",
                "points": 17.2,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 2,
                      "packages": "requests 2.32.3 (moderate 5.5), requests 2.32.5 (moderate 5.5)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "2 advisory-carrying package(s) unaddressed past 90 days; oldest published 406 days ago",
                "points": 31.4,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_stale",
                    "params": {
                      "days": 90,
                      "count": 2,
                      "oldest": 406
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 493,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 5
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 54,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "critical",
            "name": "Agent context & guidance",
            "note": "Excluded from scoring (no data or not applicable): Legible commit history. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "legible_commit_history"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 1,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": null,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "excellent",
            "name": "Verify loop (build / test / typecheck)",
            "note": "Excluded from scoring (no data or not applicable): Demonstrated agent practice, Automated maintenance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "demonstrated_agent_practice",
                    "automated_maintenance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 88,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum",
                "uv.lock"
              ],
              "has_dockerfile": true,
              "typed_language": false,
              "bootstrap_files": [
                "docs/Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [
                "opentelemetry-exporter-gcp-logging/mypy.ini",
                "opentelemetry-exporter-gcp-monitoring/mypy.ini",
                "opentelemetry-exporter-gcp-monitoring/src/opentelemetry/py.typed",
                "opentelemetry-exporter-gcp-trace/mypy.ini",
                "opentelemetry-exporter-gcp-trace/src/opentelemetry/py.typed",
                "opentelemetry-propagator-gcp/mypy.ini",
                "opentelemetry-propagator-gcp/src/opentelemetry/py.typed",
                "opentelemetry-resourcedetector-gcp/mypy.ini",
                "opentelemetry-resourcedetector-gcp/src/opentelemetry/py.typed"
              ],
              "agent_commit_share": null,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": null
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "docs/Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "docs/Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".flake8, .pylintrc, tox.ini",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".flake8, .pylintrc, tox.ini"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "opentelemetry-exporter-gcp-logging/mypy.ini, opentelemetry-exporter-gcp-monitoring/mypy.ini, opentelemetry-exporter-gcp-monitoring/src/opentelemetry/py.typed, opentelemetry-exporter-gcp-trace/mypy.ini, opentelemetry-exporter-gcp-trace/src/opentelemetry/py.typed, opentelemetry-propagator-gcp/mypy.ini, opentelemetry-propagator-gcp/src/opentelemetry/py.typed, opentelemetry-resourcedetector-gcp/mypy.ini, opentelemetry-resourcedetector-gcp/src/opentelemetry/py.typed",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "opentelemetry-exporter-gcp-logging/mypy.ini, opentelemetry-exporter-gcp-monitoring/mypy.ini, opentelemetry-exporter-gcp-monitoring/src/opentelemetry/py.typed, opentelemetry-exporter-gcp-trace/mypy.ini, opentelemetry-exporter-gcp-trace/src/opentelemetry/py.typed, opentelemetry-propagator-gcp/mypy.ini, opentelemetry-propagator-gcp/src/opentelemetry/py.typed, opentelemetry-resourcedetector-gcp/mypy.ini, opentelemetry-resourcedetector-gcp/src/opentelemetry/py.typed"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "good",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 82,
            "inputs": {
              "primary_language": "Python",
              "largest_source_bytes": 27696,
              "source_files_sampled": 81,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Python with type-check config (opentelemetry-exporter-gcp-logging/mypy.ini, opentelemetry-exporter-gcp-monitoring/mypy.ini, opentelemetry-exporter-gcp-monitoring/src/opentelemetry/py.typed, opentelemetry-exporter-gcp-trace/mypy.ini, opentelemetry-exporter-gcp-trace/src/opentelemetry/py.typed, opentelemetry-propagator-gcp/mypy.ini, opentelemetry-propagator-gcp/src/opentelemetry/py.typed, opentelemetry-resourcedetector-gcp/mypy.ini, opentelemetry-resourcedetector-gcp/src/opentelemetry/py.typed)",
                "points": 27,
                "status": "partial",
                "details": [
                  {
                    "code": "typecheck_config_language",
                    "params": {
                      "files": "opentelemetry-exporter-gcp-logging/mypy.ini, opentelemetry-exporter-gcp-monitoring/mypy.ini, opentelemetry-exporter-gcp-monitoring/src/opentelemetry/py.typed, opentelemetry-exporter-gcp-trace/mypy.ini, opentelemetry-exporter-gcp-trace/src/opentelemetry/py.typed, opentelemetry-propagator-gcp/mypy.ini, opentelemetry-propagator-gcp/src/opentelemetry/py.typed, opentelemetry-resourcedetector-gcp/mypy.ini, opentelemetry-resourcedetector-gcp/src/opentelemetry/py.typed",
                      "language": "Python"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/81 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 81,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples",
                "samples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples, samples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples, samples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "pypi package 'test-common' points at a different repository (https://github.com/dante-signal31/test_common_python); excluded from ecosystem scoring",
    "Advisory severity resolved for 120 of 308 advisories (lookup cap); the remainder are reported as unknown severity"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-21T01:25:05.288858Z",
  "schema_version": "0.16.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/g/GoogleCloudPlatform/opentelemetry-operations-python.svg",
  "full_name": "GoogleCloudPlatform/opentelemetry-operations-python",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}

Related records

Inspected repositories sharing catalogue tags or ecosystems with GoogleCloudPlatform/opentelemetry-operations-python. Read them side by side →

91open-telemetry/opentelemetry-pythonOpenTelemetry Python API and SDK Excellent86pydantic/logfireAI observability platform for production LLM and agent systems.Excellent97apache/supersetApache Superset is a Data Visualization and Data Exploration PlatformExcellent95scikit-learn/scikit-learnscikit-learn: machine learning in PythonExcellent93deepset-ai/haystackOpen-source AI orchestration framework for building context-engineered, production-ready LLM applications. Design modular pipelines and agent workflows with explicit control over retrieval, routing, memory, and generation. Built for scalable agents, RAG, multimodal applications, semantic search, and conversational systems.Excellent93apache/airflowApache Airflow - A platform to programmatically author, schedule, and monitor workflowsExcellent

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.16.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statistics — PyPI.