{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-5+qual-2+sec-2","generated_at":"2026-11-14T14:52:07.853111Z","repo":{"ref":{"host":"github.com","owner":"srinidevar","name":"cs_research_papers"},"default_branch":"main","clone_url":"https://github.com/srinidevar/cs_research_papers.git","html_url":"https://github.com/srinidevar/cs_research_papers","description":"Collection of Computer Science Research Papers","stars":1,"forks":1,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":11413,"primary_language":"Python","license_spdx":"MIT","created_at":"2025-05-06T16:45:55Z","pushed_at":"2026-09-26T00:03:48Z","security_policy_url":null,"distribution":{"owner_created_at":"2013-04-07T19:38:23Z","owner_type":"User","release_assets":[]}},"commit_sha":"5db631bf3a581af4d20ef309625e46d430e04752","profile":{"lines_by_language":{"Python":126},"files_by_category":{"docs":3,"source":2},"source_lines":126,"test_lines":0},"pillars":{"ai_provenance":{"score":0.0,"confidence":0.65,"coverage":1.0,"label":"none-detected","breakdown":{"attributed_share":0.0,"suspected_share":0.0,"estimated_share":0.0,"ai_artifacts":0.0,"flagged_work_units":0.0,"flagged_releases":null,"style_index":0.0},"summary":"No AI attribution or AI-consistent velocity signals detected."},"quality":{"score":54.5,"confidence":0.9,"coverage":1.0,"label":"weak","breakdown":{"complexity":100.0,"duplication":100.0,"lint":36.8,"testing":0.0,"docs":65.0,"type_safety":40.0,"process":null},"summary":"Code quality is weak: test-to-source ratio 0.00, no CI test run detected; 0% of function code in complex or long functions; 0% duplicated lines. Weakest area: testing."},"security":{"score":64.0,"confidence":0.85,"coverage":1.0,"label":"weak","breakdown":{"secrets":100.0,"sast":83.9,"dependencies":31.1,"ci_actions":null,"posture":0.0,"scorecard":null},"summary":"Security posture is weak: 87 known vulnerabilities in 8 dependencies. Weakest area: posture."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":25.0,"checked":25.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":206.0,"attributed_commits":0.0,"attributed_commit_share":0.0,"effective_loc":126.0,"attributed_loc":0.0,"attributed_loc_share":0.0,"tools_detected":0.0},"findings":[],"evidence":[],"data":{"attributed_loc_by_commit":{},"tools":{},"monthly":{"2025-05":{"loc":126,"attributed_loc":0},"2025-06":{"loc":0,"attributed_loc":0},"2025-07":{"loc":0,"attributed_loc":0},"2025-08":{"loc":0,"attributed_loc":0},"2025-09":{"loc":0,"attributed_loc":0},"2025-10":{"loc":0,"attributed_loc":0},"2025-11":{"loc":0,"attributed_loc":0},"2025-12":{"loc":0,"attributed_loc":0},"2026-01":{"loc":0,"attributed_loc":0},"2026-02":{"loc":0,"attributed_loc":0},"2026-03":{"loc":0,"attributed_loc":0},"2026-06":{"loc":0,"attributed_loc":0},"2026-07":{"loc":0,"attributed_loc":0},"2026-08":{"loc":0,"attributed_loc":0},"2026-09":{"loc":0,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":0.0,"workflow_agents":0.0,"tools_configured":0.0},"findings":[],"evidence":[],"data":{"artifacts":[],"workflows":[],"tools":[]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":1.0,"flagged_units":0.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":0.0,"pre_ai_era_burst_loc":0.0,"measured_loc":126.0,"flagged_loc":0.0,"flagged_loc_share":0.0,"max_loc_per_hour":31.40404320132927,"median_loc_per_hour":31.40404320132927,"pr_timed_units":0.0,"excluded_import_loc":0.0},"findings":[],"evidence":[],"data":{"flagged_loc_by_commit":{},"excluded_import_commits":[]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":126.0,"index":0.0,"count:narrated_steps":0.0,"per_kloc:narrated_steps":0.0,"files:narrated_steps":0.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":0.0,"per_kloc:emoji_in_code":0.0,"files:emoji_in_code":0.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":0.0,"secrets_low_confidence":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":2.0,"findings_high":0.0,"findings_medium":2.0,"findings_low":0.0,"weighted_findings":0.5,"scanned_lines":126.0,"parse_errors":0.0},"findings":[{"rule_id":"opengrep/python.lang.security.deserialization.avoid-pickle","severity":"medium","message":"Avoid using `pickle`, which is known to lead to code execution vulnerabilities. When unpickling, the serialized data could be manipulated to run arbitrary code. Instead, consider serializing the relevant data as JSON or a similar text-based serialization format. [confidence low]","path":"src/poll_arxiv.py","line":100,"fingerprint":"python.lang.security.deserialization.avoid-pickle:src/poll_arxiv.py:100"},{"rule_id":"opengrep/python.lang.security.deserialization.avoid-pickle","severity":"medium","message":"Avoid using `pickle`, which is known to lead to code execution vulnerabilities. When unpickling, the serialized data could be manipulated to run arbitrary code. Instead, consider serializing the relevant data as JSON or a similar text-based serialization format. [confidence low]","path":"src/poll_arxiv.py","line":112,"fingerprint":"python.lang.security.deserialization.avoid-pickle:src/poll_arxiv.py:112"}],"evidence":[],"data":{"rulesets":["python"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":8.0,"vulnerabilities":87.0,"vulns_critical":3.0,"vulns_high":39.0,"vulns_medium":37.0,"vulns_low":7.0,"vulns_unknown":1.0,"penalty":70.0},"findings":[{"rule_id":"osv/GHSA-ffc3-869f-jxw9","severity":"critical","message":"pyjwt@2.10.1 (PyPI) is affected by PYSEC-2026-4145, GHSA-ffc3-869f-jxw9","path":"src/requirements.txt","line":null,"fingerprint":"pyjwt@2.10.1 (PyPI):GHSA-ffc3-869f-jxw9"},{"rule_id":"osv/GHSA-63hf-3vf5-4wqf","severity":"critical","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-2102, GHSA-63hf-3vf5-4wqf","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-63hf-3vf5-4wqf"},{"rule_id":"osv/GHSA-6q48-6c7w-9gw2","severity":"critical","message":"certifi@2025.4.26 (PyPI) is affected by PYSEC-2026-4320, GHSA-6q48-6c7w-9gw2","path":"src/requirements.txt","line":null,"fingerprint":"certifi@2025.4.26 (PyPI):GHSA-6q48-6c7w-9gw2"},{"rule_id":"osv/PYSEC-2025-183","severity":"high","message":"pyjwt@2.10.1 (PyPI) is affected by PYSEC-2025-183","path":"src/requirements.txt","line":null,"fingerprint":"pyjwt@2.10.1 (PyPI):PYSEC-2025-183"},{"rule_id":"osv/GHSA-752w-5fwx-jx9f","severity":"high","message":"pyjwt@2.10.1 (PyPI) is affected by PYSEC-2026-120, GHSA-752w-5fwx-jx9f","path":"src/requirements.txt","line":null,"fingerprint":"pyjwt@2.10.1 (PyPI):GHSA-752w-5fwx-jx9f"},{"rule_id":"osv/GHSA-xgmm-8j9v-c9wx","severity":"high","message":"pyjwt@2.10.1 (PyPI) is affected by PYSEC-2026-179, GHSA-xgmm-8j9v-c9wx","path":"src/requirements.txt","line":null,"fingerprint":"pyjwt@2.10.1 (PyPI):GHSA-xgmm-8j9v-c9wx"},{"rule_id":"osv/GHSA-9v7f-9g4p-ffgj","severity":"high","message":"pyjwt@2.10.1 (PyPI) is affected by PYSEC-2026-4144, GHSA-9v7f-9g4p-ffgj","path":"src/requirements.txt","line":null,"fingerprint":"pyjwt@2.10.1 (PyPI):GHSA-9v7f-9g4p-ffgj"},{"rule_id":"osv/GHSA-p4g4-x82p-q773","severity":"high","message":"pyjwt@2.10.1 (PyPI) is affected by PYSEC-2026-4149, GHSA-p4g4-x82p-q773","path":"src/requirements.txt","line":null,"fingerprint":"pyjwt@2.10.1 (PyPI):GHSA-p4g4-x82p-q773"},{"rule_id":"osv/GHSA-x33g-cr3x-6449","severity":"high","message":"pyjwt@2.10.1 (PyPI) is affected by PYSEC-2026-4183, GHSA-x33g-cr3x-6449","path":"src/requirements.txt","line":null,"fingerprint":"pyjwt@2.10.1 (PyPI):GHSA-x33g-cr3x-6449"},{"rule_id":"osv/GHSA-pxh4-856f-4h89","severity":"high","message":"pyjwt@2.10.1 (PyPI) is affected by GHSA-pxh4-856f-4h89","path":"src/requirements.txt","line":null,"fingerprint":"pyjwt@2.10.1 (PyPI):GHSA-pxh4-856f-4h89"},{"rule_id":"osv/GHSA-gfw2-4jvh-wgfg","severity":"high","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2023-246, GHSA-gfw2-4jvh-wgfg","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-gfw2-4jvh-wgfg"},{"rule_id":"osv/GHSA-q3qx-c6g2-7pw2","severity":"high","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2023-250, GHSA-q3qx-c6g2-7pw2","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-q3qx-c6g2-7pw2"},{"rule_id":"osv/GHSA-5h86-8mv2-jq9f","severity":"high","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2024-24, GHSA-5h86-8mv2-jq9f","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-5h86-8mv2-jq9f"},{"rule_id":"osv/GHSA-5m98-qgg9-wh84","severity":"high","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-1098, GHSA-5m98-qgg9-wh84","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-5m98-qgg9-wh84"},{"rule_id":"osv/GHSA-6mq8-rvhq-8wgg","severity":"high","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-1101, GHSA-6mq8-rvhq-8wgg","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-6mq8-rvhq-8wgg"},{"rule_id":"osv/GHSA-hcc4-c3v8-rx92","severity":"high","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-2095, GHSA-hcc4-c3v8-rx92","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-hcc4-c3v8-rx92"},{"rule_id":"osv/GHSA-p998-jp59-783m","severity":"high","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-2097, GHSA-p998-jp59-783m","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-p998-jp59-783m"},{"rule_id":"osv/GHSA-m5qp-6w8w-w647","severity":"high","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-2098, GHSA-m5qp-6w8w-w647","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-m5qp-6w8w-w647"},{"rule_id":"osv/GHSA-jg22-mg44-37j8","severity":"high","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-2104, GHSA-jg22-mg44-37j8","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-jg22-mg44-37j8"},{"rule_id":"osv/GHSA-hg6j-4rv6-33pg","severity":"high","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-2105, GHSA-hg6j-4rv6-33pg","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-hg6j-4rv6-33pg"},{"rule_id":"osv/GHSA-m6qw-4cw2-hm4m","severity":"high","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-2106, GHSA-m6qw-4cw2-hm4m","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-m6qw-4cw2-hm4m"},{"rule_id":"osv/GHSA-4fvr-rgm6-gqmc","severity":"high","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-2107, GHSA-4fvr-rgm6-gqmc","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-4fvr-rgm6-gqmc"},{"rule_id":"osv/GHSA-xcgm-r5h9-7989","severity":"high","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-2108, GHSA-xcgm-r5h9-7989","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-xcgm-r5h9-7989"},{"rule_id":"osv/GHSA-63hw-fmq6-xxg2","severity":"high","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-2110, GHSA-63hw-fmq6-xxg2","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-63hw-fmq6-xxg2"},{"rule_id":"osv/GHSA-g3cq-j2xw-wf74","severity":"high","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-2111, GHSA-g3cq-j2xw-wf74","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-g3cq-j2xw-wf74"},{"rule_id":"osv/GHSA-2fqr-mr3j-6wp8","severity":"high","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-2112, GHSA-2fqr-mr3j-6wp8","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-2fqr-mr3j-6wp8"},{"rule_id":"osv/GHSA-9x8q-7h8h-wcw9","severity":"high","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-2113, GHSA-9x8q-7h8h-wcw9","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-9x8q-7h8h-wcw9"},{"rule_id":"osv/GHSA-4m7w-qmgq-4wj5","severity":"high","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-237, GHSA-4m7w-qmgq-4wj5","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-4m7w-qmgq-4wj5"},{"rule_id":"osv/GHSA-cq5v-8q36-5273","severity":"high","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-3545, GHSA-cq5v-8q36-5273","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-cq5v-8q36-5273"},{"rule_id":"osv/GHSA-2g87-pp6c-29x5","severity":"high","message":"aiohttp@3.8.1 (PyPI) is affected by GHSA-2g87-pp6c-29x5","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-2g87-pp6c-29x5"},{"rule_id":"osv/GHSA-5wr8-gcqf-gqf3","severity":"high","message":"aiohttp@3.8.1 (PyPI) is affected by GHSA-5wr8-gcqf-gqf3","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-5wr8-gcqf-gqf3"},{"rule_id":"osv/GHSA-9xw5-w5jj-pvcg","severity":"high","message":"aiohttp@3.8.1 (PyPI) is affected by GHSA-9xw5-w5jj-pvcg","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-9xw5-w5jj-pvcg"},{"rule_id":"osv/GHSA-r6ph-v2qm-q3c2","severity":"high","message":"cryptography@44.0.3 (PyPI) is affected by PYSEC-2026-2141, GHSA-r6ph-v2qm-q3c2","path":"src/requirements.txt","line":null,"fingerprint":"cryptography@44.0.3 (PyPI):GHSA-r6ph-v2qm-q3c2"},{"rule_id":"osv/GHSA-g6cj-pr64-35w5","severity":"high","message":"cryptography@44.0.3 (PyPI) is affected by PYSEC-2026-3552, GHSA-g6cj-pr64-35w5","path":"src/requirements.txt","line":null,"fingerprint":"cryptography@44.0.3 (PyPI):GHSA-g6cj-pr64-35w5"},{"rule_id":"osv/GHSA-jwv3-5hgf-82ww","severity":"high","message":"cryptography@44.0.3 (PyPI) is affected by PYSEC-2026-3553, GHSA-jwv3-5hgf-82ww","path":"src/requirements.txt","line":null,"fingerprint":"cryptography@44.0.3 (PyPI):GHSA-jwv3-5hgf-82ww"},{"rule_id":"osv/GHSA-537c-gmf6-5ccf","severity":"high","message":"cryptography@44.0.3 (PyPI) is affected by GHSA-537c-gmf6-5ccf","path":"src/requirements.txt","line":null,"fingerprint":"cryptography@44.0.3 (PyPI):GHSA-537c-gmf6-5ccf"},{"rule_id":"osv/GHSA-qccp-gfcp-xxvc","severity":"high","message":"urllib3@2.4.0 (PyPI) is affected by PYSEC-2026-141, GHSA-qccp-gfcp-xxvc","path":"src/requirements.txt","line":null,"fingerprint":"urllib3@2.4.0 (PyPI):GHSA-qccp-gfcp-xxvc"},{"rule_id":"osv/GHSA-2xpw-w6gg-jr37","severity":"high","message":"urllib3@2.4.0 (PyPI) is affected by PYSEC-2026-1994, GHSA-2xpw-w6gg-jr37","path":"src/requirements.txt","line":null,"fingerprint":"urllib3@2.4.0 (PyPI):GHSA-2xpw-w6gg-jr37"},{"rule_id":"osv/GHSA-38jv-5279-wg99","severity":"high","message":"urllib3@2.4.0 (PyPI) is affected by PYSEC-2026-1996, GHSA-38jv-5279-wg99","path":"src/requirements.txt","line":null,"fingerprint":"urllib3@2.4.0 (PyPI):GHSA-38jv-5279-wg99"},{"rule_id":"osv/GHSA-gm62-xv2j-4w53","severity":"high","message":"urllib3@2.4.0 (PyPI) is affected by PYSEC-2026-1998, GHSA-gm62-xv2j-4w53","path":"src/requirements.txt","line":null,"fingerprint":"urllib3@2.4.0 (PyPI):GHSA-gm62-xv2j-4w53"},{"rule_id":"osv/GHSA-8988-9cw3-xx77","severity":"high","message":"urllib3@2.4.0 (PyPI) is affected by PYSEC-2026-4175, GHSA-8988-9cw3-xx77","path":"src/requirements.txt","line":null,"fingerprint":"urllib3@2.4.0 (PyPI):GHSA-8988-9cw3-xx77"},{"rule_id":"osv/GHSA-vxq7-64xx-v4gw","severity":"high","message":"urllib3@2.4.0 (PyPI) is affected by PYSEC-2026-4177, GHSA-vxq7-64xx-v4gw","path":"src/requirements.txt","line":null,"fingerprint":"urllib3@2.4.0 (PyPI):GHSA-vxq7-64xx-v4gw"},{"rule_id":"osv/GHSA-993g-76c3-p5m4","severity":"medium","message":"pyjwt@2.10.1 (PyPI) is affected by PYSEC-2026-175, GHSA-993g-76c3-p5m4","path":"src/requirements.txt","line":null,"fingerprint":"pyjwt@2.10.1 (PyPI):GHSA-993g-76c3-p5m4"},{"rule_id":"osv/GHSA-jq35-7prp-9v3f","severity":"medium","message":"pyjwt@2.10.1 (PyPI) is affected by PYSEC-2026-176, GHSA-jq35-7prp-9v3f","path":"src/requirements.txt","line":null,"fingerprint":"pyjwt@2.10.1 (PyPI):GHSA-jq35-7prp-9v3f"},{"rule_id":"osv/GHSA-w7vc-732c-9m39","severity":"medium","message":"pyjwt@2.10.1 (PyPI) is affected by PYSEC-2026-178, GHSA-w7vc-732c-9m39","path":"src/requirements.txt","line":null,"fingerprint":"pyjwt@2.10.1 (PyPI):GHSA-w7vc-732c-9m39"},{"rule_id":"osv/GHSA-2gx3-rcp4-g85q","severity":"medium","message":"pyjwt@2.10.1 (PyPI) is affected by PYSEC-2026-4140, GHSA-2gx3-rcp4-g85q","path":"src/requirements.txt","line":null,"fingerprint":"pyjwt@2.10.1 (PyPI):GHSA-2gx3-rcp4-g85q"},{"rule_id":"osv/GHSA-42vr-xj54-vc7v","severity":"medium","message":"pyjwt@2.10.1 (PyPI) is affected by PYSEC-2026-4141, GHSA-42vr-xj54-vc7v","path":"src/requirements.txt","line":null,"fingerprint":"pyjwt@2.10.1 (PyPI):GHSA-42vr-xj54-vc7v"},{"rule_id":"osv/GHSA-hxm8-2xgr-2p9m","severity":"medium","message":"pyjwt@2.10.1 (PyPI) is affected by PYSEC-2026-4147, GHSA-hxm8-2xgr-2p9m","path":"src/requirements.txt","line":null,"fingerprint":"pyjwt@2.10.1 (PyPI):GHSA-hxm8-2xgr-2p9m"},{"rule_id":"osv/GHSA-jwrc-g2q2-pq5p","severity":"medium","message":"pyjwt@2.10.1 (PyPI) is affected by PYSEC-2026-4148, GHSA-jwrc-g2q2-pq5p","path":"src/requirements.txt","line":null,"fingerprint":"pyjwt@2.10.1 (PyPI):GHSA-jwrc-g2q2-pq5p"},{"rule_id":"osv/GHSA-w6j9-cwv2-h6wq","severity":"medium","message":"pyjwt@2.10.1 (PyPI) is affected by PYSEC-2026-4152, GHSA-w6j9-cwv2-h6wq","path":"src/requirements.txt","line":null,"fingerprint":"pyjwt@2.10.1 (PyPI):GHSA-w6j9-cwv2-h6wq"},{"rule_id":"osv/GHSA-mrfv-m5wm-5w6w","severity":"medium","message":"pynacl@1.5.0 (PyPI) is affected by PYSEC-2026-3002, GHSA-mrfv-m5wm-5w6w","path":"src/requirements.txt","line":null,"fingerprint":"pynacl@1.5.0 (PyPI):GHSA-mrfv-m5wm-5w6w"},{"rule_id":"osv/GHSA-45c4-8wx5-qw6w","severity":"medium","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2023-120, GHSA-45c4-8wx5-qw6w","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-45c4-8wx5-qw6w"},{"rule_id":"osv/GHSA-qvrw-v9rv-5rjx","severity":"medium","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2023-251, GHSA-qvrw-v9rv-5rjx","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-qvrw-v9rv-5rjx"},{"rule_id":"osv/GHSA-8qpw-xqxj-h4r2","severity":"medium","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2024-26, GHSA-8qpw-xqxj-h4r2","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-8qpw-xqxj-h4r2"},{"rule_id":"osv/GHSA-6jhg-hg63-jvvf","severity":"medium","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-1100, GHSA-6jhg-hg63-jvvf","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-6jhg-hg63-jvvf"},{"rule_id":"osv/GHSA-7gpw-8wmc-pm8g","severity":"medium","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-1102, GHSA-7gpw-8wmc-pm8g","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-7gpw-8wmc-pm8g"},{"rule_id":"osv/GHSA-8495-4g3g-x7pr","severity":"medium","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-1103, GHSA-8495-4g3g-x7pr","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-8495-4g3g-x7pr"},{"rule_id":"osv/GHSA-g84x-mcqj-x9qq","severity":"medium","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-1106, GHSA-g84x-mcqj-x9qq","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-g84x-mcqj-x9qq"},{"rule_id":"osv/GHSA-jj3x-wxrx-4x23","severity":"medium","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-1107, GHSA-jj3x-wxrx-4x23","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-jj3x-wxrx-4x23"},{"rule_id":"osv/GHSA-w2fm-2cpv-w7v5","severity":"medium","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-2094, GHSA-w2fm-2cpv-w7v5","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-w2fm-2cpv-w7v5"},{"rule_id":"osv/GHSA-2vrm-gr82-f7m5","severity":"medium","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-2096, GHSA-2vrm-gr82-f7m5","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-2vrm-gr82-f7m5"},{"rule_id":"osv/GHSA-3wq7-rqq7-wx6j","severity":"medium","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-2099, GHSA-3wq7-rqq7-wx6j","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-3wq7-rqq7-wx6j"},{"rule_id":"osv/GHSA-966j-vmvw-g2g9","severity":"medium","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-2100, GHSA-966j-vmvw-g2g9","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-966j-vmvw-g2g9"},{"rule_id":"osv/GHSA-mwh4-6h8g-pg8w","severity":"medium","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-2101, GHSA-mwh4-6h8g-pg8w","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-mwh4-6h8g-pg8w"},{"rule_id":"osv/GHSA-c427-h43c-vf67","severity":"medium","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-2103, GHSA-c427-h43c-vf67","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-c427-h43c-vf67"},{"rule_id":"osv/GHSA-hpj7-wq8m-9hgp","severity":"medium","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-2109, GHSA-hpj7-wq8m-9hgp","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-hpj7-wq8m-9hgp"},{"rule_id":"osv/GHSA-mfx4-hv73-q22v","severity":"medium","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-3546, GHSA-mfx4-hv73-q22v","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-mfx4-hv73-q22v"},{"rule_id":"osv/GHSA-mq44-7p77-q5h7","severity":"medium","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-3547, GHSA-mq44-7p77-q5h7","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-mq44-7p77-q5h7"},{"rule_id":"osv/GHSA-494j-54xm-rwp3","severity":"medium","message":"aiohttp@3.8.1 (PyPI) is affected by GHSA-494j-54xm-rwp3","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-494j-54xm-rwp3"},{"rule_id":"osv/GHSA-6cjc-53gc-5rqm","severity":"medium","message":"aiohttp@3.8.1 (PyPI) is affected by GHSA-6cjc-53gc-5rqm","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-6cjc-53gc-5rqm"},{"rule_id":"osv/GHSA-f9xw-jh8m-3mwq","severity":"medium","message":"aiohttp@3.8.1 (PyPI) is affected by GHSA-f9xw-jh8m-3mwq","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-f9xw-jh8m-3mwq"},{"rule_id":"osv/GHSA-pjjw-qhg8-p2p9","severity":"medium","message":"aiohttp@3.8.1 (PyPI) is affected by GHSA-pjjw-qhg8-p2p9","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-pjjw-qhg8-p2p9"},{"rule_id":"osv/GHSA-pqxq-w44r-73xw","severity":"medium","message":"aiohttp@3.8.1 (PyPI) is affected by GHSA-pqxq-w44r-73xw","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-pqxq-w44r-73xw"},{"rule_id":"osv/GHSA-m959-cc7f-wv43","severity":"medium","message":"cryptography@44.0.3 (PyPI) is affected by PYSEC-2026-35, GHSA-m959-cc7f-wv43","path":"src/requirements.txt","line":null,"fingerprint":"cryptography@44.0.3 (PyPI):GHSA-m959-cc7f-wv43"},{"rule_id":"osv/PYSEC-2026-3554","severity":"medium","message":"cryptography@44.0.3 (PyPI) is affected by PYSEC-2026-3554","path":"src/requirements.txt","line":null,"fingerprint":"cryptography@44.0.3 (PyPI):PYSEC-2026-3554"},{"rule_id":"osv/GHSA-65pc-fj4g-8rjx","severity":"medium","message":"idna@3.10 (PyPI) is affected by PYSEC-2026-215, GHSA-65pc-fj4g-8rjx","path":"src/requirements.txt","line":null,"fingerprint":"idna@3.10 (PyPI):GHSA-65pc-fj4g-8rjx"},{"rule_id":"osv/GHSA-9hjg-9r4m-mvj7","severity":"medium","message":"requests@2.32.3 (PyPI) is affected by PYSEC-2026-1872, GHSA-9hjg-9r4m-mvj7","path":"src/requirements.txt","line":null,"fingerprint":"requests@2.32.3 (PyPI):GHSA-9hjg-9r4m-mvj7"},{"rule_id":"osv/GHSA-gc5v-m9x4-r6x2","severity":"medium","message":"requests@2.32.3 (PyPI) is affected by PYSEC-2026-2275, GHSA-gc5v-m9x4-r6x2","path":"src/requirements.txt","line":null,"fingerprint":"requests@2.32.3 (PyPI):GHSA-gc5v-m9x4-r6x2"},{"rule_id":"osv/GHSA-48p4-8xcf-vxj5","severity":"medium","message":"urllib3@2.4.0 (PyPI) is affected by PYSEC-2026-1997, GHSA-48p4-8xcf-vxj5","path":"src/requirements.txt","line":null,"fingerprint":"urllib3@2.4.0 (PyPI):GHSA-48p4-8xcf-vxj5"},{"rule_id":"osv/GHSA-pq67-6m6q-mj2v","severity":"medium","message":"urllib3@2.4.0 (PyPI) is affected by PYSEC-2026-1999, GHSA-pq67-6m6q-mj2v","path":"src/requirements.txt","line":null,"fingerprint":"urllib3@2.4.0 (PyPI):GHSA-pq67-6m6q-mj2v"},{"rule_id":"osv/GHSA-fhv5-28vv-h8m8","severity":"low","message":"pyjwt@2.10.1 (PyPI) is affected by PYSEC-2026-177, GHSA-fhv5-28vv-h8m8","path":"src/requirements.txt","line":null,"fingerprint":"pyjwt@2.10.1 (PyPI):GHSA-fhv5-28vv-h8m8"},{"rule_id":"osv/GHSA-54jq-c3m8-4m76","severity":"low","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-1097, GHSA-54jq-c3m8-4m76","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-54jq-c3m8-4m76"},{"rule_id":"osv/GHSA-69f9-5gxw-wvc2","severity":"low","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-1099, GHSA-69f9-5gxw-wvc2","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-69f9-5gxw-wvc2"},{"rule_id":"osv/GHSA-9548-qrrj-x5pj","severity":"low","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-1104, GHSA-9548-qrrj-x5pj","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-9548-qrrj-x5pj"},{"rule_id":"osv/GHSA-fh55-r93g-j68g","severity":"low","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-1105, GHSA-fh55-r93g-j68g","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-fh55-r93g-j68g"},{"rule_id":"osv/GHSA-mqqc-3gqh-h2x8","severity":"low","message":"aiohttp@3.8.1 (PyPI) is affected by PYSEC-2026-1109, GHSA-mqqc-3gqh-h2x8","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-mqqc-3gqh-h2x8"},{"rule_id":"osv/GHSA-gx76-c99x-2c96","severity":"low","message":"aiohttp@3.8.1 (PyPI) is affected by GHSA-gx76-c99x-2c96","path":"src/requirements.txt","line":null,"fingerprint":"aiohttp@3.8.1 (PyPI):GHSA-gx76-c99x-2c96"}],"evidence":[],"data":{"ecosystems":["PyPI"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":1.0,"signed_commit_share":0.025,"unpinned_manifests":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":3.0,"function_nloc":37.0,"mean_ccn":2.67,"p90_ccn":5.0,"complex_functions":0.0,"long_functions":0.0,"many_param_functions":0.0,"risky_nloc_share":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":108.0,"duplicated_lines":0.0,"duplicated_share":0.0,"files":2.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":2.0,"weighted_findings":4.0,"scanned_lines":126.0,"category:best-practice":2.0},"findings":[{"rule_id":"opengrep/python.lang.best-practice.arbitrary-sleep","severity":"high","message":"time.sleep() call; did you mean to leave this in?","path":"src/poll_arxiv.py","line":117,"fingerprint":"python.lang.best-practice.arbitrary-sleep:src/poll_arxiv.py:117"},{"rule_id":"opengrep/python.lang.best-practice.unspecified-open-encoding","severity":"medium","message":"Missing 'encoding' parameter. 'open()' uses device locale encodings by default, corrupting files with special characters. Specify the encoding to ensure cross-platform support when opening files in text mode (e.g. encoding=\"utf-8\").","path":"src/poll_arxiv.py","line":114,"fingerprint":"python.lang.best-practice.unspecified-open-encoding:src/poll_arxiv.py:114"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":0.0,"check:test_ratio":0.0,"check:ci_present":0.0,"check:ci_runs_tests":0.0,"check:ci_runs_lint":0.0,"check:tests_cochange":0.0,"test_lines":0.0,"source_lines":126.0,"test_ratio":0.0,"ci_files":0.0,"cochange_share":0.0,"cochange_commits":2.0},"findings":[],"evidence":[],"data":{"test_commands":[],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":0.0,"check:changelog":0.0,"readme_lines":687.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE","ref":"LICENSE","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":0.0,"check:low_escape_density":1.0,"escapes":0.0,"escapes_per_kloc":0.0},"findings":[],"evidence":[],"data":{},"error":null}],"flags":[]}