Reason

license file detected

Details

• Info: project has a license file: LICENSE:0
• Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0

Reason

no binaries found in the repo

Reason

Found 0/22 approved changesets -- score normalized to 0

Reason

0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0

Reason

no effort to earn an OpenSSF best practices badge detected

Reason

security policy file not detected

Details

• Warn: no security policy file detected
• Warn: no security file to analyze
• Warn: no security file to analyze
• Warn: no security file to analyze

Reason

Project has not signed or included provenance with any releases.

Details

• Warn: release artifact v0.5.5 not signed: https://api.github.com/repos/InfoSecInnovations/project-fantastic/releases/44218808
• Warn: release artifact v0.5.5 does not have provenance: https://api.github.com/repos/InfoSecInnovations/project-fantastic/releases/44218808

Reason

branch protection not enabled on development/release branches

Details

• Warn: branch protection not enabled for branch 'master'

Reason

project is not fuzzed

Details

• Warn: no fuzzer integrations found

Reason

SAST tool is not run on all commits -- score normalized to 0

Details

• Warn: 0 commits out of 8 are checked with a SAST tool

Reason

79 existing vulnerabilities detected

Details

• Warn: Project is vulnerable to: GHSA-jxhc-q857-3j6g
• Warn: Project is vulnerable to: GHSA-52p9-v744-mwjj
• Warn: Project is vulnerable to: GHSA-2rxp-v6pw-ch6m
• Warn: Project is vulnerable to: GHSA-4xqq-m2hx-25v8
• Warn: Project is vulnerable to: GHSA-5866-49gr-22v4
• Warn: Project is vulnerable to: GHSA-8cr8-4vfw-mr7h
• Warn: Project is vulnerable to: GHSA-r55c-59qm-vjw6
• Warn: Project is vulnerable to: GHSA-vg3r-rm7w-2xgh
• Warn: Project is vulnerable to: GHSA-vmwr-mc7x-5vc3
• Warn: Project is vulnerable to: GHSA-5cm2-9h8c-rvfx
• Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
• Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97
• Warn: Project is vulnerable to: GHSA-896r-f27r-55mw
• Warn: Project is vulnerable to: GHSA-7wpw-2hjm-89gp
• Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
• Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h
• Warn: Project is vulnerable to: GHSA-4cpg-3vgw-4877
• Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp
• Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
• Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
• Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
• Warn: Project is vulnerable to: GHSA-h6q6-9hqw-rwfv
• Warn: Project is vulnerable to: GHSA-5fg8-2547-mr8q
• Warn: Project is vulnerable to: GHSA-crh6-fp67-6883
• Warn: Project is vulnerable to: GHSA-p9pc-299p-vxgp
• Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq
• Warn: Project is vulnerable to: GHSA-w8qv-6jwh-64r5
• Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
• Warn: Project is vulnerable to: GHSA-4wf5-vphf-c2xc
• Warn: Project is vulnerable to: GHSA-hc6q-2mpp-qw7j
• Warn: Project is vulnerable to: GHSA-4vvj-4cpr-p986
• Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q
• Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38
• Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc
• Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw
• Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
• Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j
• Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22
• Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
• Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm
• Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj
• Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf
• Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
• Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g
• Warn: Project is vulnerable to: GHSA-3j8f-xvm3-ffx4
• Warn: Project is vulnerable to: GHSA-4p35-cfcx-8653
• Warn: Project is vulnerable to: GHSA-7f3x-x4pr-wqhj
• Warn: Project is vulnerable to: GHSA-jpp7-7chh-cf67
• Warn: Project is vulnerable to: GHSA-q6wq-5p59-983w
• Warn: Project is vulnerable to: GHSA-j9fq-vwqv-2fm2
• Warn: Project is vulnerable to: GHSA-pqw5-jmp5-px4v
• Warn: Project is vulnerable to: GHSA-4rq4-32rv-6wp6
• Warn: Project is vulnerable to: GHSA-64g7-mvw6-v9qj
• Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
• Warn: Project is vulnerable to: GHSA-7p7h-4mm5-852v
• Warn: Project is vulnerable to: GHSA-38fc-wpqx-33j7
• Warn: Project is vulnerable to: GHSA-fwr7-v2mv-hh25
• Warn: Project is vulnerable to: GHSA-9qrh-qjmc-5w2p
• Warn: Project is vulnerable to: GHSA-jqv5-7xpx-qj74
• Warn: Project is vulnerable to: GHSA-3jfq-g458-7qm9
• Warn: Project is vulnerable to: GHSA-5955-9wpr-37jh
• Warn: Project is vulnerable to: GHSA-r628-mhmh-qjhw
• Warn: Project is vulnerable to: GHSA-9r2w-394v-53qc
• Warn: Project is vulnerable to: GHSA-qq89-hq3f-393p
• Warn: Project is vulnerable to: GHSA-6vfc-qv3f-vr6c
• Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m
• Warn: Project is vulnerable to: GHSA-53xv-c2hx-5w6q
• Warn: Project is vulnerable to: GHSA-rjf2-j2r6-q8gr
• Warn: Project is vulnerable to: GHSA-6pw2-5hjv-9pf7
• Warn: Project is vulnerable to: GHSA-4w2j-2rg4-5mjw
• Warn: Project is vulnerable to: GHSA-mrgp-mrhc-5jrq
• Warn: Project is vulnerable to: GHSA-7jxr-cg7f-gpgv
• Warn: Project is vulnerable to: GHSA-xj72-wvfv-8985
• Warn: Project is vulnerable to: GHSA-ch3r-j5x3-6q2m
• Warn: Project is vulnerable to: GHSA-p5gc-c584-jj6v
• Warn: Project is vulnerable to: GHSA-whpj-8f3w-67p5
• Warn: Project is vulnerable to: GHSA-cchq-frgv-rjh5
• Warn: Project is vulnerable to: GHSA-g644-9gfx-q4q4
• Warn: Project is vulnerable to: GHSA-776f-qx25-q3cc