Mlflow AI Agent
by mlflowThe open source AI engineering platform for agents, LLMs, and ML models. MLflow enables teams of all sizes to debug, evaluate, monitor, and optimize production-quality AI applications while controlling costs and managing access to models and data.
Mlflow is an open-source ai agent by mlflow, written mainly in Python, with 28,613 GitHub stars and the Apache-2.0 license. Its code was last updated Nov 1, 2026.
Scan summary: scanned Nov 13, 2026 at commit cd8e791. Seen able to run shell commands, run dynamic code, read environment and secrets. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
cd8e791 · Nov 13, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Static code scanwarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Flagged. This check found an issue. See the findings below.Secrets scanfailFlagged. This check found an issue. See the findings below.
Flagged. This check found an issue. See the findings below.Dependency audit2154 known vulnerabilitiesfailFlagged. This check found an issue. See the findings below.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.ManifestnonewarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Flagged. This check found an issue. See the findings below.BuildfailFlagged. This check found an issue. See the findings below.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Boot & handshaken/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Network egressn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Reproducible (×3)n/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Findings (200)
- highHigh. Something risky that needs a close look before you install.dropper issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.credential-access issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.credential-access issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.credential-access issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.credential-access issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.credential-access issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.credential-access issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.credential-access issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.credential-access issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.credential-access issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dropper issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dropper issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.credential-access issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.credential-access issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.credential-access issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.credential-access issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.credential-access issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
.github/actions/untracked/post.js:3 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
dev/clint/src/clint/index.py:162 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
mlflow/models/evaluation/artifacts.py:103 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
mlflow/pmdarima/__init__.py:542 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
mlflow/server/js/scripts/global-setup.js:9 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
mlflow/server/js/scripts/global-setup.js:11 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
mlflow/server/js/scripts/global-setup.js:14 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
mlflow/sklearn/__init__.py:569 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@babel/plugin-transform-modules-systemjs@7.29.0: 2 known vulnerabilitiesGHSA-fv7c-fp4j-7gwp, GHSA-fv7c-fp4j-7gwp
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@1.20.4: 4 known vulnerabilitiesGHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6, GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.12: 14 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +9 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@2.0.2: 14 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +9 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.28.2: 4 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx, GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.compression@1.8.1: 2 known vulnerabilitiesGHSA-vc2v-76pw-4v95, GHSA-vc2v-76pw-4v95
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.dompurify@3.2.6: 22 known vulnerabilitiesGHSA-39q2-94rc-95cp, GHSA-55q2-fjhq-7xh7, GHSA-6688-9rhm-gjv2, GHSA-76mc-f452-cxcm, GHSA-c2j3-45gr-mqc4 +17 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fast-uri@3.0.6: 12 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.flatted@3.3.3: 4 known vulnerabilitiesGHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh, GHSA-25h7-pfq9-p65f, GHSA-rf6f-7fwh-wjgh
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.glob@10.4.5: 2 known vulnerabilitiesGHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.image-size@2.0.2: 2 known vulnerabilitiesGHSA-5p2g-fcmc-qvqq, GHSA-w3rx-r6r6-pgpr
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ip-address@9.0.5: 6 known vulnerabilitiesGHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-mwp4-54f8-5fhr, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5 +1 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.joi@17.13.3: 6 known vulnerabilitiesGHSA-4528-x5fx-h6hg, GHSA-6h2x-m376-mqjq, GHSA-6w3j-5fw6-r9vr, GHSA-gg4h-3hg2-grpc, GHSA-q7cg-457f-vx79 +1 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@3.14.1: 15 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m +10 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@4.1.0: 10 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m +5 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.launch-editor@2.13.2: 8 known vulnerabilitiesGHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-r825-w8mm-5pxw, GHSA-v6wh-96g9-6wx3, GHSA-587h-7wmj-h5pm +3 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.lodash@4.17.21: 2 known vulnerabilitiesGHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.lodash-es@4.17.21: 2 known vulnerabilitiesGHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@9.0.5: 12 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249, GHSA-23c5-xmqv-rm74 +7 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.11: 6 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w, GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8 +1 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@2.3.1: 6 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj, GHSA-3v7f-55p6-f55p +1 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.6: 4 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.serialize-javascript@6.0.2: 6 known vulnerabilitiesGHSA-5c6j-r48x-rmvq, GHSA-m5mm-p8h7-m29v, GHSA-qj8w-gfj5-8c6v, GHSA-5c6j-r48x-rmvq, GHSA-m5mm-p8h7-m29v +1 more
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.source-map-js@1.2.1: 2 known vulnerabilitiesGHSA-68fv-2mgg-jv7q, GHSA-68fv-2mgg-jv7q
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.svgo@3.3.3: 3 known vulnerabilitiesGHSA-2p49-hgcm-8545, GHSA-4vpr-x523-8j87, GHSA-w27v-7q3p-w38r
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@11.1.0: 1 known vulnerabilityGHSA-w5hq-g745-h8pq
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@8.3.2: 2 known vulnerabilitiesGHSA-w5hq-g745-h8pq, GHSA-w5hq-g745-h8pq
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.validator@13.15.15: 2 known vulnerabilitiesGHSA-9965-vmph-33xx, GHSA-vghf-hv5q-vc2g
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.webpack-dev-middleware@7.4.5: 1 known vulnerabilityGHSA-g84c-rxfj-3j2c
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@7.5.10: 2 known vulnerabilitiesGHSA-96hv-2xvq-fx4p, GHSA-96hv-2xvq-fx4p
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@8.20.0: 2 known vulnerabilitiesGHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
docs/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.graphql-core@3.2.8: 2 known vulnerabilitiesGHSA-r77w-qph3-7vf8, GHSA-vj8h-fx38-h3vc
examples/uv-dependency-management/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mako@1.3.10: 3 known vulnerabilitiesPYSEC-2026-2617, PYSEC-2026-4243, PYSEC-2026-88
examples/uv-dependency-management/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.pyasn1@0.6.2: 8 known vulnerabilitiesPYSEC-2026-2263, PYSEC-2026-3455, PYSEC-2026-3456, PYSEC-2026-3457, GHSA-2qm8-x737-gmw5 +3 more
examples/uv-dependency-management/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.sqlparse@0.5.5: 5 known vulnerabilitiesPYSEC-2026-3696, PYSEC-2026-3697, PYSEC-2026-3698, PYSEC-2026-3699, PYSEC-2026-3923
examples/uv-dependency-management/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.starlette@0.52.1: 5 known vulnerabilitiesPYSEC-2026-161, PYSEC-2026-2280, PYSEC-2026-2281, PYSEC-2026-248, PYSEC-2026-249
examples/uv-dependency-management/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.urllib3@2.6.3: 5 known vulnerabilitiesPYSEC-2026-141, PYSEC-2026-142, PYSEC-2026-4175, PYSEC-2026-4176, PYSEC-2026-4177
examples/uv-dependency-management/uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@grpc/grpc-js@1.14.3: 4 known vulnerabilitiesGHSA-5375-pq7m-f5r2, GHSA-99f4-grh7-6pcq, GHSA-f596-whhp-79r4, GHSA-m9gg-hp2v-232j
libs/typescript/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@modelcontextprotocol/sdk@1.29.0: 6 known vulnerabilitiesGHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more
libs/typescript/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@opentelemetry/exporter-prometheus@0.205.0: 1 known vulnerabilityGHSA-q7rr-3cgh-j5r3
libs/typescript/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@opentelemetry/propagator-jaeger@2.1.0: 1 known vulnerabilityGHSA-45rx-2jwx-cxfr
libs/typescript/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@opentelemetry/sdk-node@0.205.0: 1 known vulnerabilityGHSA-q7rr-3cgh-j5r3
libs/typescript/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@2.2.2: 2 known vulnerabilitiesGHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
libs/typescript/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.25.1: 2 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
libs/typescript/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fast-uri@3.1.0: 24 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +19 more
libs/typescript/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.form-data@4.0.4: 1 known vulnerabilityGHSA-hmw2-7cc7-3qxx
libs/typescript/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.hono@4.12.15: 31 known vulnerabilitiesGHSA-2gcr-mfcq-wcc3, GHSA-3gg2-335m-rxc6, GHSA-3hrh-pfw6-9m5x, GHSA-46wx-v44x-9hh2, GHSA-4h7h-rv7c-7m2v +26 more
libs/typescript/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ip-address@10.1.0: 6 known vulnerabilitiesGHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-mwp4-54f8-5fhr, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5 +1 more
libs/typescript/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ip-address@10.2.0: 8 known vulnerabilitiesGHSA-22jq-vg5j-6vgg, GHSA-2vr4-cq9g-pvrc, GHSA-4xrf-jv44-h6hh, GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv +3 more
libs/typescript/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.jws@4.0.0: 1 known vulnerabilityGHSA-869p-cjfg-cm3x
libs/typescript/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.linkify-it@5.0.0: 2 known vulnerabilitiesGHSA-22p9-wv53-3rq4, GHSA-v245-v573-v5vm
libs/typescript/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.markdown-it@14.1.0: 6 known vulnerabilitiesGHSA-253c-mchw-3w2r, GHSA-38c4-r59v-3vqw, GHSA-6v5v-wf23-fmfq, GHSA-gfr2-rv44-r23c, GHSA-r7fv-28h4-cvq7 +1 more
libs/typescript/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@3.1.2: 3 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj
libs/typescript/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@5.1.6: 6 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26 +1 more
libs/typescript/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@9.0.3: 8 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249, GHSA-23c5-xmqv-rm74 +3 more
libs/typescript/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@8.18.3: 2 known vulnerabilitiesGHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
libs/typescript/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@3.25.76: 2 known vulnerabilitiesGHSA-mrhx-c7xc-m3w5, GHSA-mrhx-c7xc-m3w5
libs/typescript/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@4.1.8: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
libs/typescript/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.testng:testng@6.14.3: 1 known vulnerabilityGHSA-rc2q-x9mf-w3vf
mlflow/java/client/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.com.google.guava:guava@32.0.1-jre: 1 known vulnerabilityGHSA-xxph-c9ww-hj94
mlflow/java/client/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.apache.spark:spark-core_2.12@3.5.0: 2 known vulnerabilitiesGHSA-9437-39hj-3c93, GHSA-jwp6-cvj8-fw65
mlflow/java/spark_2.12/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.com.fasterxml.jackson.core:jackson-core@2.15.2: 6 known vulnerabilitiesGHSA-72hv-8253-57qq, GHSA-7hhh-6rmp-j9qf, GHSA-r7wm-3cxj-wff9, GHSA-72hv-8253-57qq, GHSA-7hhh-6rmp-j9qf +1 more
mlflow/java/spark_2.12/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.com.fasterxml.jackson.core:jackson-databind@2.15.2: 24 known vulnerabilitiesGHSA-3pjw-73gf-8qr5, GHSA-5gvw-p9qm-jgwh, GHSA-5jmj-h7xm-6q6v, GHSA-cxp5-3px4-pw24, GHSA-gx83-3vf8-gh7j +19 more
mlflow/java/spark_2.12/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.com.google.guava:guava@16.0.1: 8 known vulnerabilitiesGHSA-5mg8-w23w-74h3, GHSA-7g45-4rm6-3mm3, GHSA-mvr2-9pj6-7w5j, GHSA-xxph-c9ww-hj94, GHSA-5mg8-w23w-74h3 +3 more
mlflow/java/spark_2.12/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.io.airlift:aircompressor@0.25: 4 known vulnerabilitiesGHSA-973x-65j7-xcf4, GHSA-vx9q-rhv9-3jvg, GHSA-973x-65j7-xcf4, GHSA-vx9q-rhv9-3jvg
mlflow/java/spark_2.12/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.io.netty:netty-codec@4.1.96.Final: 6 known vulnerabilitiesGHSA-3p8m-j85q-pgmj, GHSA-558v-64gr-wgg4, GHSA-mj4r-2hfc-f8p6, GHSA-3p8m-j85q-pgmj, GHSA-558v-64gr-wgg4 +1 more
mlflow/java/spark_2.12/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.io.netty:netty-codec-http@4.1.96.Final: 38 known vulnerabilitiesGHSA-38f8-5428-x5cv, GHSA-4mp9-239f-g9hg, GHSA-57rv-r2g8-2cj3, GHSA-5jpm-x58v-624v, GHSA-6cqp-g7gg-8hr5 +33 more
mlflow/java/spark_2.12/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.io.netty:netty-codec-http2@4.1.96.Final: 18 known vulnerabilitiesGHSA-563q-j3cm-6jxm, GHSA-5x3r-wrvg-rp6q, GHSA-93wv-jw9v-4972, GHSA-c2gf-v879-257j, GHSA-c69g-56f8-xwqj +13 more
mlflow/java/spark_2.12/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.apache.ivy:ivy@2.5.1: 2 known vulnerabilitiesGHSA-2jc4-r94c-rp7h, GHSA-2jc4-r94c-rp7h
mlflow/java/spark_2.12/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.lz4:lz4-java@1.8.0: 16 known vulnerabilitiesGHSA-343h-94h5-c4wr, GHSA-4v53-57pg-c464, GHSA-6cx8-rjf8-pr8g, GHSA-cmp6-m4wj-q63q, GHSA-gm45-99xc-r7wv +11 more
mlflow/java/spark_2.12/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.xerial.snappy:snappy-java@1.1.10.3: 8 known vulnerabilitiesGHSA-55g7-9cwv-5qfv, GHSA-gwq9-9ffj-mvrv, GHSA-q233-g92q-qxp6, GHSA-xqrx-qh46-34m7, GHSA-55g7-9cwv-5qfv +3 more
mlflow/java/spark_2.12/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.org.apache.spark:spark-core_2.13@3.5.0: 2 known vulnerabilitiesGHSA-9437-39hj-3c93, GHSA-jwp6-cvj8-fw65
mlflow/java/spark_2.13/pom.xml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@babel/plugin-transform-modules-systemjs@7.28.5: 1 known vulnerabilityGHSA-fv7c-fp4j-7gwp
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@graphql-tools/executor-legacy-ws@1.0.3: 3 known vulnerabilitiesGHSA-434m-5hcj-pxf3, GHSA-6fw5-9hq8-w87g, GHSA-mp66-8ww2-pcwm
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@graphql-tools/utils@10.0.6: 1 known vulnerabilityGHSA-7mx3-vvmw-hjmv
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@graphql-tools/utils@8.12.0: 1 known vulnerabilityGHSA-7mx3-vvmw-hjmv
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@remix-run/router@1.0.1: 1 known vulnerabilityGHSA-2w69-qvjg-hvjx
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@vue/server-renderer@3.5.29: 1 known vulnerabilityGHSA-g2v6-rqmx-r4w6
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@xmldom/xmldom@0.8.11: 15 known vulnerabilitiesGHSA-27p8-2357-5qqv, GHSA-2v35-w6hq-6mfw, GHSA-4w3w-2rp5-g8jm, GHSA-6gmq-8vp8-gcm6, GHSA-6h8r-xr42-gp59 +10 more
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ansi-regex@4.1.0: 1 known vulnerabilityGHSA-93q8-gq69-wqmw
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.11: 8 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +3 more
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@2.0.1: 8 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +3 more
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@5.0.2: 8 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-jxxr-4gwj-5jf2, GHSA-mh99-v99m-4gvg +3 more
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.braces@2.3.2: 1 known vulnerabilityGHSA-grv7-fg5c-xmjg
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.browserslist@4.28.1: 2 known vulnerabilitiesGHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.cross-spawn@6.0.5: 1 known vulnerabilityGHSA-3xgq-45jj-v275
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.decode-uri-component@0.2.2: 2 known vulnerabilitiesGHSA-qr28-fpjm-wq7f, GHSA-vcc3-ghjq-m6fr
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.dompurify@2.5.9: 19 known vulnerabilitiesGHSA-39q2-94rc-95cp, GHSA-55q2-fjhq-7xh7, GHSA-6688-9rhm-gjv2, GHSA-76mc-f452-cxcm, GHSA-c2j3-45gr-mqc4 +14 more
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.flatted@3.4.1: 1 known vulnerabilityGHSA-rf6f-7fwh-wjgh
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.form-data@3.0.4: 1 known vulnerabilityGHSA-hmw2-7cc7-3qxx
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.form-data@4.0.5: 1 known vulnerabilityGHSA-hmw2-7cc7-3qxx
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.http-proxy-middleware@1.3.1: 4 known vulnerabilitiesGHSA-4www-5p9h-95mh, GHSA-64mm-vxmg-q3vj, GHSA-9gqv-wp59-fq42, GHSA-c7qv-q95q-8v27
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ip@1.1.5: 2 known vulnerabilitiesGHSA-2p57-rm9w-gvfp, GHSA-78xj-cgh5-2h22
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ip@2.0.1: 1 known vulnerabilityGHSA-2p57-rm9w-gvfp
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@4.1.1: 4 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.lodash@4.17.23: 2 known vulnerabilitiesGHSA-f23m-r3pf-42rh, GHSA-r5fr-rjxr-66jc
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.markdown-it@14.3.0: 4 known vulnerabilitiesGHSA-253c-mchw-3w2r, GHSA-gfr2-rv44-r23c, GHSA-r7fv-28h4-cvq7, GHSA-vfgh-jcmw-g37q
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@4.2.1: 3 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@4.2.3: 3 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.12: 2 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.node-forge@1.3.3: 24 known vulnerabilitiesGHSA-2328-f5f3-gj25, GHSA-2vgq-wchc-25w7, GHSA-4487-j8r4-4g2f, GHSA-4642-5mcj-2rqw, GHSA-525v-9gp9-w22h +19 more
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nth-check@1.0.2: 1 known vulnerabilityGHSA-rp65-9cf3-cjxr
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.path-to-regexp@0.1.12: 1 known vulnerabilityGHSA-37ch-88jc-xwx2
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.picomatch@4.0.3: 2 known vulnerabilitiesGHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@7.0.39: 5 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-7fh5-64p2-3v2j, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.15: 2 known vulnerabilitiesGHSA-fxqj-rqcc-2cmp, GHSA-r28c-9q8g-f849
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.16: 2 known vulnerabilitiesGHSA-fxqj-rqcc-2cmp, GHSA-r28c-9q8g-f849
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.8: 4 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.9: 4 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.prismjs@1.25.0: 2 known vulnerabilitiesGHSA-3949-f494-cm99, GHSA-x7hr-w5r2-h6wg
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.probe-image-size@7.3.0: 1 known vulnerabilityGHSA-gjj5-9665-rwrc
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.semver@5.3.0: 1 known vulnerabilityGHSA-c2qf-rxjj-qqgw
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.serialize-javascript@4.0.0: 2 known vulnerabilitiesGHSA-5c6j-r48x-rmvq, GHSA-m5mm-p8h7-m29v
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.serialize-javascript@5.0.1: 3 known vulnerabilitiesGHSA-5c6j-r48x-rmvq, GHSA-m5mm-p8h7-m29v, GHSA-qj8w-gfj5-8c6v
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.smol-toml@1.6.1: 2 known vulnerabilitiesGHSA-7w5x-hrqm-74c2, GHSA-r4xh-jqrq-34v2
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ssri@8.0.0: 1 known vulnerabilityGHSA-vx3p-948g-6vhq
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.svgo@1.3.2: 3 known vulnerabilitiesGHSA-2p49-hgcm-8545, GHSA-4vpr-x523-8j87, GHSA-w27v-7q3p-w38r
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.svgo@2.8.0: 4 known vulnerabilitiesGHSA-2p49-hgcm-8545, GHSA-4vpr-x523-8j87, GHSA-w27v-7q3p-w38r, GHSA-xpqw-6gx7-v673
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.tmp@0.0.33: 2 known vulnerabilitiesGHSA-52f5-9888-hmc6, GHSA-ph9p-34f9-6g65
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.trim@0.0.1: 1 known vulnerabilityGHSA-w5p7-h5w8-2hfq
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.trim-newlines@1.0.0: 1 known vulnerabilityGHSA-7p7h-4mm5-852v
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.underscore@1.13.6: 1 known vulnerabilityGHSA-qpx9-hpmf-5gmw
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.undici@5.10.0: 23 known vulnerabilitiesGHSA-2m5v-pch6-74hx, GHSA-2mjp-6q6p-2qxm, GHSA-35p6-xmwp-9g52, GHSA-3787-6prv-h9w3, GHSA-4992-7rv2-5pvq +18 more
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@13.0.0: 1 known vulnerabilityGHSA-w5hq-g745-h8pq
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@3.4.0: 1 known vulnerabilityGHSA-w5hq-g745-h8pq
mlflow/server/js/yarn.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vega-interpreter@1.0.4: 1 known vulnerabilityGHSA-7f2v-3qq3-vvjf
mlflow/server/js/yarn.lock
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Mlflow alternatives
View more →Similar ai agents in Data Science & ML, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Mlflow (this page) mlflow | 29k | Apache-2.0 | Nov 1, 2026 | Scanned, no flagged issues |
| Ragflow infiniflow | 93k | Apache-2.0 | Oct 31, 2026 | Scanned, no flagged issues |
| Cherry Studio CherryHQ | 53k | AGPL-3.0 | Nov 1, 2026 | Scanned, no flagged issues |
| PageIndex VectifyAI | 40k | MIT | Oct 29, 2026 | Scanned, no flagged issues |
| Graphiti getzep | 32k | Apache-2.0 | Nov 1, 2026 | Scanned, no flagged issues |
| Cua trycua | 31k | MIT | Nov 1, 2026 | Scanned, no flagged issues |