Skip to content

Conversation

@f-aguzzi
Copy link
Collaborator

@f-aguzzi f-aguzzi commented Sep 5, 2024

No description provided.

@github-actions
Copy link

github-actions bot commented Sep 5, 2024

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
pip/langchain-ollama >= 0.1.3 🟢 5.3
Details
CheckScoreReason
Code-Review🟢 7Found 23/30 approved changesets -- score normalized to 7
Maintained🟢 1030 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
Packaging🟢 10packaging workflow detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities⚠️ 033 existing vulnerabilities detected
pip/langchain-ollama >= 0.1.3 🟢 5.3
Details
CheckScoreReason
Code-Review🟢 7Found 23/30 approved changesets -- score normalized to 7
Maintained🟢 1030 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
Packaging🟢 10packaging workflow detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities⚠️ 033 existing vulnerabilities detected

Scanned Manifest Files

pyproject.toml
  • langchain-ollama@>= 0.1.3
requirements.txt
  • langchain-ollama@>= 0.1.3

@VinciGit00
Copy link
Collaborator

lol

@VinciGit00 VinciGit00 merged commit 31aff6b into pre/beta Sep 5, 2024
@github-actions
Copy link

github-actions bot commented Sep 5, 2024

🎉 This PR is included in version 1.17.0-beta.7 🎉

The release is available on:

Your semantic-release bot 📦🚀

@VinciGit00 VinciGit00 deleted the 633-bedrock-support-fix branch September 6, 2024 14:16
@github-actions
Copy link

github-actions bot commented Sep 8, 2024

🎉 This PR is included in version 1.19.0-beta.1 🎉

The release is available on:

Your semantic-release bot 📦🚀

@github-actions
Copy link

🎉 This PR is included in version 1.20.0-beta.1 🎉

The release is available on:

Your semantic-release bot 📦🚀

@github-actions
Copy link

🎉 This PR is included in version 1.21.0 🎉

The release is available on:

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

3 participants