{
  "schema_version": 1,
  "generated_at": "2026-09-16T14:40:11.056Z",
  "tool_version": "1.5.6",
  "ecosystems": {
    "Go": {
      "advisories": 14125,
      "malicious": 18
    },
    "Maven": {
      "advisories": 13162,
      "malicious": 2
    },
    "NuGet": {
      "advisories": 7030,
      "malicious": 777
    },
    "Packagist": {
      "advisories": 13434,
      "malicious": 1
    },
    "PyPI": {
      "advisories": 18566,
      "malicious": 11722
    },
    "RubyGems": {
      "advisories": 1982,
      "malicious": 3627
    },
    "crates.io": {
      "advisories": 3687,
      "malicious": 20
    },
    "npm": {
      "advisories": 10045,
      "malicious": 221290
    }
  },
  "sources": [
    {
      "name": "npm",
      "license": "CC-BY-4.0"
    },
    {
      "name": "PyPI",
      "license": "CC-BY-4.0"
    },
    {
      "name": "Go",
      "license": "CC-BY-4.0"
    },
    {
      "name": "crates.io",
      "license": "CC0-1.0"
    },
    {
      "name": "Maven",
      "license": "CC-BY-4.0"
    },
    {
      "name": "Packagist",
      "license": "CC-BY-4.0"
    },
    {
      "name": "RubyGems",
      "license": "CC-BY-4.0"
    },
    {
      "name": "NuGet",
      "license": "CC-BY-4.0"
    }
  ],
  "sha256": {
    "vuln-Go.json.gz": "7e7bf4e097499f52965c14eb80890149a79fe2ab346dbd3554946314c98ef639",
    "malicious-Go.txt.gz": "602509d02bdccafa0053b937ec33655898ec773cf4c158801cd0cbcdad4583c3",
    "vuln-Maven.json.gz": "4c06ae563fe05979a5b8b14c609e209522fb8736a1d482dfdcfe92318a50ab97",
    "malicious-Maven.txt.gz": "15efce90db0e373918c2b57eafe4761b29ab581b3233135be3ebe2d2e89876e1",
    "vuln-NuGet.json.gz": "15bf6f0ffa927946c66ce221714da689f4857afbb5b189c745028a1f54c3a490",
    "malicious-NuGet.txt.gz": "b8cb582e503753c5fbff72e13213d73698fda22f3bdfc93e28fdd0b2de339d1e",
    "vuln-Packagist.json.gz": "d6befb5b6239d1f68eddd04a3878182a1d4932563db0637048f4b381e39722da",
    "malicious-Packagist.txt.gz": "9fe5460d6ce61cf9638a466ad76c1d705bd28d8e8aab8681258a4cea85dc9f36",
    "vuln-PyPI.json.gz": "f894ab5c130649cf103727a994edd26580b6e967168bbdf3e05f4f3bb6b6d604",
    "malicious-PyPI.txt.gz": "f4720028b9ba71bd906cfecd1977aed26c2fb61b6edfe22566d22fc25d98b3fa",
    "vuln-RubyGems.json.gz": "1e3989b5a599323d2c4571c7e7bc29ce6c63d912e5e6ee052d9fdc927e342591",
    "malicious-RubyGems.txt.gz": "45a3e47ff9bdb881c51dccfd8d298bd1661d56b841102dc1f2c1cbb25daa963c",
    "vuln-crates.io.json.gz": "def93e11108f05452ab9d19093c95975516ee593564e3bdac934a97520a25d9e",
    "malicious-crates.io.txt.gz": "1e138b0b76ed755a5584772e6a5e2504c58ebf1543689b64526a1ddbd4fee55a",
    "vuln-npm.json.gz": "7a960d5617ccd7144b95aa7bab69d508a25d1ae4a593b403f607ea6382541e85",
    "malicious-npm.txt.gz": "cf27ebe6dc1042e469bab3969456c778713856fe9a326e7e0d6a215b78c08f5a"
  }
}
