add

assessment-results/crewai_crewai.json

@@ -0,0 +1,48 @@
+{
+  "assessment": {
+    "library_name": "crewai/crewai",
+    "version": "v0.19.0",
+    "language": "Python",
+    "framework": "Agent Framework",
+    "completed_time": "2024-06-18T12:00:00Z",
+    "last_updated": "2024-06-18T12:00:00Z",
+    "active_maintenance": true,
+    "independently_verified": true,
+    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/crewai_crewai.html",
+    "scores": {
+      "license_validation": 0.0,
+      "security_assessment": 8.0,
+      "maintenance_health": 4.0,
+      "dependency_management": 8.0,
+      "regulatory_compliance": 8.0
+    },
+    "details": {
+      "license_validation": {
+        "license_type": "MIT",
+        "compatibility": "High",
+        "issues": "None"
+      },
+      "security_assessment": {
+        "known_vulnerabilities": 4,
+        "patch_responsiveness": "Low",
+        "last_security_review": "None",
+        "issues": "Telemetry and data collection without user consent"
+      },
+      "maintenance_health": {
+        "active_contributors": 15,
+        "release_frequency": "Medium",
+        "issue_response_time": "3.5 days"
+      },
+      "dependency_management": {
+        "vulnerable_dependencies": 5,
+        "dependency_freshness": "Poor",
+        "supply_chain_security": "Missing SBOM"
+      },
+      "regulatory_compliance": {
+        "documentation_quality": "Low",
+        "data_privacy_features": "Minimal",
+        "audit_readiness": "Low"
+      }
+    }
+  }
+}

assessment-results/google_jax.json

@@ -0,0 +1,47 @@
+{
+  "assessment": {
+    "library_name": "google/jax",
+    "version": "v0.4.14",
+    "language": "Python",
+    "framework": "Machine Learning",
+    "completed_time": "2024-06-12T12:00:00Z",
+    "last_updated": "2024-06-12T12:00:00Z",
+    "active_maintenance": true,
+    "independently_verified": true,
+    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/google_jax.html",
+    "scores": {
+      "license_validation": 0.0,
+      "security_assessment": 4.0,
+      "maintenance_health": 2.0,
+      "dependency_management": 8.0,
+      "regulatory_compliance": 8.0
+    },
+    "details": {
+      "license_validation": {
+        "license_type": "Apache-2.0",
+        "compatibility": "High",
+        "issues": "None"
+      },
+      "security_assessment": {
+        "known_vulnerabilities": 1,
+        "patch_responsiveness": "Medium",
+        "last_security_review": "2024-04-15"
+      },
+      "maintenance_health": {
+        "active_contributors": 125,
+        "release_frequency": "High",
+        "issue_response_time": "2.1 days"
+      },
+      "dependency_management": {
+        "vulnerable_dependencies": 3,
+        "dependency_freshness": "Good",
+        "supply_chain_security": "Missing SBOM"
+      },
+      "regulatory_compliance": {
+        "documentation_quality": "Low",
+        "data_privacy_features": "Limited",
+        "audit_readiness": "Low"
+      }
+    }
+  }
+}

assessment-results/{sample_assessment.json → langchain-ai_langchain.json}

@@ -3,18 +3,18 @@
     "library_name": "langchain-ai/langchain",
     "version": "v0.1.0",
     "language": "Python",
-    "framework": "Python SDK",
-    "completed_time": "2025-05-01T12:00:00Z",
-    "last_updated": "2025-05-01T12:00:00Z",
+    "framework": "LLM Orchestration",
+    "completed_time": "2024-06-15T12:00:00Z",
+    "last_updated": "2024-06-15T12:00:00Z",
     "active_maintenance": true,
     "independently_verified": true,
-    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/langchain-ai_langchain_v0.1.0.html",
+    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/langchain-ai_langchain.html",
     "scores": {
-      "license_validation": 2.5,
-      "security_assessment": 4.8,
-      "maintenance_health": 1.2,
-      "dependency_management": 3.7,
-      "regulatory_compliance": 5.2
+      "license_validation": 0.0,
+      "security_assessment": 8.0,
+      "maintenance_health": 8.0,
+      "dependency_management": 8.0,
+      "regulatory_compliance": 4.0
     },
     "details": {
       "license_validation": {
@@ -23,24 +23,24 @@
         "issues": "None"
       },
       "security_assessment": {
-        "known_vulnerabilities": 3,
-        "patch_responsiveness": "Medium",
-        "last_security_review": "2025-03-15"
+        "known_vulnerabilities": 2,
+        "patch_responsiveness": "Low",
+        "last_security_review": "2024-03-15"
       },
       "maintenance_health": {
-        "active_contributors": 42,
-        "release_frequency": "High",
-        "issue_response_time": "1.2 days"
+        "active_contributors": 87,
+        "release_frequency": "Low",
+        "issue_response_time": "4.5 days"
       },
       "dependency_management": {
-        "vulnerable_dependencies": 2,
-        "dependency_freshness": "Good",
-        "supply_chain_security": "Medium"
+        "vulnerable_dependencies": 3,
+        "dependency_freshness": "Poor",
+        "supply_chain_security": "Missing SBOM"
       },
       "regulatory_compliance": {
         "documentation_quality": "Medium",
         "data_privacy_features": "Basic",
-        "audit_readiness": "Low"
+        "audit_readiness": "Medium"
       }
     }
   }

assessment-results/langchain-ai_langgraph.json

@@ -0,0 +1,47 @@
+{
+  "assessment": {
+    "library_name": "langchain-ai/langgraph",
+    "version": "v0.0.30",
+    "language": "Python",
+    "framework": "Agent Framework",
+    "completed_time": "2024-06-20T12:00:00Z",
+    "last_updated": "2024-06-20T12:00:00Z",
+    "active_maintenance": true,
+    "independently_verified": true,
+    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/langchain-ai_langgraph.html",
+    "scores": {
+      "license_validation": 8.0,
+      "security_assessment": 8.0,
+      "maintenance_health": 2.0,
+      "dependency_management": 8.0,
+      "regulatory_compliance": 8.0
+    },
+    "details": {
+      "license_validation": {
+        "license_type": "Missing explicit license",
+        "compatibility": "Unknown",
+        "issues": "No license file found"
+      },
+      "security_assessment": {
+        "known_vulnerabilities": 3,
+        "patch_responsiveness": "Low",
+        "last_security_review": "None"
+      },
+      "maintenance_health": {
+        "active_contributors": 21,
+        "release_frequency": "High",
+        "issue_response_time": "1.2 days"
+      },
+      "dependency_management": {
+        "vulnerable_dependencies": 2,
+        "dependency_freshness": "Poor",
+        "supply_chain_security": "Missing SBOM"
+      },
+      "regulatory_compliance": {
+        "documentation_quality": "Low",
+        "data_privacy_features": "Minimal",
+        "audit_readiness": "Low"
+      }
+    }
+  }
+}

assessment-results/{sample_assessment3.json → microsoft_autogen.json}

@@ -4,11 +4,11 @@
     "version": "v0.2.0",
     "language": "Python",
     "framework": "Agent Framework",
-    "completed_time": "2025-05-03T12:00:00Z",
-    "last_updated": "2025-05-03T12:00:00Z",
+    "completed_time": "2024-06-05T12:00:00Z",
+    "last_updated": "2024-06-05T12:00:00Z",
     "active_maintenance": true,
     "independently_verified": true,
-    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/microsoft_autogen_v0.2.0.html",
+    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/microsoft_autogen.html",
     "scores": {
       "license_validation": 3.1,
       "security_assessment": 6.7,
@@ -25,7 +25,7 @@
       "security_assessment": {
         "known_vulnerabilities": 5,
         "patch_responsiveness": "Medium",
-        "last_security_review": "2025-02-20"
+        "last_security_review": "2024-02-20"
       },
       "maintenance_health": {
         "active_contributors": 28,

assessment-results/onnx_onnx.json

@@ -0,0 +1,47 @@
+{
+  "assessment": {
+    "library_name": "onnx/onnx",
+    "version": "v1.15.0",
+    "language": "Python",
+    "framework": "Machine Learning",
+    "completed_time": "2024-06-14T12:00:00Z",
+    "last_updated": "2024-06-14T12:00:00Z",
+    "active_maintenance": true,
+    "independently_verified": true,
+    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/onnx_onnx.html",
+    "scores": {
+      "license_validation": 2.0,
+      "security_assessment": 4.0,
+      "maintenance_health": 4.0,
+      "dependency_management": 8.0,
+      "regulatory_compliance": 6.0
+    },
+    "details": {
+      "license_validation": {
+        "license_type": "MIT",
+        "compatibility": "High",
+        "issues": "Patent risk concerns"
+      },
+      "security_assessment": {
+        "known_vulnerabilities": 1,
+        "patch_responsiveness": "Medium",
+        "last_security_review": "2024-02-10"
+      },
+      "maintenance_health": {
+        "active_contributors": 78,
+        "release_frequency": "Medium",
+        "issue_response_time": "5.7 days"
+      },
+      "dependency_management": {
+        "vulnerable_dependencies": 2,
+        "dependency_freshness": "Medium",
+        "supply_chain_security": "Missing SBOM"
+      },
+      "regulatory_compliance": {
+        "documentation_quality": "Low",
+        "data_privacy_features": "Limited",
+        "audit_readiness": "Low"
+      }
+    }
+  }
+}

assessment-results/{sample_assessment2.json → pytorch_pytorch.json}

@@ -4,17 +4,17 @@
     "version": "v2.1.0",
     "language": "Python",
     "framework": "Machine Learning",
-    "completed_time": "2025-05-02T12:00:00Z",
-    "last_updated": "2025-05-02T12:00:00Z",
+    "completed_time": "2024-06-10T12:00:00Z",
+    "last_updated": "2024-06-10T12:00:00Z",
     "active_maintenance": true,
     "independently_verified": true,
-    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/pytorch_pytorch_v2.1.0.md",
+    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/pytorch_pytorch.html",
     "scores": {
-      "license_validation": 1.8,
-      "security_assessment": 3.2,
-      "maintenance_health": 2.0,
-      "dependency_management": 2.5,
-      "regulatory_compliance": 4.1
+      "license_validation": 0.0,
+      "security_assessment": 8.0,
+      "maintenance_health": 4.0,
+      "dependency_management": 8.0,
+      "regulatory_compliance": 4.0
     },
     "details": {
       "license_validation": {
@@ -23,9 +23,10 @@
         "issues": "None"
       },
       "security_assessment": {
-        "known_vulnerabilities": 2,
+        "known_vulnerabilities": 3,
         "patch_responsiveness": "High",
-        "last_security_review": "2025-04-05"
+        "last_security_review": "2024-05-10",
+        "critical_issue": "CVE-2023-43654 (RCE in model deserialization)"
       },
       "maintenance_health": {
         "active_contributors": 156,
@@ -33,9 +34,9 @@
         "issue_response_time": "3.2 days"
       },
       "dependency_management": {
-        "vulnerable_dependencies": 1,
-        "dependency_freshness": "Good",
-        "supply_chain_security": "Good"
+        "vulnerable_dependencies": 4,
+        "dependency_freshness": "Medium",
+        "supply_chain_security": "Missing SBOM"
       },
       "regulatory_compliance": {
         "documentation_quality": "Medium",

assessment-results/tensorflow_tensorflow.json

@@ -0,0 +1,47 @@
+{
+  "assessment": {
+    "library_name": "tensorflow/tensorflow",
+    "version": "v2.15.0",
+    "language": "Python",
+    "framework": "Machine Learning",
+    "completed_time": "2024-06-08T12:00:00Z",
+    "last_updated": "2024-06-08T12:00:00Z",
+    "active_maintenance": true,
+    "independently_verified": true,
+    "report_url": "https://github.com/LibVulnWatch/reports/raw/main/tensorflow_tensorflow.html",
+    "scores": {
+      "license_validation": 0.0,
+      "security_assessment": 8.0,
+      "maintenance_health": 4.0,
+      "dependency_management": 8.0,
+      "regulatory_compliance": 4.0
+    },
+    "details": {
+      "license_validation": {
+        "license_type": "Apache-2.0",
+        "compatibility": "High",
+        "issues": "None"
+      },
+      "security_assessment": {
+        "known_vulnerabilities": 5,
+        "patch_responsiveness": "High",
+        "last_security_review": "2024-03-20"
+      },
+      "maintenance_health": {
+        "active_contributors": 221,
+        "release_frequency": "Medium",
+        "issue_response_time": "4.5 days"
+      },
+      "dependency_management": {
+        "vulnerable_dependencies": 3,
+        "dependency_freshness": "Medium",
+        "supply_chain_security": "Missing SBOM"
+      },
+      "regulatory_compliance": {
+        "documentation_quality": "Medium",
+        "data_privacy_features": "Basic",
+        "audit_readiness": "Medium"
+      }
+    }
+  }
+}