GitHub repository

zeek/zeek

https://github.com/zeek/zeek (master)

Export SBOM
Import Notes 1 note from dependency parsing
Scanned 2 dependency files in this repository.
0 No confirmed runtime exposure found
0 0 critical/high packages in workspace, vendored, eval, test, docs, or unclear sources
0 Inventoried, not counted as vulnerable
9 No OSV advisories for these exact package versions
Scan Diagnostics 0 affected versions · 0 advisories · 9 total package versions Show detailsHide details
9 Total Package Versions 0 confirmed affected, 0 unverified
0 Deepest Vulnerability Path direct or root-level exposure
0 Runtime Candidate Findings 0 confirmed in non-runtime or unclear sources
0 Transitive Affected Packages 0 direct confirmed affected packages
0 Direct Affected Packages Closest fixes to prioritize first if exposure is runtime
0 Critical / High Packages 0 critical · 0 high across all exposure classes
Scanned Dependency Files 2 files · 0 transitive dependencies Show detailsHide details

The repository is the root. These files are the evidence sources used to build the aggregate dependency view.

doc/requirements.txt 5 components · 5 direct · 0 vulnerable
testing/btest/Files/mmdb/go.mod 4 components · 4 direct · 0 vulnerable

Vulnerability Monitor

0 confirmed affected package versions · 0 unique advisories · 0 confirmed affected direct dependencies

CRITICAL 0 HIGH 0 MEDIUM 0 LOW 0 UNKNOWN 0
No vulnerable dependencies were confirmed for this snapshot.
SBOM Manifest

0 confirmed affected package versions, 0 unverified package versions, 9 clear package versions.

0 review rows · 9 clear hidden Show tableHide table
Component Version Ecosystem Scope Exposure Source Package URL Status
Clear Dependencies 9 packages hidden Show clear packagesHide clear packages
Component Version Ecosystem Scope Exposure Source Package URL Status
github.com/maxmind/mmdbwriter v1.0.0 Go Direct
Workspace Subproject dependency evidence; installed when that workspace/package is used.
testing/btest/Files/mmdb/go.mod pkg:golang/github.com/maxmind/mmdbwriter@v1.0.0
Clear No OSV advisories for this exact version
github.com/oschwald/maxminddb-golang v1.12.0 Go Direct
Workspace Subproject dependency evidence; installed when that workspace/package is used.
testing/btest/Files/mmdb/go.mod pkg:golang/github.com/oschwald/maxminddb-golang@v1.12.0
Clear No OSV advisories for this exact version
go4.org/netipx v0.0.0-20220812043211-3cc044ffd68d Go Direct
Workspace Subproject dependency evidence; installed when that workspace/package is used.
testing/btest/Files/mmdb/go.mod pkg:golang/go4.org/netipx@v0.0.0-20220812043211-3cc044ffd68d
Clear No OSV advisories for this exact version
golang.org/x/sys v0.10.0 Go Direct
Workspace Subproject dependency evidence; installed when that workspace/package is used.
testing/btest/Files/mmdb/go.mod pkg:golang/golang.org/x/sys@v0.10.0
Clear No OSV advisories for this exact version
gitpython 3.1.50 PyPI Direct
Docs Documentation dependency; not assumed to be part of normal runtime install.
doc/requirements.txt pkg:pypi/gitpython@3.1.50
Clear No OSV advisories for this exact version
jinja2 3.1.6 PyPI Direct
Docs Documentation dependency; not assumed to be part of normal runtime install.
doc/requirements.txt pkg:pypi/jinja2@3.1.6
Clear No OSV advisories for this exact version
pygments 2.20.0 PyPI Direct
Docs Documentation dependency; not assumed to be part of normal runtime install.
doc/requirements.txt pkg:pypi/pygments@2.20.0
Clear No OSV advisories for this exact version
sphinx 7.4.7 PyPI Direct
Docs Documentation dependency; not assumed to be part of normal runtime install.
doc/requirements.txt pkg:pypi/sphinx@7.4.7
Clear No OSV advisories for this exact version
sphinx-rtd-theme 3.0.2 PyPI Direct
Docs Documentation dependency; not assumed to be part of normal runtime install.
doc/requirements.txt pkg:pypi/sphinx-rtd-theme@3.0.2
Clear No OSV advisories for this exact version