{
 "attribution": "Advisory metadata from published GitHub repository security advisories and the GitHub Advisory Database (https://github.com/advisories, CC BY 4.0); CVE state from CVE Services; OSV.dev; NVD API (this product uses the NVD API but is not endorsed or certified by the NVD). Compiled by Limbowatch (https://limbo.watch), CC BY 4.0.",
 "coverage": {
  "by_schedule": {
   "daily: has an advisory in limbo": 3303,
   "every 3 days: has advisories, none in limbo": 2765,
   "every 30 days: no advisories yet": 59732,
   "weekly: repository not found": 1683
  },
  "by_source": {
   "github-cna-cve": 5093,
   "release:crates.io": 2,
   "release:npmjs.org": 250,
   "release:pypi.org": 54,
   "reviewed-origin": 3648,
   "seed:cpp-upstreams": 3603,
   "seed:popular-upstreams": 5613,
   "seed:top-packages": 54012,
   "seed:top100-upstreams": 12406
  },
  "note": "Every number is a floor: only repositories on the watchlist are seen.",
  "on_schedule": 67483,
  "polled_last_24h": 4126,
  "repos_with_advisories": 6072,
  "reviewed_advisories_known": 37686,
  "top_packages": {
   "ecosystems": {
    "Go": {
     "checked": 7749,
     "repos": 7855,
     "top": 10000,
     "watched": 7855,
     "with_advisories": 329
    },
    "Maven": {
     "checked": 2839,
     "repos": 2915,
     "top": 10000,
     "watched": 2915,
     "with_advisories": 187
    },
    "NuGet": {
     "checked": 4579,
     "repos": 4896,
     "top": 10000,
     "watched": 4896,
     "with_advisories": 56
    },
    "Packagist": {
     "checked": 9587,
     "repos": 9794,
     "top": 10000,
     "watched": 9794,
     "with_advisories": 235
    },
    "PyPI": {
     "checked": 8055,
     "repos": 8175,
     "top": 10000,
     "watched": 8175,
     "with_advisories": 375
    },
    "RubyGems": {
     "checked": 7644,
     "repos": 8053,
     "top": 10000,
     "watched": 8053,
     "with_advisories": 160
    },
    "crates.io": {
     "checked": 5567,
     "repos": 5645,
     "top": 10000,
     "watched": 5645,
     "with_advisories": 166
    },
    "npm": {
     "checked": 6746,
     "repos": 6874,
     "top": 10000,
     "watched": 6874,
     "with_advisories": 298
    }
   },
   "generated": "2026-11-09",
   "top": 10000
  },
  "watchlist_repos": 67483
 },
 "flow_7d": {
  "days": 7,
  "ends_at": "2026-11-12T15:51:42Z",
  "left": 100,
  "note": "Advisories newly published in watched repos, in ecosystems GitHub reviews, against advisories that left limbo in the same days. Both are floors: only watched repos are seen, some a few days late.",
  "published": 868,
  "published_all_ecosystems": 1533,
  "reviewed": 99
 },
 "generated_at": "2026-11-12T15:52:50Z",
 "in_limbo": {
  "age_buckets": {
   "1\u20132 months": 1990,
   "1\u20132 weeks": 861,
   "2\u20133 months": 1580,
   "2\u20134 weeks": 1723,
   "3\u20137 days": 434,
   "< 3 days": 430,
   "> 3 months": 3221
  },
  "age_days_median": 52.7,
  "by_cve": {
   "CVE cited, other state": 22,
   "CVE published by another CNA, not cited": 1241,
   "CVE published, cited": 2624,
   "CVE reserved (RBP)": 601,
   "no CVE anywhere": 5751
  },
  "by_ecosystem": {
   "GitHub Actions": 244,
   "Go": 1919,
   "Hex": 150,
   "Maven": 989,
   "NuGet": 181,
   "Packagist": 2150,
   "Pub": 6,
   "PyPI": 1695,
   "RubyGems": 278,
   "SwiftURL": 43,
   "crates.io": 613,
   "npm": 2082
  },
  "by_severity": {
   "critical": 969,
   "high": 4006,
   "low": 958,
   "medium": 4306,
   "unknown": 0
  },
  "count": 10239,
  "rbp": {
   "count": 601,
   "over_72h": 597
  }
 },
 "last_run": {
  "assessed": 25964,
  "by_tier": {
   "active": {
    "200": 2,
    "304": 26,
    "new_advisories": 2
   },
   "gone": {
    "404": 33,
    "no_etag": 31
   },
   "limbo": {
    "200": 85,
    "304": 3037,
    "new_advisories": 228
   },
   "new": {
    "200": 12,
    "new_advisories": 45,
    "no_etag": 12
   },
   "release": {
    "200": 19,
    "304": 908,
    "404": 4,
    "new_advisories": 57,
    "no_etag": 4
   }
  },
  "changed": 368,
  "cve_records_seen": 1984,
  "cves_relinked": 1,
  "events": 31,
  "finished_at": "2026-11-12T15:51:42Z",
  "git_tags": {
   "failed": 0,
   "listed": 1779,
   "repos": 1965,
   "tagged": 7686,
   "versions": 9345
  },
  "go_modules": {
   "due": 3,
   "failed": 0,
   "in_module": 0,
   "no_module": 0,
   "paths": 1332,
   "requests": 5,
   "resolved": 3
  },
  "http": {
   "failures": 5,
   "github_counted": 172,
   "github_not_modified": 3971,
   "requests": {
    "api.github.com": 4143,
    "api.osv.dev": 25660,
    "cveawg.mitre.org": 2338,
    "index.golang.org": 38,
    "packages.ecosyste.ms": 13,
    "packagist.org": 1,
    "proxy.golang.org": 5,
    "raw.githubusercontent.com": 1985,
    "repo1.maven.org": 7387,
    "services.nvd.nist.gov": 40
   },
   "seconds": 1630
  },
  "new_advisories": 332,
  "not_modified": 3971,
  "polled": 4126,
  "releases": {
   "crates.io": {
    "added": 0,
    "complete": true,
    "newest": "2026-11-12T15:19:03Z",
    "releases": 2799,
    "watched": 29
   },
   "maven-central": {
    "added": 0,
    "complete": true,
    "newest": "2026-11-12T14:43:26Z",
    "releases": 461,
    "watched": 34
   },
   "maven-central:polled": {
    "failed": 0,
    "not_found": 0,
    "packages": 7387
   },
   "npmjs.org": {
    "added": 0,
    "complete": false,
    "newest": null,
    "releases": 0,
    "watched": 0
   },
   "nuget.org": {
    "added": 0,
    "complete": false,
    "newest": "2026-11-12T15:13:12Z",
    "releases": 4000,
    "watched": 20
   },
   "packagist.org": {
    "added": 0,
    "complete": true,
    "newest": "2026-11-12T15:24:19Z",
    "releases": 2330,
    "watched": 53
   },
   "proxy.golang.org": {
    "added": 0,
    "complete": true,
    "newest": "2026-11-12T15:26:29Z",
    "releases": 23206,
    "watched": 267
   },
   "pypi.org": {
    "added": 0,
    "complete": false,
    "newest": "2026-11-12T15:23:23Z",
    "releases": 1000,
    "watched": 19
   },
   "repo1.maven.org": {
    "added": 0,
    "complete": false,
    "newest": null,
    "releases": 0,
    "watched": 0
   },
   "rubygems.org": {
    "added": 0,
    "complete": false,
    "newest": null,
    "releases": 0,
    "watched": 0
   }
  },
  "reviewed_synced": 144,
  "started_at": "2026-11-12T15:24:32Z",
  "stopped_early": null,
  "watchlist": 67483
 },
 "left_limbo": {
  "duplicates": 223,
  "review_lag_days_median": 14.5,
  "reviewed": 305,
  "withdrawn_or_gone": 1
 },
 "likely_permanent": {
  "age_days_median": 174.5,
  "by_cve": {
   "CVE cited, other state": 49,
   "CVE published by another CNA, not cited": 905,
   "CVE published, cited": 9488,
   "CVE reserved (RBP)": 567,
   "no CVE anywhere": 4187
  },
  "count": 15196,
  "note": "Published advisories in ecosystems GitHub doesn't review (free text, 'other', C/C++, container images, ...): scanners that read GitHub's database will probably never see them."
 },
 "limbowatch_version": "0.1.0a13",
 "recent_events": []
}