Scorecard: Pinned-Dependencies (5/10)

[don-petry]

OpenSSF Scorecard Finding

Check: Pinned-Dependencies
Score: 5 / 10
Finding: dependency not pinned by hash detected -- score normalized to 5

Remediation

https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies

Context

This issue was automatically created from an OpenSSF Scorecard scan on 2026-07-14.

[don-petry]

Weekly update: Score is now 5/10. Finding: dependency not pinned by hash detected -- score normalized to 5

[don-petry]

Weekly update: Score is now 5/10. Finding: dependency not pinned by hash detected -- score normalized to 5