Scorecard: Pinned-Dependencies (8/10)

[don-petry]

OpenSSF Scorecard Finding

Check: Pinned-Dependencies
Score: 8 / 10
Finding: dependency not pinned by hash detected -- score normalized to 8

Remediation

https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies

Context

This issue was automatically created from an OpenSSF Scorecard scan on 2026-06-15.

[don-petry]

Weekly update: Score is now 4/10. Finding: dependency not pinned by hash detected -- score normalized to 4