assessment-results/vllm.json

{
  "assessment": {
    "library_name": "vllm-project/vllm",
    "version": "v0.9.1",
    "language": "Python/CUDA",
    "framework": "LLM Inference",
    "completed_time": "2024-06-18T12:00:00Z",
    "last_updated": "2024-06-18T12:00:00Z",
    "active_maintenance": true,
    "independently_verified": true,
    "report_url": "https://981526092.github.io/LibVulnWatch/vllm-project_vllm_v0.9.1.html",
    "repository_url": "https://github.com/vllm-project/vllm",
    "github_stars": 50600,
    "license": "Apache-2.0",
    "scores": {
      "license_validation": 4,
      "security_assessment": 2,
      "maintenance_health": 3,
      "dependency_management": 1,
      "regulatory_compliance": 1
    },
    "details": {
      "license_validation": {
        "license_type": "Apache-2.0",
        "compatibility": "High",
        "issues": "None"
      },
      "security_assessment": {
        "known_vulnerabilities": 3,
        "patch_responsiveness": "Medium",
        "last_security_review": "2024-03-15"
      },
      "maintenance_health": {
        "active_contributors": 22,
        "release_frequency": "Medium",
        "issue_response_time": "4.1 days"
      },
      "dependency_management": {
        "vulnerable_dependencies": 7,
        "dependency_freshness": "Low",
        "supply_chain_security": "Missing SBOM"
      },
      "regulatory_compliance": {
        "documentation_quality": "Low",
        "data_privacy_features": "Minimal",
        "audit_readiness": "Low"
      }
    }
  }
}