{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "meta": {
    "title": "ReFineID Security & Dependency Audit Manifest",
    "timestamp": "2026-09-12T18:20:08Z",
    "portal_url": "https://oc.daemon.fi/~bob/",
    "audit_url": "https://oc.daemon.fi/~bob/audit/",
    "json_url": "https://oc.daemon.fi/~bob/audit.json"
  },
  "summary": {
    "repositories_monitored": 7,
    "clean_repositories": 0,
    "repositories_with_warnings": 7,
    "cargo_vulnerabilities": 0,
    "cargo_advisories": 4,
    "outdated_dependencies": 1,
    "secret_leaks": 0
  },
  "repositories": [
    {
      "name": "refineid-core",
      "commit": "c3b9fae",
      "commit_message": "Merge pull request #11 from refineid/agent/resilient-pcsc",
      "commit_date": "2026-09-12",
      "status": "WARN",
      "checks": {
        "cargo_audit": {
          "status": "PASS",
          "vulnerabilities_count": 0,
          "advisories_count": 0,
          "advisories": [],
          "log_path": "audit/refineid-core/cargo-audit.txt"
        },
        "cargo_outdated": {
          "status": "PASS",
          "up_to_date": true,
          "log_path": "audit/refineid-core/cargo-outdated.txt"
        },
        "osv_scanner": {
          "status": "PASS",
          "packages_affected": 0,
          "log_path": "audit/refineid-core/osv-scanner.txt"
        },
        "gitleaks": {
          "status": "WARN",
          "log_path": "audit/refineid-core/gitleaks.txt"
        }
      }
    },
    {
      "name": "refineid-unix",
      "commit": "ef3bde0",
      "commit_message": "test(pkcs11): note temporary pin requirement in suite header",
      "commit_date": "2026-09-12",
      "status": "WARN",
      "checks": {
        "cargo_audit": {
          "status": "WARN",
          "vulnerabilities_count": 0,
          "advisories_count": 4,
          "advisories": [
            {
              "id": "RUSTSEC-2025-0141",
              "package": "bincode",
              "version": "2.0.1",
              "title": "Bincode is unmaintained",
              "url": "https://git.sr.ht/~stygianentity/bincode/tree/v3.0/item/README.md",
              "kind": "unmaintained"
            },
            {
              "id": "RUSTSEC-2024-0436",
              "package": "paste",
              "version": "1.0.15",
              "title": "paste - no longer maintained",
              "url": "https://github.com/dtolnay/paste",
              "kind": "unmaintained"
            },
            {
              "id": "RUSTSEC-2026-0206",
              "package": "rustybuzz",
              "version": "0.20.1",
              "title": "`rustybuzz` is unmaintained",
              "url": "https://github.com/harfbuzz/rustybuzz/issues/166",
              "kind": "unmaintained"
            },
            {
              "id": "RUSTSEC-2026-0192",
              "package": "ttf-parser",
              "version": "0.25.1",
              "title": "`ttf-parser` is unmaintained",
              "url": "https://github.com/harfbuzz/ttf-parser/issues/217",
              "kind": "unmaintained"
            }
          ],
          "log_path": "audit/refineid-unix/cargo-audit.txt"
        },
        "cargo_outdated": {
          "status": "PASS",
          "up_to_date": true,
          "log_path": "audit/refineid-unix/cargo-outdated.txt"
        },
        "osv_scanner": {
          "status": "WARN",
          "packages_affected": 4,
          "log_path": "audit/refineid-unix/osv-scanner.txt"
        },
        "gitleaks": {
          "status": "WARN",
          "log_path": "audit/refineid-unix/gitleaks.txt"
        }
      }
    },
    {
      "name": "refineid-windows",
      "commit": "0fbb071",
      "commit_message": "Update GitHub repository and dependency URLs to lowercase refineid",
      "commit_date": "2026-09-11",
      "status": "WARN",
      "checks": {
        "cargo_audit": {
          "status": "PASS",
          "vulnerabilities_count": 0,
          "advisories_count": 0,
          "advisories": [],
          "log_path": "audit/refineid-windows/cargo-audit.txt"
        },
        "cargo_outdated": {
          "status": "WARN",
          "up_to_date": false,
          "log_path": "audit/refineid-windows/cargo-outdated.txt"
        },
        "osv_scanner": {
          "status": "PASS",
          "packages_affected": 0,
          "log_path": "audit/refineid-windows/osv-scanner.txt"
        },
        "gitleaks": {
          "status": "WARN",
          "log_path": "audit/refineid-windows/gitleaks.txt"
        }
      }
    },
    {
      "name": "refineid-android",
      "commit": "ec66a39",
      "commit_message": "Support identity cards on USB reader in RAPP proxy (#33)",
      "commit_date": "2026-09-12",
      "status": "WARN",
      "checks": {
        "osv_scanner": {
          "status": "PASS",
          "packages_affected": 0,
          "log_path": "audit/refineid-android/osv-scanner.txt"
        },
        "gitleaks": {
          "status": "WARN",
          "log_path": "audit/refineid-android/gitleaks.txt"
        }
      }
    },
    {
      "name": "refineid-apple",
      "commit": "0b3b0bb",
      "commit_message": "Merge pull request #8 from refineid/agent/worktree-policy",
      "commit_date": "2026-09-12",
      "status": "WARN",
      "checks": {
        "osv_scanner": {
          "status": "CLEAN",
          "log_path": "audit/refineid-apple/osv-scanner.txt"
        },
        "gitleaks": {
          "status": "WARN",
          "log_path": "audit/refineid-apple/gitleaks.txt"
        }
      }
    },
    {
      "name": "refineid-java",
      "commit": "af906bf",
      "commit_message": "Update repository URLs to lowercase refineid",
      "commit_date": "2026-09-11",
      "status": "WARN",
      "checks": {
        "osv_scanner": {
          "status": "WARN",
          "packages_affected": 6,
          "log_path": "audit/refineid-java/osv-scanner.txt"
        },
        "gitleaks": {
          "status": "WARN",
          "log_path": "audit/refineid-java/gitleaks.txt"
        }
      }
    },
    {
      "name": "refineid-hack",
      "commit": "6873035",
      "commit_message": "Suppress bot-to-bot greeting loop in IRC bridges",
      "commit_date": "2026-09-11",
      "status": "WARN",
      "checks": {
        "osv_scanner": {
          "status": "CLEAN",
          "log_path": "audit/refineid-hack/osv-scanner.txt"
        },
        "gitleaks": {
          "status": "WARN",
          "log_path": "audit/refineid-hack/gitleaks.txt"
        }
      }
    }
  ]
}