{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "meta": {
    "title": "ReFineID Security & Dependency Audit Manifest",
    "timestamp": "2026-09-27T12:00:55Z",
    "portal_url": "https://bob.refineid.fi/",
    "audit_url": "https://bob.refineid.fi/audit/",
    "json_url": "https://bob.refineid.fi/audit.json"
  },
  "summary": {
    "repositories_monitored": 7,
    "clean_repositories": 0,
    "repositories_with_warnings": 7,
    "cargo_vulnerabilities": 0,
    "cargo_advisories": 2,
    "outdated_dependencies": 0,
    "secret_leaks": 0
  },
  "repositories": [
    {
      "name": "refineid-core",
      "commit": "97332c8",
      "commit_message": "Switch toolchain to stable and stamp 26.9.24.210 (#28)",
      "commit_date": "2026-09-25",
      "status": "WARN",
      "checks": {
        "cargo_audit": {
          "status": "PASS",
          "vulnerabilities_count": 0,
          "advisories_count": 0,
          "advisories": [],
          "log_path": "audit/refineid-core/cargo-audit.txt"
        },
        "cargo_outdated": {
          "status": "PASS",
          "up_to_date": true,
          "log_path": "audit/refineid-core/cargo-outdated.txt"
        },
        "osv_scanner": {
          "status": "PASS",
          "packages_affected": 0,
          "no_package_sources": false,
          "log_path": "audit/refineid-core/osv-scanner.txt",
          "log_url": "https://bob.refineid.fi/audit/refineid-core/osv-scanner.txt"
        },
        "gitleaks": {
          "status": "WARN",
          "log_path": "audit/refineid-core/gitleaks.txt",
          "log_url": "https://bob.refineid.fi/audit/refineid-core/gitleaks.txt"
        }
      }
    },
    {
      "name": "refineid-unix",
      "commit": "93799ee",
      "commit_message": "Update Slint to 1.18 and pdfluent-jpeg2000 to 0.4 (#14)",
      "commit_date": "2026-09-27",
      "status": "WARN",
      "checks": {
        "cargo_audit": {
          "status": "WARN",
          "vulnerabilities_count": 0,
          "advisories_count": 2,
          "advisories": [
            {
              "id": "RUSTSEC-2025-0141",
              "package": "bincode",
              "version": "2.0.1",
              "title": "Bincode is unmaintained",
              "url": "https://git.sr.ht/~stygianentity/bincode/tree/v3.0/item/README.md",
              "kind": "unmaintained"
            },
            {
              "id": "RUSTSEC-2026-0192",
              "package": "ttf-parser",
              "version": "0.25.1",
              "title": "`ttf-parser` is unmaintained",
              "url": "https://github.com/harfbuzz/ttf-parser/issues/217",
              "kind": "unmaintained"
            }
          ],
          "log_path": "audit/refineid-unix/cargo-audit.txt"
        },
        "cargo_outdated": {
          "status": "PASS",
          "up_to_date": true,
          "log_path": "audit/refineid-unix/cargo-outdated.txt"
        },
        "osv_scanner": {
          "status": "WARN",
          "packages_affected": 2,
          "no_package_sources": false,
          "log_path": "audit/refineid-unix/osv-scanner.txt",
          "log_url": "https://bob.refineid.fi/audit/refineid-unix/osv-scanner.txt"
        },
        "gitleaks": {
          "status": "WARN",
          "log_path": "audit/refineid-unix/gitleaks.txt",
          "log_url": "https://bob.refineid.fi/audit/refineid-unix/gitleaks.txt"
        }
      }
    },
    {
      "name": "refineid-windows",
      "commit": "3c31332",
      "commit_message": "win32: version in main window title (#29)",
      "commit_date": "2026-09-27",
      "status": "WARN",
      "checks": {
        "cargo_audit": {
          "status": "PASS",
          "vulnerabilities_count": 0,
          "advisories_count": 0,
          "advisories": [],
          "log_path": "audit/refineid-windows/cargo-audit.txt"
        },
        "cargo_outdated": {
          "status": "PASS",
          "up_to_date": true,
          "log_path": "audit/refineid-windows/cargo-outdated.txt"
        },
        "osv_scanner": {
          "status": "PASS",
          "packages_affected": 0,
          "no_package_sources": false,
          "log_path": "audit/refineid-windows/osv-scanner.txt",
          "log_url": "https://bob.refineid.fi/audit/refineid-windows/osv-scanner.txt"
        },
        "gitleaks": {
          "status": "WARN",
          "log_path": "audit/refineid-windows/gitleaks.txt",
          "log_url": "https://bob.refineid.fi/audit/refineid-windows/gitleaks.txt"
        }
      }
    },
    {
      "name": "refineid-android",
      "commit": "dc3537a",
      "commit_message": "Add handshake deadline and timeout recovery to pairing listener (#48)",
      "commit_date": "2026-09-26",
      "status": "WARN",
      "checks": {
        "osv_scanner": {
          "status": "PASS",
          "packages_affected": 0,
          "no_package_sources": false,
          "log_path": "audit/refineid-android/osv-scanner.txt",
          "log_url": "https://bob.refineid.fi/audit/refineid-android/osv-scanner.txt"
        },
        "gitleaks": {
          "status": "WARN",
          "log_path": "audit/refineid-android/gitleaks.txt",
          "log_url": "https://bob.refineid.fi/audit/refineid-android/gitleaks.txt"
        }
      }
    },
    {
      "name": "refineid-apple",
      "commit": "2a9411e",
      "commit_message": "Retire WHATSUP.md and derive worktree activity from git (#34)",
      "commit_date": "2026-09-27",
      "status": "WARN",
      "checks": {
        "osv_scanner": {
          "status": "PASS",
          "packages_affected": 0,
          "no_package_sources": true,
          "log_path": "audit/refineid-apple/osv-scanner.txt",
          "log_url": "https://bob.refineid.fi/audit/refineid-apple/osv-scanner.txt"
        },
        "gitleaks": {
          "status": "WARN",
          "log_path": "audit/refineid-apple/gitleaks.txt",
          "log_url": "https://bob.refineid.fi/audit/refineid-apple/gitleaks.txt"
        }
      }
    },
    {
      "name": "refineid-java",
      "commit": "6dd924c",
      "commit_message": "Rename product ReFineID -> RefineID",
      "commit_date": "2026-09-13",
      "status": "WARN",
      "checks": {
        "osv_scanner": {
          "status": "WARN",
          "packages_affected": 6,
          "no_package_sources": false,
          "log_path": "audit/refineid-java/osv-scanner.txt",
          "log_url": "https://bob.refineid.fi/audit/refineid-java/osv-scanner.txt"
        },
        "gitleaks": {
          "status": "WARN",
          "log_path": "audit/refineid-java/gitleaks.txt",
          "log_url": "https://bob.refineid.fi/audit/refineid-java/gitleaks.txt"
        }
      }
    },
    {
      "name": "refineid-hack",
      "commit": "61e770d",
      "commit_message": "Rename product ReFineID -> RefineID",
      "commit_date": "2026-09-13",
      "status": "WARN",
      "checks": {
        "osv_scanner": {
          "status": "PASS",
          "packages_affected": 0,
          "no_package_sources": true,
          "log_path": "audit/refineid-hack/osv-scanner.txt",
          "log_url": "https://bob.refineid.fi/audit/refineid-hack/osv-scanner.txt"
        },
        "gitleaks": {
          "status": "WARN",
          "log_path": "audit/refineid-hack/gitleaks.txt",
          "log_url": "https://bob.refineid.fi/audit/refineid-hack/gitleaks.txt"
        }
      }
    }
  ]
}