{"slug": "builder-safety", "name": "Builder safety", "intro": "Builder safety is the record of security warnings for the code that builders use. A security advisory is a public warning about a hole in a piece of software. GitHub keeps the list and rates each one. The Reef records every day's changes on Flare, so anyone can check what was known and when.", "added": "2026-11-09", "recordCount": 1, "records": [{"projectId": 20, "name": "Security advisories (GitHub reviewed)", "statusLine": "11 days on record \u00b7 Latest Nov 9, 2026", "url": "/p/20", "advisorySummary": {"since": "2026-10-30", "published": 114, "critical": 24, "high": 47}, "entries": [{"day": "2026-11-09", "noteId": 452, "published": 45, "changed": 23, "withdrawn": 0, "critical": 6, "high": 20, "ratingsKnown": true, "names": ["fastapi-code-generator", "github.com/pocket-id/pocket-id/backend", "gpustack", "github.com/kubeflow/pipelines", "loggingredactor"], "moreNames": 47, "rowCount": 68}, {"day": "2026-11-08", "noteId": 447, "published": 0, "changed": 0, "withdrawn": 0, "critical": 0, "high": 0, "ratingsKnown": true, "names": [], "moreNames": 0, "rowCount": 0}, {"day": "2026-11-07", "noteId": 443, "published": 0, "changed": 2, "withdrawn": 0, "critical": 0, "high": 0, "ratingsKnown": true, "names": ["misp-modules", "paramiko"], "moreNames": 0, "rowCount": 2}, {"day": "2026-11-06", "noteId": 439, "published": 18, "changed": 6, "withdrawn": 0, "critical": 6, "high": 4, "ratingsKnown": true, "names": ["github.com/canonical/lxd", "github.com/osac-project/osac-operator", "GeoNode", "Magick.NET-Q16-AnyCPU", "org.eclipse.hawkbit:hawkbit-ddi-resource"], "moreNames": 23, "rowCount": 24}, {"day": "2026-11-05", "noteId": 434, "published": 10, "changed": 30, "withdrawn": 0, "critical": 3, "high": 4, "ratingsKnown": true, "names": ["urwid", "flowise", "github.com/chainguard-dev/kaniko", "org.apache.activemq:apache-activemq", "org.apache.activemq:activemq-all"], "moreNames": 23, "rowCount": 40}, {"day": "2026-11-04", "noteId": 430, "published": 17, "changed": 46, "withdrawn": 0, "critical": 1, "high": 9, "ratingsKnown": true, "names": ["org.apache.tomcat.embed:tomcat-embed-core", "org.apache.tomcat:tomcat", "org.apache.tomcat:tomcat-util-scan", "org.apache.activemq:activemq-broker", "org.apache.activemq:apache-activemq"], "moreNames": 62, "rowCount": 63}, {"day": "2026-11-03", "noteId": 418, "published": 22, "changed": 29, "withdrawn": 1, "critical": 8, "high": 9, "ratingsKnown": true, "names": ["flowise", "enspirit/elo", "prefect", "org.apache.iotdb:iotdb-server", "Metalama.Framework"], "moreNames": 132, "rowCount": 52}, {"day": "2026-11-02", "noteId": 357, "published": 2, "changed": 16, "withdrawn": 0, "critical": 0, "high": 1, "ratingsKnown": true, "names": ["sd-jwt/decode", "sd-jwt/core", "bytebase/dbhub", "facturascripts/facturascripts", "parse-server"], "moreNames": 11, "rowCount": 18}, {"day": "2026-11-01", "noteId": 262, "published": 0, "changed": 0, "withdrawn": 0, "critical": 0, "high": 0, "ratingsKnown": true, "names": [], "moreNames": 0, "rowCount": 0}, {"day": "2026-10-31", "noteId": 212, "published": 0, "changed": 0, "withdrawn": 0, "critical": 0, "high": 0, "ratingsKnown": true, "names": [], "moreNames": 0, "rowCount": 0}, {"day": "2026-10-30", "noteId": 209, "published": 0, "changed": 0, "withdrawn": 0, "critical": 0, "high": 0, "ratingsKnown": true, "names": [], "moreNames": 0, "rowCount": 0}]}]}