{ "startedUtc": "2026-10-25T07:11:08.705905+00:00", "finishedUtc": "2026-10-25T07:11:16.481575+00:00", "lockSha256": "902dee7aaf758577fed7fbd53b0161f691d598e89ffe75c6ebf375f13f6c456b", "packageCount": 63, "sourceQueryCount": 126, "errors": [ { "package": "torch", "version": "2.13.0+cpu", "provider": "pypi", "httpStatus": 404, "error": "HTTPError" } ], "findingPackageCount": 0, "advisoryRecords": 0, "status": "INCOMPLETE", "limits": "Exact lock pin queries only; public advisory metadata, no installation/resolution, exploit or reachability assessment. OSV performs upstream version matching. Missing releases are errors, not clean findings. Cross-provider aliases can overlap.", "rawSummarySha256": "804a01d79bb3ba295eab59284018a2060b680307720548ffcf804536a5d66fd0", "scope": "Actual63-distribution qualification image:55 application +6 exact test extras +pip/wheel. Full raw requests retained; exact vendor PyPI404 is not a clean finding." }