{
  "status": "source_build_success_unsigned",
  "source_base": "KSign v1.6",
  "upstream_commit": "09a845f6121e81d9e90e9b24ea48a3c2a69812d5",
  "review_scope": "Startup defaults, branding, default sources and build packaging only. Not a full security audit.",
  "package_pins": [
    {
      "identity": "apikit",
      "kind": "remoteSourceControl",
      "location": "https://github.com/ishkawa/APIKit.git",
      "state": {
        "revision": "b839e53b870104798035b279d2a6168b0a2227b1",
        "version": "5.4.0"
      }
    },
    {
      "identity": "ararchivekit",
      "kind": "remoteSourceControl",
      "location": "https://github.com/LebJe/ArArchiveKit",
      "state": {
        "revision": "ec33ce8bcb0be483e80ed49c95413e64e71e157b",
        "version": "0.3.0"
      }
    },
    {
      "identity": "async-http-client",
      "kind": "remoteSourceControl",
      "location": "https://github.com/swift-server/async-http-client.git",
      "state": {
        "revision": "60235983163d040f343a489f7e2e77c1918a8bd9",
        "version": "1.26.1"
      }
    },
    {
      "identity": "async-kit",
      "kind": "remoteSourceControl",
      "location": "https://github.com/vapor/async-kit.git",
      "state": {
        "revision": "e048c8ee94967e8d8a1c2ec0e1156d6f7fa34d31",
        "version": "1.20.0"
      }
    },
    {
      "identity": "bitbytedata",
      "kind": "remoteSourceControl",
      "location": "https://github.com/tsolomko/BitByteData",
      "state": {
        "revision": "cdcdc5177ad536cfb11b95c620f926a81014b7fe",
        "version": "2.0.4"
      }
    },
    {
      "identity": "console-kit",
      "kind": "remoteSourceControl",
      "location": "https://github.com/vapor/console-kit.git",
      "state": {
        "revision": "742f624a998cba2a9e653d9b1e91ad3f3a5dff6b",
        "version": "4.15.2"
      }
    },
    {
      "identity": "heliumlogger",
      "kind": "remoteSourceControl",
      "location": "https://github.com/Kitura/HeliumLogger.git",
      "state": {
        "revision": "fc2a71597ae974da5282d751bcc11965964bccce",
        "version": "2.0.0"
      }
    },
    {
      "identity": "licenseplist",
      "kind": "remoteSourceControl",
      "location": "https://github.com/mono0926/LicensePlist",
      "state": {
        "revision": "ab1692c16f4ce50fc134a8f51179f3310d41c5ef",
        "version": "3.27.1"
      }
    },
    {
      "identity": "loggerapi",
      "kind": "remoteSourceControl",
      "location": "https://github.com/Kitura/LoggerAPI.git",
      "state": {
        "revision": "4e6b45e850ffa275e8e26a24c6454fd709d5b6ac",
        "version": "2.0.0"
      }
    },
    {
      "identity": "multipart-kit",
      "kind": "remoteSourceControl",
      "location": "https://github.com/vapor/multipart-kit.git",
      "state": {
        "revision": "3498e60218e6003894ff95192d756e238c01f44e",
        "version": "4.7.1"
      }
    },
    {
      "identity": "nuke",
      "kind": "remoteSourceControl",
      "location": "https://github.com/kean/Nuke",
      "state": {
        "revision": "0ead44350d2737db384908569c012fe67c421e4d",
        "version": "12.8.0"
      }
    },
    {
      "identity": "openssl",
      "kind": "remoteSourceControl",
      "location": "https://github.com/krzyzanowskim/OpenSSL",
      "state": {
        "revision": "623c84da314e85363236507ca38a4bde65df21c3",
        "version": "3.3.3001"
      }
    },
    {
      "identity": "routing-kit",
      "kind": "remoteSourceControl",
      "location": "https://github.com/vapor/routing-kit.git",
      "state": {
        "revision": "93f7222c8e195cbad39fafb5a0e4cc85a8def7ea",
        "version": "4.9.2"
      }
    },
    {
      "identity": "swcompression",
      "kind": "remoteSourceControl",
      "location": "https://github.com/tsolomko/SWCompression",
      "state": {
        "revision": "390e0b0af8dd19a600005a242a89e570ff482e09",
        "version": "4.8.6"
      }
    },
    {
      "identity": "swift-algorithms",
      "kind": "remoteSourceControl",
      "location": "https://github.com/apple/swift-algorithms.git",
      "state": {
        "revision": "87e50f483c54e6efd60e885f7f5aa946cee68023",
        "version": "1.2.1"
      }
    },
    {
      "identity": "swift-argument-parser",
      "kind": "remoteSourceControl",
      "location": "https://github.com/apple/swift-argument-parser.git",
      "state": {
        "revision": "011f0c765fb46d9cac61bca19be0527e99c98c8b",
        "version": "1.5.1"
      }
    },
    {
      "identity": "swift-asn1",
      "kind": "remoteSourceControl",
      "location": "https://github.com/apple/swift-asn1.git",
      "state": {
        "revision": "a54383ada6cecde007d374f58f864e29370ba5c3",
        "version": "1.3.2"
      }
    },
    {
      "identity": "swift-async-algorithms",
      "kind": "remoteSourceControl",
      "location": "https://github.com/apple/swift-async-algorithms.git",
      "state": {
        "revision": "042e1c4d9d19748c9c228f8d4ebc97bb1e339b0b",
        "version": "1.0.4"
      }
    },
    {
      "identity": "swift-atomics",
      "kind": "remoteSourceControl",
      "location": "https://github.com/apple/swift-atomics.git",
      "state": {
        "revision": "b601256eab081c0f92f059e12818ac1d4f178ff7",
        "version": "1.3.0"
      }
    },
    {
      "identity": "swift-certificates",
      "kind": "remoteSourceControl",
      "location": "https://github.com/apple/swift-certificates.git",
      "state": {
        "revision": "999fd70c7803da89f3904d635a6815a2a7cd7585",
        "version": "1.10.0"
      }
    },
    {
      "identity": "swift-collections",
      "kind": "remoteSourceControl",
      "location": "https://github.com/apple/swift-collections.git",
      "state": {
        "revision": "c1805596154bb3a265fd91b8ac0c4433b4348fb0",
        "version": "1.2.0"
      }
    },
    {
      "identity": "swift-crypto",
      "kind": "remoteSourceControl",
      "location": "https://github.com/apple/swift-crypto.git",
      "state": {
        "revision": "e8d6eba1fef23ae5b359c46b03f7d94be2f41fed",
        "version": "3.12.3"
      }
    },
    {
      "identity": "swift-html-entities",
      "kind": "remoteSourceControl",
      "location": "https://github.com/Kitura/swift-html-entities.git",
      "state": {
        "revision": "d8ca73197f59ce260c71bd6d7f6eb8bbdccf508b",
        "version": "4.0.1"
      }
    },
    {
      "identity": "swift-http-structured-headers",
      "kind": "remoteSourceControl",
      "location": "https://github.com/apple/swift-http-structured-headers.git",
      "state": {
        "revision": "db6eea3692638a65e2124990155cd220c2915903",
        "version": "1.3.0"
      }
    },
    {
      "identity": "swift-http-types",
      "kind": "remoteSourceControl",
      "location": "https://github.com/apple/swift-http-types.git",
      "state": {
        "revision": "a0a57e949a8903563aba4615869310c0ebf14c03",
        "version": "1.4.0"
      }
    },
    {
      "identity": "swift-log",
      "kind": "remoteSourceControl",
      "location": "https://github.com/apple/swift-log.git",
      "state": {
        "revision": "3d8596ed08bd13520157f0355e35caed215ffbfa",
        "version": "1.6.3"
      }
    },
    {
      "identity": "swift-metrics",
      "kind": "remoteSourceControl",
      "location": "https://github.com/apple/swift-metrics.git",
      "state": {
        "revision": "4c83e1cdf4ba538ef6e43a9bbd0bcc33a0ca46e3",
        "version": "2.7.0"
      }
    },
    {
      "identity": "swift-nio",
      "kind": "remoteSourceControl",
      "location": "https://github.com/apple/swift-nio.git",
      "state": {
        "revision": "34d486b01cd891297ac615e40d5999536a1e138d",
        "version": "2.83.0"
      }
    },
    {
      "identity": "swift-nio-extras",
      "kind": "remoteSourceControl",
      "location": "https://github.com/apple/swift-nio-extras.git",
      "state": {
        "revision": "145db1962f4f33a4ea07a32e751d5217602eea29",
        "version": "1.28.0"
      }
    },
    {
      "identity": "swift-nio-http2",
      "kind": "remoteSourceControl",
      "location": "https://github.com/apple/swift-nio-http2.git",
      "state": {
        "revision": "4281466512f63d1bd530e33f4aa6993ee7864be0",
        "version": "1.36.0"
      }
    },
    {
      "identity": "swift-nio-ssl",
      "kind": "remoteSourceControl",
      "location": "https://github.com/apple/swift-nio-ssl.git",
      "state": {
        "revision": "36b48956eb6c0569215dc15a587b491d2bb36122",
        "version": "2.32.0"
      }
    },
    {
      "identity": "swift-nio-transport-services",
      "kind": "remoteSourceControl",
      "location": "https://github.com/apple/swift-nio-transport-services.git",
      "state": {
        "revision": "cd1e89816d345d2523b11c55654570acd5cd4c56",
        "version": "1.24.0"
      }
    },
    {
      "identity": "swift-numerics",
      "kind": "remoteSourceControl",
      "location": "https://github.com/apple/swift-numerics.git",
      "state": {
        "revision": "e0ec0f5f3af6f3e4d5e7a19d2af26b481acb6ba8",
        "version": "1.0.3"
      }
    },
    {
      "identity": "swift-service-lifecycle",
      "kind": "remoteSourceControl",
      "location": "https://github.com/swift-server/swift-service-lifecycle.git",
      "state": {
        "revision": "e7187309187695115033536e8fc9b2eb87fd956d",
        "version": "2.8.0"
      }
    },
    {
      "identity": "swift-system",
      "kind": "remoteSourceControl",
      "location": "https://github.com/apple/swift-system.git",
      "state": {
        "revision": "61e4ca4b81b9e09e2ec863b00c340eb13497dac6",
        "version": "1.5.0"
      }
    },
    {
      "identity": "vapor",
      "kind": "remoteSourceControl",
      "location": "https://github.com/vapor/vapor",
      "state": {
        "revision": "236025b6a213f372f81b732ff792f95789c089d4",
        "version": "4.104.0"
      }
    },
    {
      "identity": "websocket-kit",
      "kind": "remoteSourceControl",
      "location": "https://github.com/vapor/websocket-kit.git",
      "state": {
        "revision": "8666c92dbbb3c8eefc8008c9c8dcf50bfd302167",
        "version": "2.16.1"
      }
    },
    {
      "identity": "xcodeedit",
      "kind": "remoteSourceControl",
      "location": "https://github.com/tomlokhorst/XcodeEdit.git",
      "state": {
        "revision": "0e550cdee72844b35431afc3a1e176042be6d0f0",
        "version": "2.13.0"
      }
    },
    {
      "identity": "yams",
      "kind": "remoteSourceControl",
      "location": "https://github.com/jpsim/Yams.git",
      "state": {
        "revision": "3d6871d5b4a5cd519adf233fbb576e0a2af71c17",
        "version": "5.4.0"
      }
    },
    {
      "identity": "zip",
      "kind": "remoteSourceControl",
      "location": "https://github.com/marmelroy/Zip",
      "state": {
        "revision": "67fa55813b9e7b3b9acee9c0ae501def28746d76",
        "version": "2.1.2"
      }
    },
    {
      "identity": "zipfoundation",
      "kind": "remoteSourceControl",
      "location": "https://github.com/weichsel/ZIPFoundation",
      "state": {
        "revision": "02b6abe5f6eef7e3cbd5f247c5cc24e246efcfe0",
        "version": "0.9.19"
      }
    }
  ],
  "remaining_review_items": [
    "IDeviceKit includes a checksum-pinned prebuilt IDevice.xcframework, not a locally compiled dependency.",
    "OpenSSL Swift package may include prebuilt artifacts; provenance and source-build route require review.",
    "Embedded ellekit.deb is an upstream binary dependency, not rebuilt here.",
    "Other upstream code and transitive dependencies have not received a full security review.",
    "Local HTTPS installation needs an operator-owned TLS setup; no shared TLS keys are downloaded.",
    "macOS/Xcode compilation passed. iPhone installation/runtime testing is pending.",
    "Direct iPhone installation requires a valid Apple signing identity and suitable provisioning profile."
  ],
  "source_commit": "0b0eeb8dea8888e37e842a446328c6a955c26785",
  "build_run": "https://github.com/st1nixxx/STSign/actions/runs/40203937353"
}