{"package":"risc0-aggregation","ecosystem":"cargo","latest_version":"0.9.0","description":"Proof aggregation for RISC Zero","license":"Apache-2.0","license_risk":"permissive","commercial_use_notes":"Permissive: commercial closed-source use OK; preserve the copyright notice.","homepage":"https://risczero.com/","repository":"https://github.com/risc0/risc0-ethereum/","downloads_weekly":30240,"health":{"score":44,"risk":"high","breakdown":{"maintenance":10,"popularity":10,"security":15,"maturity":9,"community":0},"deprecated":false,"max_score":100},"vulnerabilities":{"count":1,"critical":1,"high":0,"medium":0,"low":0,"details":[{"vuln_id":"CVE-2025-61588","severity":"critical","summary":"risc0 vulnerable to arbitrary code execution in guest via memory safety failure in `sys_read`","affected_versions":"<2.1.0|<2.1.0|<0.9|<2.3.2|>=3.0.0,<3.0.3","fixed_version":"3.0.3","source":"osv","published_at":"2025-10-01T21:04:59Z","in_kev":false,"epss_prob":0.00094,"epss_percentile":0.26026,"threat_tier":"theoretical"}],"actively_exploited_count":0,"likely_exploited_count":0},"versions":{"latest":"0.9.0","total_count":16,"recent":["0.9.0","0.8.1","0.8.0","0.7.1","0.7.0","0.6.0","0.5.0","0.4.0","0.4.0-rc.2","0.3.2","0.3.0","0.2.2","0.2.1","0.2.0","0.1.1","0.1.0"]},"metadata":{"deprecated":false,"deprecated_message":null,"maintainers_count":0,"first_published":"2024-12-06T15:42:28.719717Z","last_published":"2025-08-29T20:52:16.126732Z","dependencies_count":0,"dependencies":[]},"github_stats":null,"bundle":null,"typescript":null,"known_issues":{"bugs_count":0,"bugs_severity":{},"status_breakdown":{},"link":null,"scope":"none"},"historical_compromise":null,"recommendation":{"action":"do_not_use","issues":["1 critical vulnerabilities"],"use_version":"0.9.0","version_hint":"Update to >= 3.0.3 to fix known vulnerabilities","summary":"risc0-aggregation has critical vulnerabilities — do not use"},"version_scoped":null,"requested_version":null,"_cache":"miss","_response_ms":546,"_powered_by":"depscope.dev — free package intelligence for AI agents","typosquat":{"is_suspected":false},"maintainer_trust":{"available":false},"malicious":{"is_malicious":false},"scorecard":{"available":false},"quality":{"available":false},"version_history_summary":{"total_versions":16,"first_release_age_days":509,"last_release_days_ago":243,"avg_days_between_releases":34,"release_velocity":"moderate"}}