{
  "repository": "leshchenko1979/fast-mcp-telegram",
  "commit_source": "pip_installed_metadata",
  "commit_sha": null,
  "submitted_target": {
    "target_kind": "pypi_version",
    "commit_sha": null,
    "version": "0.19.0",
    "ref": "fast-mcp-telegram==0.19.0",
    "display": "fast-mcp-telegram 0.19.0 (PyPI)"
  },
  "variant_target": {
    "target_kind": "pypi_version",
    "commit_sha": null,
    "version": "0.19.0",
    "ref": "fast-mcp-telegram==0.19.0",
    "display": "fast-mcp-telegram 0.19.0 (PyPI) with fixed 0.19.1 comparison"
  },
  "notes": "Exact source identity is the installed PyPI wheel version. The GitHub repository was not reachable in this environment, so no git commit SHA is available. The vulnerable and fixed package files are inspected in the installed site-packages directories."
}