---
title: "Get root libraries security findings (Dependencies - SCA)"
method: GET
path: "/api/v3.0/projects/{projectUuid}/dependencies/findings/security/groupBy/rootLibrary"
tags: ["Findings - Project"]
---

# Get root libraries security findings (Dependencies - SCA)

`GET /api/v3.0/projects/{projectUuid}/dependencies/findings/security/groupBy/rootLibrary`

Get root libraries security findings for a given project

## Path parameters

- `projectUuid` string, required

## Query parameters

- `limit` string
- `cursor` string

## Response `200`

OK

- DWRResponsePageableV3CollectionRootLibrarySecurityFindingDTOV3
  - `additionalData` object — + **totalItems**: The total count of data points returned in an API response.
  - `supportToken` string
  - `response` RootLibrarySecurityFindingDTOV3[]
    - `rootLibraryName` string
    - `rootLibraryUuid` string
    - `project` ProjectDTOV3 — Project information
      - `uuid` string
      - `name` string
      - `path` string
      - `applicationName` string
      - `applicationUuid` string
    - `criticalNum` integer
    - `highNum` integer
    - `mediumNum` integer
    - `lowNum` integer
    - `total` integer
    - `violations` integer
    - `workflowUuids` string[]
    - `violatingFindings` integer
    - `language` string
    - `lastScan` string, date-time
    - `introducedDate` string, date-time
    - `lastModifiedDate` string, date-time
    - `recommendedFix` string
    - `fixForMajorVersion` string
    - `rootLibraryVersion` string
    - `suggestedFixFailed` boolean
    - `groupId` string
    - `artifactId` string
    - `path` string
    - `dependencyFile` string
    - `localPath` string
    - `fromResourceUsages` boolean
    - `severity` string
    - `rootStatus` string
    - `rootComment` string
    - `rootNodeId` integer
    - `rootInstancesCount` integer
    - `reachability` 'REACHABLE' | 'POTENTIALLY_REACHABLE' | 'UNREACHABLE' | 'REACHABILITY_UNAVAILABLE'
    - `maliciousPackage` boolean
    - `exploitable` boolean
    - `exploitCodeMaturity` string[]
    - `numOfReachable` integer
    - `numOfPotentiallyReachable` integer
    - `numOfUnreachable` integer
    - `numOfMalicious` integer
    - `malicious` boolean
    - `linkedIssue` TrackedIssueDTO
      - `uuid` string
      - `issueId` string
      - `origin` string
      - `issueKey` string
      - `account` EntityDTO
        - `uuid` string
        - `name` string
      - `domain` EntityDTO
        - `uuid` string
        - `name` string
      - `application` EntityDTO
        - `uuid` string
        - `name` string
      - `project` EntityDTO
        - `uuid` string
        - `name` string
      - `status` 'PENDING' | 'IN_PROGRESS' | 'SUCCESS' | 'FAILED' | 'DELETED'
      - `issueStatus` string
      - `failureReason` string
      - `errorMessage` string
      - `publicLink` string
      - `creationDate` string, date-time
      - `updatedAt` string, date-time
      - `createdBy` EntityDTO
        - `uuid` string
        - `name` string
      - `ticketType` 'SECURITY' | 'LEGAL'

## Other responses

- `400` — Bad Request
- `403` — Forbidden

---

[API](https://skmtc.dev/mend/apis/mend-api.md) · [All operations](https://skmtc.dev/mend/apis/mend-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/mend/mend-api/revisions/b2302e1b6c4c/schema)