{"id":"ollama.com/ollama","name":"Ollama","commands":["ollama"],"examples":[{"run":"ollama run gemma4","does":"Download a model if needed and chat with it"},{"run":"ollama pull <model>","does":"Download a model from the library without running it"},{"run":"ollama ls","does":"List models downloaded on this machine"},{"run":"ollama launch claude","does":"Launch Claude Code wired to a local Ollama model"},{"run":"ollama run hf.co/profullstack/saas-business-strategist-agent-GGUF","does":"Try a model: Profullstack's CPU-friendly SaaS business strategist from Hugging Face (hf.co/ models need Ollama 0.3.13 or later)"},{"run":"curl -fsSL https://ollama.com/install.sh | sh","does":"Update: rerun the installer (w3bs update does this for you). On Linux it uses sudo to install a systemd service; on macOS it installs Ollama.app"}],"description":"Runs open-weight language models locally behind a CLI and a local HTTP API.","homepage":"https://ollama.com","repository":"https://github.com/ollama/ollama","license":"MIT","agentic":false,"latest_version":"0.40.14","vendor":"Ollama","install":"curl -fsSL https://ollama.com/install.sh | sh","publisher":"third-party","w3bs":"w3bs install ollama.com/ollama","scan":{"status":"passed","scanner":"threatcrush 0.13.30","filesScanned":1316,"summary":{"critical":0,"high":3,"medium":4,"low":2,"info":0},"malware":0,"truncated":false,"version":"0.40.14","sources":{"installer":"https://ollama.com/install.sh","installerSha256":"25f64b810b947145095956533e1bdf56eacea2673c55a7e586be4515fc882c9f","repository":"github.com/ollama/ollama","commit":"a6d33251620eef7629c73b09e672f2df243eb363"},"notes":[],"scannedAt":"2026-11-05T12:05:13.386Z","findings":[{"ruleId":"sh-unquoted-expansion-destructive","title":"unquoted expansion in a destructive command","severity":"high","category":"code","cwe":"CWE-78","file":"installer/install.sh","line":19,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"high","category":"secret","cwe":"CWE-798","file":"source/model/renderers/lfm2.go","line":18,"malware":false},{"ruleId":"sh-unquoted-expansion-destructive","title":"unquoted expansion in a destructive command","severity":"high","category":"code","cwe":"CWE-78","file":"source/scripts/install.sh","line":19,"malware":false},{"ruleId":"js-timing-unsafe-mac-compare","title":"MAC or signature compared with ==","severity":"medium","category":"code","cwe":"CWE-208","file":"source/app/ui/app/src/components/ModelPicker.tsx","line":50,"malware":false},{"ruleId":"js-timing-unsafe-mac-compare","title":"MAC or signature compared with ==","severity":"medium","category":"code","cwe":"CWE-208","file":"source/app/ui/app/src/components/ModelPicker.tsx","line":333,"malware":false},{"ruleId":"js-timing-unsafe-mac-compare","title":"MAC or signature compared with ==","severity":"medium","category":"code","cwe":"CWE-208","file":"source/app/ui/app/src/hooks/useSelectedModel.ts","line":57,"malware":false},{"ruleId":"js-timing-unsafe-mac-compare","title":"MAC or signature compared with ==","severity":"medium","category":"code","cwe":"CWE-208","file":"source/app/ui/app/src/hooks/useSelectedModel.ts","line":184,"malware":false},{"ruleId":"sql-format-call","title":"SQL text produced by a format helper","severity":"low","category":"code","cwe":"CWE-89","file":"source/app/store/database_test.go","line":436,"malware":false},{"ruleId":"sql-format-call","title":"SQL text produced by a format helper","severity":"low","category":"code","cwe":"CWE-89","file":"source/app/store/database_test.go","line":446,"malware":false}]}}