{"id":358469,"url":"https://github.com/Samsung/mTower","last_synced_at":"2026-06-23T00:30:23.830Z","repository":{"id":34742823,"uuid":"175147774","full_name":"Samsung/mTower","owner":"Samsung","description":"mTower is Trusted Execution Environment specially designed to be used on MicroController Units (MCUs) supporting ARM TrustZone technology (e.g., Cortex-M23/33/35p). mTower operates well under restrictions typical for such environment – small RAM and ROM sizes, relatively low performance, absence of rich OSes providing variety of services available on PCs or in enterprise environments. mTower is intended for usage in IoT, embedded devices, Smart Home applications, distributed heterogeneous networks and other environments where secure processing of sensitive data is necessary.","archived":false,"fork":false,"pushed_at":"2026-03-01T19:22:59.000Z","size":7057,"stargazers_count":75,"open_issues_count":21,"forks_count":21,"subscribers_count":0,"default_branch":"master","last_synced_at":"2026-06-01T14:04:05.013Z","etag":null,"topics":["bootloader","cortex-m23","freertos","gcc","iot","m2351","makefile","microcontroller","numaker-pfm-m2351","nuvoton","risc-v","secure","smarthome","trusted-execution-environment","trustzone"],"latest_commit_sha":null,"homepage":"","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Samsung.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":".github/CONTRIBUTING.md","funding":null,"license":"COPYING","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2019-03-12T06:19:43.000Z","updated_at":"2026-04-21T14:18:42.000Z","dependencies_parsed_at":"2023-01-15T09:01:26.907Z","dependency_job_id":"6c5f180a-eef3-4d99-b8de-0ec177ccc460","html_url":"https://github.com/Samsung/mTower","commit_stats":{"total_commits":123,"total_committers":6,"mean_commits":20.5,"dds":0.1707317073170732,"last_synced_commit":"564afba90510e7e198f1077c014806f5fd75b0dc"},"previous_names":[],"tags_count":8,"template":false,"template_full_name":null,"purl":"pkg:github/Samsung/mTower","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Samsung%2FmTower","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Samsung%2FmTower/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Samsung%2FmTower/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Samsung%2FmTower/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Samsung","download_url":"https://codeload.github.com/Samsung/mTower/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Samsung%2FmTower/sbom","scorecard":{"id":1241090,"data":{"date":"2026-01-08T01:09:13Z","repo":{"name":"github.com/Samsung/mTower","commit":"0cf7c56a172d8db52cafc1895a442603b7d39ea0"},"scorecard":{"version":"v5.1.1","commit":"cd152cb6742c5b8f2f3d2b5193b41d9c50905198"},"score":6.7,"checks":[{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#dependency-update-tool"}},{"name":"Code-Review","score":1,"reason":"Found 3/29 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#code-review"}},{"name":"Maintained","score":2,"reason":"3 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#packaging"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:40","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:41","Info: jobLevel 'actions' permission set to 'read': .github/workflows/publish.yml:96","Info: topLevel 'contents' permission set to 'read': .github/workflows/build.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/fossology.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/license-finder.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/linter.yml:6","Info: topLevel 'contents' permission set to 'read': .github/workflows/publish.yml:9","Info: topLevel 'contents' permission set to 'read': .github/workflows/scancode.yml:5","Info: topLevel permissions set to 'read-all': .github/workflows/scorecards-analysis.yml:18","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: arch/cortex-m23/m2351/src/StdDriver/src/libmkrom.a:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:  22 out of  22 GitHub-owned GitHubAction dependencies pinned","Info:   9 out of   9 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#license"}},{"name":"CII-Best-Practices","score":5,"reason":"badge detected: Passing","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#cii-best-practices"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 3 commits out of 9 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#sast"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":10,"reason":"5 out of the last 5 releases have a total of 5 signed artifacts.","details":["Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/Samsung/mTower/releases/tag/v0.6.0","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/Samsung/mTower/releases/tag/v0.5.0","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/Samsung/mTower/releases/tag/v0.4.1","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/Samsung/mTower/releases/tag/v0.4.0","Info: provenance for release artifact: multiple.intoto.jsonl: https://github.com/Samsung/mTower/releases/tag/v0.3.0"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#branch-protection"}},{"name":"CI-Tests","score":4,"reason":"4 out of 9 merged PRs checked by a CI test -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#ci-tests"}},{"name":"Contributors","score":0,"reason":"project has 0 contributing companies or organizations -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/cd152cb6742c5b8f2f3d2b5193b41d9c50905198/docs/checks.md#contributors"}}]},"last_synced_at":"2026-01-11T18:31:34.337Z","repository_id":34742823,"created_at":"2026-01-11T18:31:34.337Z","updated_at":"2026-01-11T18:31:34.337Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":34118757,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-09T02:00:06.510Z","response_time":63,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"Samsung","name":"Samsung","uuid":"6210390","kind":"organization","description":"Samsung Electronics Co.,Ltd.","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/6210390?v=4","repositories_count":163,"last_synced_at":"2024-04-17T00:47:03.477Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/Samsung","funding_links":[],"total_stars":9357,"followers":791,"following":0,"created_at":"2022-11-07T12:38:15.795Z","updated_at":"2024-04-17T00:47:42.184Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Samsung","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Samsung/repositories"},"packages":[],"commits":{"id":1420940,"full_name":"Samsung/mTower","default_branch":"master","total_commits":166,"total_committers":8,"total_bot_commits":3,"total_bot_committers":1,"mean_commits":20.75,"dds":0.1506024096385542,"past_year_total_commits":3,"past_year_total_committers":2,"past_year_total_bot_commits":1,"past_year_total_bot_committers":1,"past_year_mean_commits":1.5,"past_year_dds":0.33333333333333337,"last_synced_at":"2026-06-19T23:02:41.803Z","last_synced_commit":"0cf7c56a172d8db52cafc1895a442603b7d39ea0","created_at":"2023-10-25T23:12:43.439Z","updated_at":"2026-06-19T23:02:18.261Z","committers":[{"name":"Taras Drozdovskyi","email":"t.drozdovsky@samsung.com","login":"tdrozdovsky","count":141},{"name":"Oleksandr Moliavko","email":"o.moliavko@samsung.com","login":"omoliavko","count":13},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":3},{"name":"Vitalii Petrychenko","email":"v.petrychenk@samsung.com","login":"vpetrychenko","count":3},{"name":"Kyle Niemeyer","email":"kyle.niemeyer@gmail.com","login":"kyleniemeyer","count":2},{"name":"wangfei_chen","email":"wangfei_chen@realsil.com.cn","login":null,"count":2},{"name":"somang-park","email":"somang.park@samsung.com","login":"somang-park","count":1},{"name":"Yehor Hrek","email":"y.hrek@partner.samsung.com","login":null,"count":1}],"past_year_committers":[{"name":"wangfei_chen","email":"wangfei_chen@realsil.com.cn","login":null,"count":2},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/Samsung%2FmTower/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-06-22T00:00:10.186Z","repositories_count":6265484,"commits_count":874528798,"contributors_count":35082281,"owners_count":1169781,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"samsung/mtower","html_url":"https://github.com/samsung/mtower","last_synced_at":"2026-03-01T22:02:12.453Z","status":null,"issues_count":50,"pull_requests_count":263,"avg_time_to_close_issue":11831325.027777778,"avg_time_to_close_pull_request":1537782.548,"issues_closed_count":36,"pull_requests_closed_count":250,"pull_request_authors_count":10,"issue_authors_count":8,"avg_comments_per_issue":0.74,"avg_comments_per_pull_request":1.091254752851711,"merged_pull_requests_count":74,"bot_issues_count":2,"bot_pull_requests_count":170,"past_year_issues_count":1,"past_year_pull_requests_count":26,"past_year_avg_time_to_close_issue":80333.0,"past_year_avg_time_to_close_pull_request":1957684.5,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":2,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":1.4230769230769231,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":24,"past_year_merged_pull_requests_count":3,"created_at":"2024-11-25T05:40:15.095Z","updated_at":"2026-03-01T22:02:12.453Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/samsung%2Fmtower","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/samsung%2Fmtower/issues","issue_labels_count":{"table":{"enhancement":9,"bug":3,"dependencies":2,"invalid":1,"help wanted":1,"ISSUE-FI":1}},"pull_request_labels_count":{"table":{"dependencies":170,"github_actions":24,"enhancement":9,"bug":4,"CI":1,"repo":1,"doc":1,"xsmall-diff":1}},"issue_author_associations_count":{"table":{"CONTRIBUTOR":32,"NONE":18}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":244,"NONE":19}},"issue_authors":{"table":{"tdrozdovsky":23,"c01dkit":9,"omoliavko":7,"SyzTrust":4,"UVScan":3,"dependabot[bot]":2,"Linciclon":1,"onlinedj":1}},"pull_request_authors":{"table":{"dependabot[bot]":170,"tdrozdovsky":67,"step-security-bot":11,"omoliavko":3,"tdrozdovskiy":3,"Saiiijchan":2,"kyleniemeyer":2,"vpetrychenko":2,"onlinedj":2,"EgorGrek":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-06-17T00:00:21.091Z","repositories_count":14813797,"issues_count":33074871,"pull_requests_count":109200525,"authors_count":11309813,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{}},"past_year_pull_request_labels_count":{"table":{"dependencies":6,"github_actions":6}},"past_year_issue_author_associations_count":{"table":{}},"past_year_pull_request_author_associations_count":{"table":{"CONTRIBUTOR":6,"NONE":2}},"past_year_issue_authors":{"table":{}},"past_year_pull_request_authors":{"table":{"dependabot[bot]":6,"Saiiijchan":2}},"maintainers":[],"active_maintainers":[]}},"events":{"total":{"ReleaseEvent":1,"DeleteEvent":37,"PullRequestEvent":93,"ForkEvent":2,"IssuesEvent":6,"WatchEvent":9,"IssueCommentEvent":58,"PushEvent":28,"CreateEvent":40},"last_year":{"DeleteEvent":4,"PullRequestEvent":27,"WatchEvent":4,"IssueCommentEvent":3,"PushEvent":3,"CreateEvent":8}},"keywords":["bootloader","cortex-m23","freertos","gcc","iot","m2351","makefile","microcontroller","numaker-pfm-m2351","nuvoton","risc-v","secure","smarthome","trusted-execution-environment","trustzone"],"dependencies":[{"ecosystem":"actions","filepath":".github/workflows/build.yml","sha":null,"kind":"manifest","created_at":"2023-01-15T09:01:26.417Z","updated_at":"2023-01-15T09:01:26.417Z","repository_link":"https://github.com/Samsung/mTower/blob/master/.github/workflows/build.yml","dependencies":[{"id":6920882698,"package_name":"actions/checkout","ecosystem":"actions","requirements":"e2f20e631ae6d7dd3b768f56a5d2af784dd54791","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/scorecards-analysis.yml","sha":null,"kind":"manifest","created_at":"2023-01-15T09:01:26.579Z","updated_at":"2023-01-15T09:01:26.579Z","repository_link":"https://github.com/Samsung/mTower/blob/master/.github/workflows/scorecards-analysis.yml","dependencies":[{"id":6920883002,"package_name":"actions/checkout","ecosystem":"actions","requirements":"ec3a7ce113134d7a93b817d10a8272cb61118579","direct":true,"kind":"composite","optional":false},{"id":6920883003,"package_name":"ossf/scorecard-action","ecosystem":"actions","requirements":"e3e75cf2ffbf9364bbff86cdbdf52b23176fe492","direct":true,"kind":"composite","optional":false},{"id":6920883004,"package_name":"actions/upload-artifact","ecosystem":"actions","requirements":"82c141cc518b40d92cc801eee768e7aafc9c2fa2","direct":true,"kind":"composite","optional":false},{"id":6920883005,"package_name":"github/codeql-action/upload-sarif","ecosystem":"actions","requirements":"5f532563584d71fdef14ee64d17bafb34f751ce5","direct":true,"kind":"composite","optional":false}]}],"score":6.643789733147672,"created_at":"2025-04-11T10:22:50.868Z","updated_at":"2026-06-23T00:30:23.831Z","avatar_url":"https://github.com/Samsung.png","language":"C","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/358469","html_url":"https://summary.ecosyste.ms/projects/358469"}