{"id":360280,"url":"https://github.com/kevva/decompress","last_synced_at":"2026-08-22T20:00:25.485Z","repository":{"id":10225894,"uuid":"12325544","full_name":"kevva/decompress","owner":"kevva","description":"Extracting archives made easy","archived":false,"fork":false,"pushed_at":"2023-01-06T19:01:33.000Z","size":110,"stargazers_count":420,"open_issues_count":51,"forks_count":54,"subscribers_count":9,"default_branch":"master","last_synced_at":"2026-08-21T19:35:28.545Z","etag":null,"topics":["decompress","extract","nodejs","tar","targz","zip"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kevva.png","metadata":{"files":{"readme":"readme.md","changelog":null,"contributing":null,"funding":null,"license":"license","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2013-08-23T14:52:29.000Z","updated_at":"2026-08-18T07:18:20.000Z","dependencies_parsed_at":"2023-01-13T15:48:52.669Z","dependency_job_id":null,"html_url":"https://github.com/kevva/decompress","commit_stats":null,"previous_names":[],"tags_count":5,"template":false,"template_full_name":null,"purl":"pkg:github/kevva/decompress","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kevva","download_url":"https://codeload.github.com/kevva/decompress/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/sbom","scorecard":{"id":557645,"data":{"date":"2025-08-11","repo":{"name":"github.com/kevva/decompress","commit":"84a8c1046946add1a6ae01c54dbebf312e4ffc85"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":1,"reason":"Found 3/30 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: license:0","Info: FSF or OSI recognized license: MIT License: license:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 4 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T12:47:38.949Z","repository_id":10225894,"created_at":"2025-08-20T12:47:38.949Z","updated_at":"2025-08-20T12:47:38.949Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36808786,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-21T02:00:06.756Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"kevva","name":"Kevin Mårtensson","uuid":"709159","kind":"user","description":"","email":"","website":null,"location":"Sweden","twitter":"kevvayo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/709159?u=5c9a37233feea1a66d2efd961227c481312adb3d\u0026v=4","repositories_count":225,"last_synced_at":"2023-04-09T04:32:01.142Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/kevva","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:20:08.497Z","updated_at":"2023-04-09T04:32:01.434Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kevva","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kevva/repositories"},"packages":[{"id":8361306,"name":"decomp","ecosystem":"npm","description":"Extracting archives made easy","homepage":"https://github.com/kevva/decompress#readme","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/kevva/decompress","keywords_array":["bz2","bzip2","decompress","extract","tar","tar.bz","tar.gz","zip","unzip"],"namespace":null,"versions_count":5,"first_release_published_at":"2023-09-30T20:23:43.797Z","latest_release_published_at":"2023-09-30T21:46:02.734Z","latest_release_number":"0.1.3","last_synced_at":"2026-08-21T19:44:18.328Z","created_at":"2023-09-30T20:23:46.551Z","updated_at":"2026-08-21T19:44:18.329Z","registry_url":"https://www.npmjs.com/package/decomp","install_command":"npm install decomp","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"0.1.3"},"contentPolicy":null},"repo_metadata":{"uuid":"12325544","full_name":"kevva/decompress","owner":"kevva","description":"Extracting archives made easy","archived":false,"fork":false,"pushed_at":"2023-01-06T19:01:33.000Z","size":110,"stargazers_count":406,"open_issues_count":43,"forks_count":53,"subscribers_count":13,"default_branch":"master","last_synced_at":"2024-01-01T23:04:24.600Z","etag":null,"topics":["decompress","extract","nodejs","tar","targz","zip"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kevva.png","metadata":{"files":{"readme":"readme.md","changelog":null,"contributing":null,"funding":null,"license":"license","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2013-08-23T14:52:29.000Z","updated_at":"2024-01-01T22:52:30.000Z","dependencies_parsed_at":"2023-01-13T15:48:52.669Z","dependency_job_id":null,"html_url":"https://github.com/kevva/decompress","commit_stats":null,"previous_names":[],"tags_count":5,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kevva","download_url":"https://codeload.github.com/kevva/decompress/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":178735185,"owners_count":10719478,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"kevva","name":"Kevin Mårtensson","uuid":"709159","kind":"user","description":"","email":"","website":null,"location":"Sweden","twitter":"kevvayo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/709159?u=5c9a37233feea1a66d2efd961227c481312adb3d\u0026v=4","repositories_count":225,"last_synced_at":"2023-04-09T04:32:01.142Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/kevva","created_at":"2022-11-02T16:20:08.497Z","updated_at":"2023-04-09T04:32:01.434Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kevva","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kevva/repositories"},"tags":[{"name":"v4.2.1","sha":"84a8c1046946add1a6ae01c54dbebf312e4ffc85","kind":"tag","published_at":"2020-04-01T13:58:59.000Z","download_url":"https://codeload.github.com/kevva/decompress/tar.gz/v4.2.1","html_url":"https://github.com/kevva/decompress/releases/tag/v4.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v4.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v4.2.1/manifests"},{"name":"v4.2.0","sha":"b40549fcf2529a7531bd0fe52bfd4e6c52670f5f","kind":"tag","published_at":"2017-05-12T15:59:29.000Z","download_url":"https://codeload.github.com/kevva/decompress/tar.gz/v4.2.0","html_url":"https://github.com/kevva/decompress/releases/tag/v4.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v4.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v4.2.0/manifests"},{"name":"v4.1.0","sha":"fef4335ccf6d6bcebc325a565dc6927c858cc1d2","kind":"tag","published_at":"2017-04-25T13:28:58.000Z","download_url":"https://codeload.github.com/kevva/decompress/tar.gz/v4.1.0","html_url":"https://github.com/kevva/decompress/releases/tag/v4.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v4.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v4.1.0/manifests"},{"name":"v4.0.0","sha":"ac4411ecd846d26cf6be4447bfe1ca9b01fb4ba9","kind":"tag","published_at":"2016-05-20T15:16:57.000Z","download_url":"https://codeload.github.com/kevva/decompress/tar.gz/v4.0.0","html_url":"https://github.com/kevva/decompress/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v4.0.0/manifests"},{"name":"v3.0.0","sha":"070fa2c9141869ce6f3894be35122a1142ac9d54","kind":"tag","published_at":"2015-10-20T21:54:38.000Z","download_url":"https://codeload.github.com/kevva/decompress/tar.gz/v3.0.0","html_url":"https://github.com/kevva/decompress/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v3.0.0/manifests"}]},"repo_metadata_updated_at":"2024-01-01T23:09:01.911Z","dependent_packages_count":1,"downloads":8127,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":37.33560956187852,"dependent_packages_count":53.35989222908823,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":45.34775089548337},"purl":"pkg:npm/decomp","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/decomp","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/decomp","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/decomp/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2023-12-24T23:07:48.492Z","issues_count":83,"pull_requests_count":18,"avg_time_to_close_issue":6258083.953488372,"avg_time_to_close_pull_request":8235564.266666667,"issues_closed_count":43,"pull_requests_closed_count":15,"pull_request_authors_count":18,"issue_authors_count":76,"avg_comments_per_issue":2.5421686746987953,"avg_comments_per_pull_request":2.8333333333333335,"merged_pull_requests_count":6,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":3,"past_year_pull_requests_count":1,"past_year_avg_time_to_close_issue":64.0,"past_year_avg_time_to_close_pull_request":12.0,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":1,"past_year_pull_request_authors_count":1,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":0.3333333333333333,"past_year_avg_comments_per_pull_request":0.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/issues"},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/decomp/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/decomp/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/decomp/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/decomp/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/decomp/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/decomp/codemeta","maintainers":[{"uuid":"leonsilicon","login":"leonsilicon","name":null,"email":"leon@leonsilicon.com","url":null,"packages_count":217,"html_url":"https://www.npmjs.com/~leonsilicon","role":null,"created_at":"2026-02-10T22:59:50.597Z","updated_at":"2026-02-10T22:59:50.597Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/leonsilicon/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5771593,"maintainers_count":1235211,"namespaces_count":420407,"keywords_count":879540,"github":"npm","metadata":{"funded_packages_count":188665,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-08-22T05:02:55.003Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":4998495,"name":"org.webjars.npm:decompress","ecosystem":"maven","description":"WebJar for decompress","homepage":"https://www.webjars.org","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/kevva/decompress","keywords_array":[],"namespace":"org.webjars.npm","versions_count":2,"first_release_published_at":"2015-08-29T14:27:40.000Z","latest_release_published_at":"2020-04-30T11:41:02.000Z","latest_release_number":"4.2.1","last_synced_at":"2026-08-21T19:46:21.362Z","created_at":"2022-07-27T10:54:50.856Z","updated_at":"2026-08-21T20:30:29.886Z","registry_url":"https://central.sonatype.com/artifact/org.webjars.npm/decompress/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.webjars.npm/decompress/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":10225894,"uuid":"12325544","full_name":"kevva/decompress","owner":"kevva","description":"Extracting archives made easy","archived":false,"fork":false,"pushed_at":"2023-01-06T19:01:33.000Z","size":110,"stargazers_count":420,"open_issues_count":51,"forks_count":54,"subscribers_count":9,"default_branch":"master","last_synced_at":"2026-08-21T19:35:28.545Z","etag":null,"topics":["decompress","extract","nodejs","tar","targz","zip"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kevva.png","metadata":{"files":{"readme":"readme.md","changelog":null,"contributing":null,"funding":null,"license":"license","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2013-08-23T14:52:29.000Z","updated_at":"2026-08-18T07:18:20.000Z","dependencies_parsed_at":"2023-01-13T15:48:52.669Z","dependency_job_id":null,"html_url":"https://github.com/kevva/decompress","commit_stats":null,"previous_names":[],"tags_count":5,"template":false,"template_full_name":null,"purl":"pkg:github/kevva/decompress","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kevva","download_url":"https://codeload.github.com/kevva/decompress/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/sbom","scorecard":{"id":557645,"data":{"date":"2025-08-11","repo":{"name":"github.com/kevva/decompress","commit":"84a8c1046946add1a6ae01c54dbebf312e4ffc85"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":1,"reason":"Found 3/30 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: license:0","Info: FSF or OSI recognized license: MIT License: license:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 4 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T12:47:38.949Z","repository_id":10225894,"created_at":"2025-08-20T12:47:38.949Z","updated_at":"2025-08-20T12:47:38.949Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36808786,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-21T02:00:06.756Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"kevva","name":"Kevin Mårtensson","uuid":"709159","kind":"user","description":"","email":"","website":null,"location":"Sweden","twitter":"kevvayo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/709159?u=5c9a37233feea1a66d2efd961227c481312adb3d\u0026v=4","repositories_count":225,"last_synced_at":"2023-04-09T04:32:01.142Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/kevva","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:20:08.497Z","updated_at":"2023-04-09T04:32:01.434Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kevva","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kevva/repositories"},"tags":[{"name":"v4.2.1","sha":"84a8c1046946add1a6ae01c54dbebf312e4ffc85","kind":"tag","published_at":"2020-04-01T13:58:59.000Z","download_url":"https://codeload.github.com/kevva/decompress/tar.gz/v4.2.1","html_url":"https://github.com/kevva/decompress/releases/tag/v4.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kevva/decompress@v4.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v4.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v4.2.1/manifests"},{"name":"v4.2.0","sha":"b40549fcf2529a7531bd0fe52bfd4e6c52670f5f","kind":"tag","published_at":"2017-05-12T15:59:29.000Z","download_url":"https://codeload.github.com/kevva/decompress/tar.gz/v4.2.0","html_url":"https://github.com/kevva/decompress/releases/tag/v4.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kevva/decompress@v4.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v4.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v4.2.0/manifests"},{"name":"v4.1.0","sha":"fef4335ccf6d6bcebc325a565dc6927c858cc1d2","kind":"tag","published_at":"2017-04-25T13:28:58.000Z","download_url":"https://codeload.github.com/kevva/decompress/tar.gz/v4.1.0","html_url":"https://github.com/kevva/decompress/releases/tag/v4.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kevva/decompress@v4.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v4.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v4.1.0/manifests"},{"name":"v4.0.0","sha":"ac4411ecd846d26cf6be4447bfe1ca9b01fb4ba9","kind":"tag","published_at":"2016-05-20T15:16:57.000Z","download_url":"https://codeload.github.com/kevva/decompress/tar.gz/v4.0.0","html_url":"https://github.com/kevva/decompress/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kevva/decompress@v4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v4.0.0/manifests"},{"name":"v3.0.0","sha":"070fa2c9141869ce6f3894be35122a1142ac9d54","kind":"tag","published_at":"2015-10-20T21:54:38.000Z","download_url":"https://codeload.github.com/kevva/decompress/tar.gz/v3.0.0","html_url":"https://github.com/kevva/decompress/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kevva/decompress@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v3.0.0/manifests"}]},"repo_metadata_updated_at":"2026-08-21T20:30:29.886Z","dependent_packages_count":3,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":16.90359006667295,"stargazers_count":13.613882741476274,"forks_count":17.045844427100157,"average":19.88581529404919},"purl":"pkg:maven/org.webjars.npm/decompress","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.webjars.npm:decompress","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.webjars.npm:decompress","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.webjars.npm:decompress/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-21T19:30:16.831Z","issues_count":89,"pull_requests_count":19,"avg_time_to_close_issue":12329616.523809524,"avg_time_to_close_pull_request":8235564.266666667,"issues_closed_count":42,"pull_requests_closed_count":15,"pull_request_authors_count":19,"issue_authors_count":80,"avg_comments_per_issue":2.404494382022472,"avg_comments_per_pull_request":2.6842105263157894,"merged_pull_requests_count":6,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":7,"past_year_pull_requests_count":1,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":1,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":0.2857142857142857,"past_year_avg_comments_per_pull_request":0.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/issues","maintainers":[{"login":"kevva","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kevva"},{"login":"shinnn","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/shinnn"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:decompress/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:decompress/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:decompress/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:decompress/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:decompress/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:decompress/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617567,"maintainers_count":0,"namespaces_count":82043,"keywords_count":36530,"github":"maven-central","metadata":{"funded_packages_count":47579,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-22T05:03:41.511Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":1602996,"name":"decompress","ecosystem":"npm","description":"Extracting archives made easy","homepage":"https://github.com/kevva/decompress#readme","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/kevva/decompress","keywords_array":["bz2","bzip2","decompress","extract","tar","tar.bz","tar.gz","zip","unzip"],"namespace":null,"versions_count":41,"first_release_published_at":"2013-08-23T15:15:38.045Z","latest_release_published_at":"2020-04-01T14:00:54.980Z","latest_release_number":"4.2.1","last_synced_at":"2026-08-21T19:37:34.710Z","created_at":"2022-04-09T11:24:42.752Z","updated_at":"2026-08-22T09:10:03.744Z","registry_url":"https://www.npmjs.com/package/decompress","install_command":"npm install decompress","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"4.2.1","0.2.5":"0.2.5","0.1.10":"0.1.10"},"contentPolicy":null},"repo_metadata":{"id":10225894,"uuid":"12325544","full_name":"kevva/decompress","owner":"kevva","description":"Extracting archives made easy","archived":false,"fork":false,"pushed_at":"2023-01-06T19:01:33.000Z","size":110,"stargazers_count":420,"open_issues_count":51,"forks_count":54,"subscribers_count":9,"default_branch":"master","last_synced_at":"2026-08-21T19:35:28.545Z","etag":null,"topics":["decompress","extract","nodejs","tar","targz","zip"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kevva.png","metadata":{"files":{"readme":"readme.md","changelog":null,"contributing":null,"funding":null,"license":"license","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2013-08-23T14:52:29.000Z","updated_at":"2026-08-18T07:18:20.000Z","dependencies_parsed_at":"2023-01-13T15:48:52.669Z","dependency_job_id":null,"html_url":"https://github.com/kevva/decompress","commit_stats":null,"previous_names":[],"tags_count":5,"template":false,"template_full_name":null,"purl":"pkg:github/kevva/decompress","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kevva","download_url":"https://codeload.github.com/kevva/decompress/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/sbom","scorecard":{"id":557645,"data":{"date":"2025-08-11","repo":{"name":"github.com/kevva/decompress","commit":"84a8c1046946add1a6ae01c54dbebf312e4ffc85"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":1,"reason":"Found 3/30 approved changesets -- score normalized to 1","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: license:0","Info: FSF or OSI recognized license: MIT License: license:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 4 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T12:47:38.949Z","repository_id":10225894,"created_at":"2025-08-20T12:47:38.949Z","updated_at":"2025-08-20T12:47:38.949Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36808786,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-21T02:00:06.756Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"kevva","name":"Kevin Mårtensson","uuid":"709159","kind":"user","description":"","email":"","website":null,"location":"Sweden","twitter":"kevvayo","company":null,"icon_url":"https://avatars.githubusercontent.com/u/709159?u=5c9a37233feea1a66d2efd961227c481312adb3d\u0026v=4","repositories_count":225,"last_synced_at":"2023-04-09T04:32:01.142Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/kevva","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T16:20:08.497Z","updated_at":"2023-04-09T04:32:01.434Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kevva","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kevva/repositories"},"tags":[{"name":"v4.2.1","sha":"84a8c1046946add1a6ae01c54dbebf312e4ffc85","kind":"tag","published_at":"2020-04-01T13:58:59.000Z","download_url":"https://codeload.github.com/kevva/decompress/tar.gz/v4.2.1","html_url":"https://github.com/kevva/decompress/releases/tag/v4.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kevva/decompress@v4.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v4.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v4.2.1/manifests"},{"name":"v4.2.0","sha":"b40549fcf2529a7531bd0fe52bfd4e6c52670f5f","kind":"tag","published_at":"2017-05-12T15:59:29.000Z","download_url":"https://codeload.github.com/kevva/decompress/tar.gz/v4.2.0","html_url":"https://github.com/kevva/decompress/releases/tag/v4.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kevva/decompress@v4.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v4.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v4.2.0/manifests"},{"name":"v4.1.0","sha":"fef4335ccf6d6bcebc325a565dc6927c858cc1d2","kind":"tag","published_at":"2017-04-25T13:28:58.000Z","download_url":"https://codeload.github.com/kevva/decompress/tar.gz/v4.1.0","html_url":"https://github.com/kevva/decompress/releases/tag/v4.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kevva/decompress@v4.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v4.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v4.1.0/manifests"},{"name":"v4.0.0","sha":"ac4411ecd846d26cf6be4447bfe1ca9b01fb4ba9","kind":"tag","published_at":"2016-05-20T15:16:57.000Z","download_url":"https://codeload.github.com/kevva/decompress/tar.gz/v4.0.0","html_url":"https://github.com/kevva/decompress/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kevva/decompress@v4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v4.0.0/manifests"},{"name":"v3.0.0","sha":"070fa2c9141869ce6f3894be35122a1142ac9d54","kind":"tag","published_at":"2015-10-20T21:54:38.000Z","download_url":"https://codeload.github.com/kevva/decompress/tar.gz/v3.0.0","html_url":"https://github.com/kevva/decompress/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/kevva/decompress@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/tags/v3.0.0/manifests"}]},"repo_metadata_updated_at":"2026-08-22T09:10:03.744Z","dependent_packages_count":1168,"downloads":14474011,"downloads_period":"last-month","dependent_repos_count":280049,"rankings":{"downloads":0.0821897251631936,"dependent_repos_count":0.06850581149488995,"dependent_packages_count":0.0640499152373541,"stargazers_count":3.298641208333585,"forks_count":3.921467187459583,"docker_downloads_count":0.057092967532040045,"average":1.2486578025367743},"purl":"pkg:npm/decompress","advisories":[{"uuid":"GSA_kwCzR0hTQS1qd3A5LTl2OTYtOTRteM4ABac9","url":"https://github.com/advisories/GHSA-jwp9-9v96-94mx","title":"decompress allows arbitrary hardlink creation during archive extraction","description":"decompress before 4.2.2 allows arbitrary hardlink creation during archive extraction, enabling file read disclosure and file corruption. When processing hardlink entries (type === 'link'), the x.linkname field from the archive is passed directly to fs.link() without validation (index.js line 113). An attacker can craft an archive with a hardlink entry whose linkname is an absolute path to any file on the same filesystem. This creates a hardlink inside the extraction directory that shares the same inode as the target file, enabling both reading and overwriting the original file's content. Hardlinks are limited to files on the same filesystem and cannot target directories.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-07-10T00:31:25.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.5,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-39243","https://github.com/kevva/decompress/issues/113","https://github.com/kevva/decompress","https://www.npmjs.com/package/decompress","https://github.com/advisories/GHSA-jwp9-9v96-94mx"],"source_kind":"github","identifiers":["GHSA-jwp9-9v96-94mx","CVE-2026-39243"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-08-13T15:00:07.943Z","updated_at":"2026-08-14T00:00:09.937Z","epss_percentage":0.00328,"epss_percentile":0.25553,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qd3A5LTl2OTYtOTRteM4ABac9","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1qd3A5LTl2OTYtOTRteM4ABac9","packages":[{"ecosystem":"npm","package_name":"decompress","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 4.2.1"}],"purl":"pkg:npm/decompress"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qd3A5LTl2OTYtOTRteM4ABac9/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1tcDJmLTQ1cG0tM2NnOc4ABaQi","url":"https://github.com/advisories/GHSA-mp2f-45pm-3cg9","title":"Decompress: Archive extraction can create files and links outside of the target directory","description":"### Impact\n\nWhen extracting an archive to a directory, a crafted archive can read or write files outside that directory. The flaw is in the code that writes the parsed entries, so it affects every format decompress handles: tar, tar.gz, tar.bz2, and zip by default, plus any others added through the plugins option.\n\nA link (hardlink) or symlink entry is created without checking where its target points. A hardlink can be aimed at any file the running process can read; that file then appears inside the output directory and its contents are exposed. A symlink can point outside the output directory and redirect a later write.\n\nThe path containment check used a string prefix comparison (`realPath.indexOf(outputPath) !== 0`). Output `/srv/out` does not contain `/srv/out-old`, but the prefix comparison treats it as inside, so an entry can escape into a sibling directory whose name starts with the output directory name.\n\nFile modes were applied as `mode \u0026 ~umask`, which does not remove the setuid, setgid, or sticky bits. A crafted entry can create a setuid or setgid file. This matters when extraction runs as root, for example in CI, containers, or install scripts.\n\nAny code that extracts archives from an untrusted or attacker-influenced source is affected. Archives are commonly downloaded before extraction, so this is reachable over the network in many setups.\n\n### Patches\n\nFixed in `@xhmikosr/decompress` 10.2.1 and 11.1.3. Link targets are now resolved and checked against the output directory, containment uses `path.relative`, and setuid, setgid, and sticky bits are removed.\n\nThe upstream `decompress` package is unmaintained, and all versions through its last release (4.2.1) have the same flaws. There is no upstream fix. Migrate to `@xhmikosr/decompress` 11.1.3 or later.\n\n### Workarounds\n\nExtract only archives you trust. Run extraction as a non-root user so the mode issue cannot create a privileged file. After extracting, reject any symlink or hardlink that points outside the target and any file with unexpected mode bits.\n\n### Resources\n\n* Related prior issue in the upstream project this package forks: CVE-2020-12265 / GHSA-qgfr-5hqp-vrw9\n* Fix commits and releases:\n  * https://github.com/XhmikosR/decompress/releases/tag/v10.2.1\n  * https://github.com/XhmikosR/decompress/releases/tag/v11.1.3\n  * https://github.com/XhmikosR/decompress/commit/aca5aac\n  * https://github.com/XhmikosR/decompress/commit/281cefa\n  * https://github.com/XhmikosR/decompress/commit/60b5299","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2026-07-06T20:27:38.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.1,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","references":["https://github.com/XhmikosR/decompress/security/advisories/GHSA-mp2f-45pm-3cg9","https://github.com/XhmikosR/decompress/commit/281cefa","https://github.com/XhmikosR/decompress/commit/60b5299","https://github.com/XhmikosR/decompress/commit/aca5aac","https://github.com/advisories/GHSA-mp2f-45pm-3cg9"],"source_kind":"github","identifiers":["GHSA-mp2f-45pm-3cg9","CVE-2026-53486"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-07-06T21:00:07.881Z","updated_at":"2026-08-14T00:01:24.636Z","epss_percentage":0.00643,"epss_percentile":0.4758,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tcDJmLTQ1cG0tM2NnOc4ABaQi","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1tcDJmLTQ1cG0tM2NnOc4ABaQi","packages":[{"ecosystem":"npm","package_name":"decompress","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 4.2.1"}],"purl":"pkg:npm/decompress"},{"ecosystem":"npm","package_name":"@xhmikosr/decompress","versions":[{"first_patched_version":"11.1.3","vulnerable_version_range":"\u003e= 11.0.0, \u003c 11.1.3"},{"first_patched_version":"10.2.1","vulnerable_version_range":"\u003c 10.2.1"}],"purl":"pkg:npm/%40xhmikosr%2Fdecompress"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tcDJmLTQ1cG0tM2NnOc4ABaQi/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1oMzlqLXI1cXEtcjltbc4ABYLw","url":"https://github.com/advisories/GHSA-h39j-r5qq-r9mm","title":"decompress: Arbitrary File Write via Archive Extraction (Zip Slip)","description":"All versions of the package decompress are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) when extracting a ZIP archive containing two entries with the same path - the first being a symlink to an arbitrary target and the second being a regular file - the file content is written through the symlink to the target location outside the output directory. This is due to the microtask processing order that checks readlink for the second file before resolving symlink for the first file. An attacker can write arbitrary files on the host filesystem potentially leading to remote code execution by providing a specially crafted ZIP archive.\n\n**Note:**\n\nThis bypasses all existing path traversal protections including preventWritingThroughSymlink, added as a part of the fix for [CVE-2020-12265](https://security.snyk.io/vuln/SNYK-JS-DECOMPRESS-557358).","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-06-05T09:33:46.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.6,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:P","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-10732","https://github.com/kevva/decompress/pull/112","https://gist.github.com/Alemmi/409c3cc148c39522c6d6a8538b0e1f9e","https://security.snyk.io/vuln/SNYK-JS-DECOMPRESS-16415209","https://access.redhat.com/security/cve/CVE-2026-10732","https://bugzilla.redhat.com/show_bug.cgi?id=2485376","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-10732.json","https://github.com/advisories/GHSA-h39j-r5qq-r9mm"],"source_kind":"github","identifiers":["GHSA-h39j-r5qq-r9mm","CVE-2026-10732"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-07-29T16:00:11.632Z","updated_at":"2026-08-14T00:00:31.692Z","epss_percentage":0.00521,"epss_percentile":0.41591,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1oMzlqLXI1cXEtcjltbc4ABYLw","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1oMzlqLXI1cXEtcjltbc4ABYLw","packages":[{"ecosystem":"npm","package_name":"decompress","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 4.2.1"}],"purl":"pkg:npm/decompress"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1oMzlqLXI1cXEtcjltbc4ABYLw/related_packages","related_advisories":[]},{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFnZnItNWhxcC12cnc5","url":"https://github.com/advisories/GHSA-qgfr-5hqp-vrw9","title":"Path Traversal in decompress","description":"Versions of `decompress` prior to 4.2.1 are vulnerable to Arbitrary File Write. The package fails to prevent extraction of files with relative paths, allowing attackers to write to any folder in the system by including filenames containing`../`.\n\n\n## Recommendation\n\nUpgrade to version 4.2.1 or later.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2020-09-03T21:16:27.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2020-12265","https://github.com/kevva/decompress/issues/71","https://github.com/kevva/decompress/pull/73","https://github.com/kevva/decompress/commit/967146e70f48be32ed1a69daa3941d681944d513","https://github.com/advisories/GHSA-qgfr-5hqp-vrw9"],"source_kind":"github","identifiers":["GHSA-qgfr-5hqp-vrw9","CVE-2020-12265"],"repository_url":"https://github.com/kevva/decompress","blast_radius":0.0,"created_at":"2022-12-21T16:13:16.423Z","updated_at":"2026-08-19T22:13:18.191Z","epss_percentage":0.02116,"epss_percentile":0.79975,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFnZnItNWhxcC12cnc5","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFnZnItNWhxcC12cnc5","packages":[{"ecosystem":"npm","package_name":"decompress","versions":[{"first_patched_version":"4.2.1","vulnerable_version_range":"\u003c 4.2.1"}],"purl":"pkg:npm/decompress"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLXFnZnItNWhxcC12cnc5/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/decompress","docker_dependents_count":1258,"docker_downloads_count":966314674,"usage_url":"https://repos.ecosyste.ms/usage/npm/decompress","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/decompress/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-21T19:30:16.831Z","issues_count":89,"pull_requests_count":19,"avg_time_to_close_issue":12329616.523809524,"avg_time_to_close_pull_request":8235564.266666667,"issues_closed_count":42,"pull_requests_closed_count":15,"pull_request_authors_count":19,"issue_authors_count":80,"avg_comments_per_issue":2.404494382022472,"avg_comments_per_pull_request":2.6842105263157894,"merged_pull_requests_count":6,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":7,"past_year_pull_requests_count":1,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":1,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":0.2857142857142857,"past_year_avg_comments_per_pull_request":0.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/issues","maintainers":[{"login":"kevva","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kevva"},{"login":"shinnn","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/shinnn"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/decompress/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/decompress/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/decompress/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/decompress/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/decompress/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/decompress/codemeta","maintainers":[{"uuid":"kevva","login":"kevva","name":null,"email":"kevinmartensson@gmail.com","url":null,"packages_count":507,"html_url":"https://www.npmjs.com/~kevva","role":null,"created_at":"2022-11-12T00:21:16.516Z","updated_at":"2022-11-12T00:21:16.516Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kevva/packages"},{"uuid":"shinnn","login":"shinnn","name":null,"email":"snnskwtnb@gmail.com","url":null,"packages_count":405,"html_url":"https://www.npmjs.com/~shinnn","role":null,"created_at":"2022-11-12T00:21:16.490Z","updated_at":"2022-11-12T00:21:16.490Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/shinnn/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5771593,"maintainers_count":1235211,"namespaces_count":420407,"keywords_count":879540,"github":"npm","metadata":{"funded_packages_count":188665,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-08-22T05:02:55.003Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}}],"commits":{"id":11562,"full_name":"kevva/decompress","default_branch":"master","total_commits":165,"total_committers":9,"total_bot_commits":0,"total_bot_committers":0,"mean_commits":18.333333333333332,"dds":0.11515151515151512,"past_year_total_commits":0,"past_year_total_committers":0,"past_year_total_bot_commits":0,"past_year_total_bot_committers":0,"past_year_mean_commits":0.0,"past_year_dds":0.0,"last_synced_at":"2026-08-19T18:30:27.832Z","last_synced_commit":"84a8c1046946add1a6ae01c54dbebf312e4ffc85","created_at":"2023-03-07T11:17:44.110Z","updated_at":"2026-08-19T18:30:27.721Z","committers":[{"name":"Kevin Martensson","email":"kevinmartensson@gmail.com","login":"kevva","count":146},{"name":"Shinnosuke Watanabe","email":"snnskwtnb@gmail.com","login":"shinnn","count":8},{"name":"Sindre Sorhus","email":"sindresorhus@gmail.com","login":"sindresorhus","count":5},{"name":"vsonix-bub","email":"daniel.bub@vsonix.com","login":"vsonix-bub","count":1},{"name":"Vsevolod Strukchinsky","email":"floatdrop@yandex-team.ru","login":"floatdrop","count":1},{"name":"Tim Schaub","email":"tim.schaub@gmail.com","login":"tschaub","count":1},{"name":"David Glasser","email":"glasser@davidglasser.net","login":"glasser","count":1},{"name":"Colin Jones","email":"trptcolin@gmail.com","login":"trptcolin","count":1},{"name":"Andrew Carpenter","email":"andrew@musocrat.com","login":"doesdev","count":1}],"past_year_committers":[],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-08-20T00:00:10.776Z","repositories_count":6759693,"commits_count":979794386,"contributors_count":41293999,"owners_count":1360894,"committers_count":3355291,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"kevva/decompress","html_url":"https://github.com/kevva/decompress","last_synced_at":"2026-08-21T19:30:16.831Z","status":null,"issues_count":89,"pull_requests_count":19,"avg_time_to_close_issue":12329616.523809524,"avg_time_to_close_pull_request":8235564.266666667,"issues_closed_count":42,"pull_requests_closed_count":15,"pull_request_authors_count":19,"issue_authors_count":80,"avg_comments_per_issue":2.404494382022472,"avg_comments_per_pull_request":2.6842105263157894,"merged_pull_requests_count":6,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":7,"past_year_pull_requests_count":1,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":1,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":0.2857142857142857,"past_year_avg_comments_per_pull_request":0.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"created_at":"2023-05-19T13:20:22.442Z","updated_at":"2026-08-21T19:30:16.831Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/kevva%2Fdecompress/issues","issue_labels_count":{"table":{"bug":3,"help wanted":1,"enhancement":1}},"pull_request_labels_count":{"table":{}},"issue_author_associations_count":{"table":{"NONE":85,"CONTRIBUTOR":3,"OWNER":1}},"pull_request_author_associations_count":{"table":{"NONE":11,"CONTRIBUTOR":6,"OWNER":1,"COLLABORATOR":1}},"issue_authors":{"table":{"watchmefive12":3,"devploit":3,"Bartozzz":2,"ahuang":2,"prometheas":2,"piranna":2,"glasser":2,"himharsh1997":1,"jahvi":1,"simotae14":1,"ersenbasaransen":1,"grebett":1,"frankrousseau":1,"NicholasABriganti":1,"josephrocca":1,"TkachenkoDaniil":1,"Alex66955":1,"bclinkinbeard":1,"yangyaochia":1,"Ackar":1,"hoseinimortezamh-sketch":1,"overra":1,"DarphBobo":1,"ljwagerfield":1,"guy-mograbi-at-gigaspaces":1,"hborders":1,"tunnckoCore":1,"alex8276":1,"adityashukla74":1,"qooban":1,"alandoyle95":1,"doowb":1,"lcalvy":1,"jsdevel":1,"binary-koan":1,"Meekohi":1,"Somesh-bsai":1,"vladblindu":1,"datnordstrom":1,"Taz-1999":1,"Xflofoxx":1,"petrbrzek":1,"shahar-h":1,"jriffel":1,"yuxiaoyan1205":1,"Comee":1,"marcelklehr":1,"vanwalj":1,"benjaminplanche":1,"GoldFrite":1,"kevva":1,"pofider":1,"Richienb":1,"gitowiec":1,"glk-hll":1,"george-norris-salesforce":1,"12122J":1,"faizushaik":1,"waltbest2":1,"mbrio":1,"dogancelik":1,"yurydelendik":1,"yevgenypats":1,"detski-dot":1,"alan-wr":1,"magicOz":1,"csantanapr":1,"silvanaweb":1,"searls":1,"luisrudge":1,"AllanOricil":1,"umar-shabbir":1,"Fndroid":1,"tlvince":1,"nick-ChenZe":1,"matthewmueller":1,"vsonix-bub":1,"jzhw0130":1,"roeeyud":1,"xingrz":1}},"pull_request_authors":{"table":{"jkroepke":1,"vsonix-bub":1,"Xflofoxx":1,"12122J":1,"glasser":1,"tschaub":1,"floatdrop":1,"simonepri":1,"doesdev":1,"ianchi":1,"XhmikosR":1,"jeffrafter":1,"alexanderkogan":1,"kevva":1,"xingrz":1,"carlocorradini":1,"dainis":1,"trptcolin":1,"shinnn":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-08-22T00:00:08.916Z","repositories_count":16248296,"issues_count":42006023,"pull_requests_count":133946524,"authors_count":11496688,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{}},"past_year_pull_request_labels_count":{"table":{}},"past_year_issue_author_associations_count":{"table":{"NONE":7}},"past_year_pull_request_author_associations_count":{"table":{"NONE":1}},"past_year_issue_authors":{"table":{"devploit":3,"12122J":1,"detski-dot":1,"hoseinimortezamh-sketch":1,"umar-shabbir":1}},"past_year_pull_request_authors":{"table":{"12122J":1}},"maintainers":[{"table":{"login":"kevva","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kevva"}},{"table":{"login":"shinnn","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/shinnn"}}],"active_maintainers":[]}},"events":{"total":{"ForkEvent":1,"IssuesEvent":2,"WatchEvent":6},"last_year":{"IssuesEvent":1}},"keywords":["decompress","extract","nodejs","tar","targz","zip"],"dependencies":[{"ecosystem":"npm","filepath":"package.json","sha":null,"kind":"manifest","created_at":"2022-08-30T23:41:00.516Z","updated_at":"2022-08-30T23:41:00.516Z","repository_link":"https://github.com/kevva/decompress/blob/master/package.json","dependencies":[{"id":3351642060,"package_name":"decompress-tar","ecosystem":"npm","requirements":"^4.0.0","direct":true,"kind":"runtime","optional":false},{"id":3351642061,"package_name":"decompress-tarbz2","ecosystem":"npm","requirements":"^4.0.0","direct":true,"kind":"runtime","optional":false},{"id":3351642062,"package_name":"decompress-targz","ecosystem":"npm","requirements":"^4.0.0","direct":true,"kind":"runtime","optional":false},{"id":3351642063,"package_name":"decompress-unzip","ecosystem":"npm","requirements":"^4.0.1","direct":true,"kind":"runtime","optional":false},{"id":3351642064,"package_name":"graceful-fs","ecosystem":"npm","requirements":"^4.1.10","direct":true,"kind":"runtime","optional":false},{"id":3351642065,"package_name":"make-dir","ecosystem":"npm","requirements":"^1.0.0","direct":true,"kind":"runtime","optional":false},{"id":3351642066,"package_name":"pify","ecosystem":"npm","requirements":"^2.3.0","direct":true,"kind":"runtime","optional":false},{"id":3351642067,"package_name":"strip-dirs","ecosystem":"npm","requirements":"^2.0.0","direct":true,"kind":"runtime","optional":false},{"id":3351642068,"package_name":"ava","ecosystem":"npm","requirements":"*","direct":true,"kind":"development","optional":false},{"id":3351642069,"package_name":"esm","ecosystem":"npm","requirements":"^3.2.25","direct":true,"kind":"development","optional":false},{"id":3351642070,"package_name":"is-jpg","ecosystem":"npm","requirements":"^1.0.0","direct":true,"kind":"development","optional":false},{"id":3351642071,"package_name":"path-exists","ecosystem":"npm","requirements":"^3.0.0","direct":true,"kind":"development","optional":false},{"id":3351642072,"package_name":"pify","ecosystem":"npm","requirements":"^2.3.0","direct":true,"kind":"development","optional":false},{"id":3351642073,"package_name":"rimraf","ecosystem":"npm","requirements":"^3.0.2","direct":true,"kind":"development","optional":false},{"id":3351642074,"package_name":"xo","ecosystem":"npm","requirements":"*","direct":true,"kind":"development","optional":false}]}],"score":29.056246515381268,"created_at":"2025-04-28T15:24:29.296Z","updated_at":"2026-08-22T20:00:25.499Z","avatar_url":"https://github.com/kevva.png","language":"JavaScript","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/360280","html_url":"https://summary.ecosyste.ms/projects/360280"}