{"id":360426,"url":"https://github.com/jpsim/yams","last_synced_at":"2026-06-21T15:01:29.271Z","repository":{"id":37678088,"uuid":"74237729","full_name":"jpsim/Yams","owner":"jpsim","description":"A Sweet and Swifty YAML parser.","archived":false,"fork":false,"pushed_at":"2026-03-19T12:50:54.000Z","size":26590,"stargazers_count":1235,"open_issues_count":27,"forks_count":170,"subscribers_count":20,"default_branch":"main","last_synced_at":"2026-03-20T07:38:14.402Z","etag":null,"topics":["ios","libyaml","linux","macos","swift","yaml"],"latest_commit_sha":null,"homepage":"https://jpsim.com/Yams","language":"Swift","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/jpsim.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2016-11-19T21:55:12.000Z","updated_at":"2026-03-17T12:47:48.000Z","dependencies_parsed_at":"2023-10-16T10:56:08.697Z","dependency_job_id":"311b22f6-db38-49dc-bb05-56b31dc6b14c","html_url":"https://github.com/jpsim/Yams","commit_stats":{"total_commits":795,"total_committers":37,"mean_commits":"21.486486486486488","dds":"0.42515723270440253","last_synced_commit":"53d8b3b730635b68a0b2fc720643e8cea4f6b6e2"},"previous_names":[],"tags_count":53,"template":false,"template_full_name":null,"purl":"pkg:github/jpsim/Yams","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jpsim","download_url":"https://codeload.github.com/jpsim/Yams/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams/sbom","scorecard":{"id":536166,"data":{"date":"2025-08-11","repo":{"name":"github.com/jpsim/Yams","commit":"d41ba4e7164c0838c6d48351f7575f7f762151fe"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.6,"checks":[{"name":"Maintained","score":10,"reason":"9 commit(s) and 23 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":2,"reason":"Found 4/15 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/bazel.yml:1","Warn: no topLevel permission defined: .github/workflows/cmake.yml:1","Warn: no topLevel permission defined: .github/workflows/jazzy.yml:1","Warn: no topLevel permission defined: .github/workflows/nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/pod_lib_lint.yml:1","Warn: no topLevel permission defined: .github/workflows/swiftlint.yml:1","Warn: no topLevel permission defined: .github/workflows/swiftlint_analyze.yml:1","Warn: no topLevel permission defined: .github/workflows/swiftpm.yml:1","Warn: no topLevel permission defined: .github/workflows/xcodebuild.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bazel.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/bazel.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bazel.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/bazel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bazel.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/bazel.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cmake.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/cmake.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cmake.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/cmake.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jazzy.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/jazzy.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/jazzy.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/jazzy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jazzy.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/jazzy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pod_lib_lint.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/pod_lib_lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftlint.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftlint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftlint_analyze.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftlint_analyze.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/xcodebuild.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/xcodebuild.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/xcodebuild.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/xcodebuild.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/xcodebuild.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/xcodebuild.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: .github/workflows/swiftpm.yml:64","Warn: downloadThenRun not pinned by hash: .github/workflows/swiftpm.yml:87","Info:   0 out of  19 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned","Info:   0 out of   2 downloadThenRun dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 6.0.1 not signed: https://api.github.com/repos/jpsim/Yams/releases/224657865","Warn: release artifact 6.0.1 does not have provenance: https://api.github.com/repos/jpsim/Yams/releases/224657865"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 23 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T07:00:56.371Z","repository_id":37678088,"created_at":"2025-08-20T07:00:56.371Z","updated_at":"2025-08-20T07:00:56.371Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":32375625,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-28T09:24:15.638Z","status":"ssl_error","status_checked_at":"2026-04-28T09:24:15.071Z","response_time":56,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"jpsim","name":"JP Simard","uuid":"474794","kind":"user","description":"","email":"jp@jpsim.com","website":"www.jpsim.com","location":"Montreal","twitter":null,"company":"Mobile @ Ramp","icon_url":"https://avatars.githubusercontent.com/u/474794?u=c9c27581b9b8e685636bba838fcae5bceb8f86d2\u0026v=4","repositories_count":155,"last_synced_at":"2025-10-29T22:01:56.350Z","metadata":{"has_sponsors_listing":true},"html_url":"https://github.com/jpsim","funding_links":["https://github.com/sponsors/jpsim"],"total_stars":8166,"followers":1984,"following":42,"created_at":"2022-11-03T17:58:59.195Z","updated_at":"2025-10-29T22:01:56.351Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jpsim","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jpsim/repositories"},"packages":[{"id":12707231,"name":"yams","ecosystem":"bazel","description":null,"homepage":"https://github.com/jpsim/Yams","licenses":null,"normalized_licenses":[],"repository_url":"https://github.com/jpsim/Yams","keywords_array":[],"namespace":null,"versions_count":14,"first_release_published_at":"2026-01-23T14:08:58.899Z","latest_release_published_at":"2026-03-11T16:45:31.238Z","latest_release_number":"6.2.1","last_synced_at":"2026-03-23T19:01:38.085Z","created_at":"2026-01-23T14:08:56.593Z","updated_at":"2026-03-23T19:01:38.085Z","registry_url":"https://registry.bazel.build/modules/yams","install_command":"bazel_dep(name = \"yams\")","documentation_url":"https://registry.bazel.build/docs/yams","metadata":{"maintainers":[{"email":"jp@jpsim.com","github":"jpsim","name":"JP Simard","github_user_id":474794}],"yanked_versions":{},"deprecated":null,"repository":["github:jpsim/Yams"]},"repo_metadata":{},"repo_metadata_updated_at":null,"dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:bazel/yams","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/bazel/yams","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/bazel/yams","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/bazel/yams/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/registry.bazel.build/packages/yams/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/registry.bazel.build/packages/yams/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/registry.bazel.build/packages/yams/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/registry.bazel.build/packages/yams/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/registry.bazel.build/packages/yams/codemeta","maintainers":[{"uuid":"474794","login":"jpsim","name":"JP Simard","email":"jp@jpsim.com","url":null,"packages_count":5,"html_url":null,"role":null,"created_at":"2026-03-07T16:01:19.019Z","updated_at":"2026-03-07T16:01:19.019Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/registry.bazel.build/maintainers/jpsim/packages"}],"registry":{"name":"registry.bazel.build","url":"https://registry.bazel.build","ecosystem":"bazel","default":true,"packages_count":1055,"maintainers_count":405,"namespaces_count":0,"keywords_count":0,"github":"bazelbuild","metadata":{"funded_packages_count":7},"icon_url":"https://github.com/bazelbuild.png","created_at":"2026-01-23T13:05:25.896Z","updated_at":"2026-03-24T05:30:02.616Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/registry.bazel.build/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/registry.bazel.build/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/registry.bazel.build/namespaces"}},{"id":5547200,"name":"github.com/jpsim/Yams","ecosystem":"swiftpm","description":"A Sweet and Swifty YAML parser.","homepage":"https://jpsim.com/Yams","licenses":"mit","normalized_licenses":["MIT"],"repository_url":"https://github.com/jpsim/Yams","keywords_array":["ios","libyaml","linux","macos","swift","yaml"],"namespace":"jpsim","versions_count":53,"first_release_published_at":"2016-11-19T21:59:58.000Z","latest_release_published_at":"2025-10-08T11:31:44.000Z","latest_release_number":"6.2.0","last_synced_at":"2026-03-23T19:01:43.644Z","created_at":"2022-11-28T21:33:47.597Z","updated_at":"2026-03-23T19:01:43.644Z","registry_url":"https://swiftpackageindex.com/jpsim/Yams","install_command":null,"documentation_url":"https://swiftpackageindex.com/jpsim/Yams/documentation","metadata":{},"repo_metadata":{"id":37678088,"uuid":"74237729","full_name":"jpsim/Yams","owner":"jpsim","description":"A Sweet and Swifty YAML parser.","archived":false,"fork":false,"pushed_at":"2026-02-05T22:32:42.000Z","size":26587,"stargazers_count":1238,"open_issues_count":26,"forks_count":170,"subscribers_count":20,"default_branch":"main","last_synced_at":"2026-03-11T22:31:46.584Z","etag":null,"topics":["ios","libyaml","linux","macos","swift","yaml"],"latest_commit_sha":null,"homepage":"https://jpsim.com/Yams","language":"Swift","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/jpsim.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2016-11-19T21:55:12.000Z","updated_at":"2026-03-11T19:19:41.000Z","dependencies_parsed_at":"2023-10-16T10:56:08.697Z","dependency_job_id":"311b22f6-db38-49dc-bb05-56b31dc6b14c","html_url":"https://github.com/jpsim/Yams","commit_stats":{"total_commits":795,"total_committers":37,"mean_commits":"21.486486486486488","dds":"0.42515723270440253","last_synced_commit":"53d8b3b730635b68a0b2fc720643e8cea4f6b6e2"},"previous_names":[],"tags_count":53,"template":false,"template_full_name":null,"purl":"pkg:github/jpsim/Yams","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jpsim","download_url":"https://codeload.github.com/jpsim/Yams/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams/sbom","scorecard":{"id":536166,"data":{"date":"2025-08-11","repo":{"name":"github.com/jpsim/Yams","commit":"d41ba4e7164c0838c6d48351f7575f7f762151fe"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.6,"checks":[{"name":"Maintained","score":10,"reason":"9 commit(s) and 23 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":2,"reason":"Found 4/15 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/bazel.yml:1","Warn: no topLevel permission defined: .github/workflows/cmake.yml:1","Warn: no topLevel permission defined: .github/workflows/jazzy.yml:1","Warn: no topLevel permission defined: .github/workflows/nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/pod_lib_lint.yml:1","Warn: no topLevel permission defined: .github/workflows/swiftlint.yml:1","Warn: no topLevel permission defined: .github/workflows/swiftlint_analyze.yml:1","Warn: no topLevel permission defined: .github/workflows/swiftpm.yml:1","Warn: no topLevel permission defined: .github/workflows/xcodebuild.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bazel.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/bazel.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bazel.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/bazel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bazel.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/bazel.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cmake.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/cmake.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cmake.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/cmake.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jazzy.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/jazzy.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/jazzy.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/jazzy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jazzy.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/jazzy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pod_lib_lint.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/pod_lib_lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftlint.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftlint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftlint_analyze.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftlint_analyze.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/xcodebuild.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/xcodebuild.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/xcodebuild.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/xcodebuild.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/xcodebuild.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/xcodebuild.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: .github/workflows/swiftpm.yml:64","Warn: downloadThenRun not pinned by hash: .github/workflows/swiftpm.yml:87","Info:   0 out of  19 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned","Info:   0 out of   2 downloadThenRun dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 6.0.1 not signed: https://api.github.com/repos/jpsim/Yams/releases/224657865","Warn: release artifact 6.0.1 does not have provenance: https://api.github.com/repos/jpsim/Yams/releases/224657865"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 23 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T07:00:56.371Z","repository_id":37678088,"created_at":"2025-08-20T07:00:56.371Z","updated_at":"2025-08-20T07:00:56.371Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30410366,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-12T00:40:14.898Z","status":"ssl_error","status_checked_at":"2026-03-12T00:40:08.439Z","response_time":84,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"tags":[]},"repo_metadata_updated_at":"2026-03-12T01:07:41.449Z","dependent_packages_count":183,"downloads":null,"downloads_period":null,"dependent_repos_count":457,"rankings":{"downloads":null,"dependent_repos_count":0.42439484438855707,"dependent_packages_count":0.09430996541967936,"stargazers_count":6.177302734988997,"forks_count":5.862936183590066,"docker_downloads_count":null,"average":3.139735932096825},"purl":"pkg:swift/github.com/jpsim/Yams","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/swiftpm/github.com/jpsim/Yams","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/swiftpm/github.com/jpsim/Yams","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/swiftpm/github.com/jpsim/Yams/dependencies","status":null,"funding_links":[],"critical":true,"issue_metadata":{"last_synced_at":"2025-10-08T14:00:46.972Z","issues_count":49,"pull_requests_count":180,"avg_time_to_close_issue":78291424.14285715,"avg_time_to_close_pull_request":3509560.858064516,"issues_closed_count":35,"pull_requests_closed_count":155,"pull_request_authors_count":41,"issue_authors_count":42,"avg_comments_per_issue":2.612244897959184,"avg_comments_per_pull_request":1.6611111111111112,"merged_pull_requests_count":131,"bot_issues_count":0,"bot_pull_requests_count":12,"past_year_issues_count":4,"past_year_pull_requests_count":58,"past_year_avg_time_to_close_issue":2946585.0,"past_year_avg_time_to_close_pull_request":1905316.5,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":44,"past_year_pull_request_authors_count":15,"past_year_issue_authors_count":4,"past_year_avg_comments_per_issue":5.0,"past_year_avg_comments_per_pull_request":1.6896551724137931,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":4,"past_year_merged_pull_requests_count":38,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams/issues","maintainers":[{"login":"jpsim","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jpsim"},{"login":"lynchsft","count":26,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lynchsft"},{"login":"luispadron","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/luispadron"},{"login":"norio-nomura","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/norio-nomura"},{"login":"brentleyjones","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentleyjones"},{"login":"tonyarnold","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tonyarnold"}],"active_maintainers":[{"login":"lynchsft","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lynchsft"},{"login":"jpsim","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jpsim"},{"login":"luispadron","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/luispadron"},{"login":"brentleyjones","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentleyjones"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/swiftpackageindex.com/packages/github.com%2Fjpsim%2FYams/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/swiftpackageindex.com/packages/github.com%2Fjpsim%2FYams/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/swiftpackageindex.com/packages/github.com%2Fjpsim%2FYams/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/swiftpackageindex.com/packages/github.com%2Fjpsim%2FYams/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/swiftpackageindex.com/packages/github.com%2Fjpsim%2FYams/codemeta","maintainers":[],"registry":{"name":"swiftpackageindex.com","url":"https://swiftpackageindex.com","ecosystem":"swiftpm","default":true,"packages_count":12292,"maintainers_count":0,"namespaces_count":2774,"keywords_count":0,"github":"SwiftPackageIndex","metadata":{"funded_packages_count":1628},"icon_url":"https://github.com/SwiftPackageIndex.png","created_at":"2022-11-28T16:45:05.949Z","updated_at":"2026-03-18T07:58:03.286Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/swiftpackageindex.com/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/swiftpackageindex.com/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/swiftpackageindex.com/namespaces"}},{"id":11583715,"name":"github.com/jpsim/yams","ecosystem":"swiftpm","description":"A Sweet and Swifty YAML parser.","homepage":"https://jpsim.com/Yams","licenses":"mit","normalized_licenses":["MIT"],"repository_url":"https://github.com/jpsim/yams","keywords_array":["ios","libyaml","linux","macos","swift","yaml"],"namespace":"jpsim","versions_count":53,"first_release_published_at":"2016-11-19T21:59:58.000Z","latest_release_published_at":"2025-10-08T11:31:44.000Z","latest_release_number":"6.2.0","last_synced_at":"2026-03-23T19:01:43.672Z","created_at":"2025-04-26T02:07:48.884Z","updated_at":"2026-03-23T19:01:43.672Z","registry_url":"https://swiftpackageindex.com/jpsim/yams","install_command":null,"documentation_url":"https://swiftpackageindex.com/jpsim/yams/documentation","metadata":{},"repo_metadata":{"id":37678088,"uuid":"74237729","full_name":"jpsim/Yams","owner":"jpsim","description":"A Sweet and Swifty YAML parser.","archived":false,"fork":false,"pushed_at":"2025-12-18T14:12:12.000Z","size":26050,"stargazers_count":1216,"open_issues_count":23,"forks_count":167,"subscribers_count":21,"default_branch":"main","last_synced_at":"2026-01-02T00:08:36.242Z","etag":null,"topics":["ios","libyaml","linux","macos","swift","yaml"],"latest_commit_sha":null,"homepage":"https://jpsim.com/Yams","language":"Swift","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/jpsim.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2016-11-19T21:55:12.000Z","updated_at":"2025-12-29T13:21:22.000Z","dependencies_parsed_at":"2023-10-16T10:56:08.697Z","dependency_job_id":"311b22f6-db38-49dc-bb05-56b31dc6b14c","html_url":"https://github.com/jpsim/Yams","commit_stats":{"total_commits":795,"total_committers":37,"mean_commits":"21.486486486486488","dds":"0.42515723270440253","last_synced_commit":"53d8b3b730635b68a0b2fc720643e8cea4f6b6e2"},"previous_names":[],"tags_count":53,"template":false,"template_full_name":null,"purl":"pkg:github/jpsim/Yams","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jpsim","download_url":"https://codeload.github.com/jpsim/Yams/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams/sbom","scorecard":{"id":536166,"data":{"date":"2025-08-11","repo":{"name":"github.com/jpsim/Yams","commit":"d41ba4e7164c0838c6d48351f7575f7f762151fe"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.6,"checks":[{"name":"Maintained","score":10,"reason":"9 commit(s) and 23 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":2,"reason":"Found 4/15 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/bazel.yml:1","Warn: no topLevel permission defined: .github/workflows/cmake.yml:1","Warn: no topLevel permission defined: .github/workflows/jazzy.yml:1","Warn: no topLevel permission defined: .github/workflows/nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/pod_lib_lint.yml:1","Warn: no topLevel permission defined: .github/workflows/swiftlint.yml:1","Warn: no topLevel permission defined: .github/workflows/swiftlint_analyze.yml:1","Warn: no topLevel permission defined: .github/workflows/swiftpm.yml:1","Warn: no topLevel permission defined: .github/workflows/xcodebuild.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bazel.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/bazel.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bazel.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/bazel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bazel.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/bazel.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cmake.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/cmake.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cmake.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/cmake.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jazzy.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/jazzy.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/jazzy.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/jazzy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jazzy.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/jazzy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pod_lib_lint.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/pod_lib_lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftlint.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftlint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftlint_analyze.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftlint_analyze.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/xcodebuild.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/xcodebuild.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/xcodebuild.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/xcodebuild.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/xcodebuild.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/xcodebuild.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: .github/workflows/swiftpm.yml:64","Warn: downloadThenRun not pinned by hash: .github/workflows/swiftpm.yml:87","Info:   0 out of  19 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned","Info:   0 out of   2 downloadThenRun dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 6.0.1 not signed: https://api.github.com/repos/jpsim/Yams/releases/224657865","Warn: release artifact 6.0.1 does not have provenance: https://api.github.com/repos/jpsim/Yams/releases/224657865"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 23 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T07:00:56.371Z","repository_id":37678088,"created_at":"2025-08-20T07:00:56.371Z","updated_at":"2025-08-20T07:00:56.371Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28171361,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2026-01-02T02:00:06.235Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"jpsim","name":"JP Simard","uuid":"474794","kind":"user","description":"","email":"jp@jpsim.com","website":"www.jpsim.com","location":"Montreal","twitter":null,"company":"Mobile @ Ramp","icon_url":"https://avatars.githubusercontent.com/u/474794?u=c9c27581b9b8e685636bba838fcae5bceb8f86d2\u0026v=4","repositories_count":155,"last_synced_at":"2025-10-29T22:01:56.350Z","metadata":{"has_sponsors_listing":true},"html_url":"https://github.com/jpsim","funding_links":["https://github.com/sponsors/jpsim"],"total_stars":8166,"followers":1984,"following":42,"created_at":"2022-11-03T17:58:59.195Z","updated_at":"2025-10-29T22:01:56.351Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jpsim","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jpsim/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-01-02T11:15:33.832Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":22.92717369376639,"dependent_packages_count":16.81290973272819,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":19.87004171324729},"purl":"pkg:swift/github.com/jpsim/yams","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/swiftpm/github.com/jpsim/yams","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/swiftpm/github.com/jpsim/yams","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/swiftpm/github.com/jpsim/yams/dependencies","status":null,"funding_links":["https://github.com/sponsors/jpsim"],"critical":null,"issue_metadata":{"last_synced_at":"2025-12-19T21:13:27.224Z","issues_count":49,"pull_requests_count":181,"avg_time_to_close_issue":78291424.14285715,"avg_time_to_close_pull_request":3495754.673076923,"issues_closed_count":35,"pull_requests_closed_count":156,"pull_request_authors_count":41,"issue_authors_count":42,"avg_comments_per_issue":2.612244897959184,"avg_comments_per_pull_request":1.6574585635359116,"merged_pull_requests_count":132,"bot_issues_count":0,"bot_pull_requests_count":12,"past_year_issues_count":4,"past_year_pull_requests_count":48,"past_year_avg_time_to_close_issue":2946585.0,"past_year_avg_time_to_close_pull_request":948162.552631579,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":38,"past_year_pull_request_authors_count":12,"past_year_issue_authors_count":4,"past_year_avg_comments_per_issue":5.0,"past_year_avg_comments_per_pull_request":1.8333333333333333,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":2,"past_year_merged_pull_requests_count":34,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams/issues","maintainers":[{"login":"jpsim","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jpsim"},{"login":"lynchsft","count":26,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lynchsft"},{"login":"luispadron","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/luispadron"},{"login":"norio-nomura","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/norio-nomura"},{"login":"brentleyjones","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentleyjones"},{"login":"tonyarnold","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tonyarnold"}],"active_maintainers":[{"login":"lynchsft","count":24,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lynchsft"},{"login":"brentleyjones","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentleyjones"},{"login":"jpsim","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jpsim"},{"login":"luispadron","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/luispadron"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/swiftpackageindex.com/packages/github.com%2Fjpsim%2Fyams/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/swiftpackageindex.com/packages/github.com%2Fjpsim%2Fyams/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/swiftpackageindex.com/packages/github.com%2Fjpsim%2Fyams/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/swiftpackageindex.com/packages/github.com%2Fjpsim%2Fyams/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/swiftpackageindex.com/packages/github.com%2Fjpsim%2Fyams/codemeta","maintainers":[],"registry":{"name":"swiftpackageindex.com","url":"https://swiftpackageindex.com","ecosystem":"swiftpm","default":true,"packages_count":12292,"maintainers_count":0,"namespaces_count":2774,"keywords_count":0,"github":"SwiftPackageIndex","metadata":{"funded_packages_count":1628},"icon_url":"https://github.com/SwiftPackageIndex.png","created_at":"2022-11-28T16:45:05.949Z","updated_at":"2026-03-18T07:58:03.286Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/swiftpackageindex.com/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/swiftpackageindex.com/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/swiftpackageindex.com/namespaces"}},{"id":5601107,"name":"jpsim/Yams","ecosystem":"carthage","description":"A Sweet and Swifty YAML parser.","homepage":"https://jpsim.com/Yams","licenses":"mit","normalized_licenses":["MIT"],"repository_url":"https://github.com/jpsim/Yams","keywords_array":["ios","libyaml","linux","macos","swift","yaml"],"namespace":"jpsim","versions_count":53,"first_release_published_at":"2016-11-19T21:59:58.000Z","latest_release_published_at":"2025-10-08T11:31:44.000Z","latest_release_number":"6.2.0","last_synced_at":"2026-03-23T19:01:47.086Z","created_at":"2022-12-01T17:28:34.944Z","updated_at":"2026-03-23T19:01:47.087Z","registry_url":null,"install_command":null,"documentation_url":null,"metadata":{},"repo_metadata":{"id":37678088,"uuid":"74237729","full_name":"jpsim/Yams","owner":"jpsim","description":"A Sweet and Swifty YAML parser.","archived":false,"fork":false,"pushed_at":"2026-02-05T22:32:42.000Z","size":26587,"stargazers_count":1238,"open_issues_count":26,"forks_count":170,"subscribers_count":20,"default_branch":"main","last_synced_at":"2026-03-11T22:31:46.584Z","etag":null,"topics":["ios","libyaml","linux","macos","swift","yaml"],"latest_commit_sha":null,"homepage":"https://jpsim.com/Yams","language":"Swift","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/jpsim.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2016-11-19T21:55:12.000Z","updated_at":"2026-03-11T19:19:41.000Z","dependencies_parsed_at":"2023-10-16T10:56:08.697Z","dependency_job_id":"311b22f6-db38-49dc-bb05-56b31dc6b14c","html_url":"https://github.com/jpsim/Yams","commit_stats":{"total_commits":795,"total_committers":37,"mean_commits":"21.486486486486488","dds":"0.42515723270440253","last_synced_commit":"53d8b3b730635b68a0b2fc720643e8cea4f6b6e2"},"previous_names":[],"tags_count":53,"template":false,"template_full_name":null,"purl":"pkg:github/jpsim/Yams","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jpsim","download_url":"https://codeload.github.com/jpsim/Yams/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams/sbom","scorecard":{"id":536166,"data":{"date":"2025-08-11","repo":{"name":"github.com/jpsim/Yams","commit":"d41ba4e7164c0838c6d48351f7575f7f762151fe"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.6,"checks":[{"name":"Maintained","score":10,"reason":"9 commit(s) and 23 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":2,"reason":"Found 4/15 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/bazel.yml:1","Warn: no topLevel permission defined: .github/workflows/cmake.yml:1","Warn: no topLevel permission defined: .github/workflows/jazzy.yml:1","Warn: no topLevel permission defined: .github/workflows/nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/pod_lib_lint.yml:1","Warn: no topLevel permission defined: .github/workflows/swiftlint.yml:1","Warn: no topLevel permission defined: .github/workflows/swiftlint_analyze.yml:1","Warn: no topLevel permission defined: .github/workflows/swiftpm.yml:1","Warn: no topLevel permission defined: .github/workflows/xcodebuild.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bazel.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/bazel.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bazel.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/bazel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bazel.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/bazel.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cmake.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/cmake.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cmake.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/cmake.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jazzy.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/jazzy.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/jazzy.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/jazzy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jazzy.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/jazzy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pod_lib_lint.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/pod_lib_lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftlint.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftlint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftlint_analyze.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftlint_analyze.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/xcodebuild.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/xcodebuild.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/xcodebuild.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/xcodebuild.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/xcodebuild.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/xcodebuild.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: .github/workflows/swiftpm.yml:64","Warn: downloadThenRun not pinned by hash: .github/workflows/swiftpm.yml:87","Info:   0 out of  19 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned","Info:   0 out of   2 downloadThenRun dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 6.0.1 not signed: https://api.github.com/repos/jpsim/Yams/releases/224657865","Warn: release artifact 6.0.1 does not have provenance: https://api.github.com/repos/jpsim/Yams/releases/224657865"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 23 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T07:00:56.371Z","repository_id":37678088,"created_at":"2025-08-20T07:00:56.371Z","updated_at":"2025-08-20T07:00:56.371Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30713414,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-19T05:29:31.190Z","status":"ssl_error","status_checked_at":"2026-03-19T05:28:25.821Z","response_time":57,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"jpsim","name":"JP Simard","uuid":"474794","kind":"user","description":"","email":"jp@jpsim.com","website":"www.jpsim.com","location":"Montreal","twitter":null,"company":"Mobile @ Ramp","icon_url":"https://avatars.githubusercontent.com/u/474794?u=c9c27581b9b8e685636bba838fcae5bceb8f86d2\u0026v=4","repositories_count":155,"last_synced_at":"2025-10-29T22:01:56.350Z","metadata":{"has_sponsors_listing":true},"html_url":"https://github.com/jpsim","funding_links":["https://github.com/sponsors/jpsim"],"total_stars":8166,"followers":1984,"following":42,"created_at":"2022-11-03T17:58:59.195Z","updated_at":"2025-10-29T22:01:56.351Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jpsim","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jpsim/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-19T17:11:34.637Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":19,"rankings":{"downloads":null,"dependent_repos_count":5.237633365664403,"dependent_packages_count":0.0,"stargazers_count":20.417070805043647,"forks_count":22.744907856450048,"docker_downloads_count":null,"average":12.099903006789525},"purl":"pkg:carthage/jpsim%2FYams","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/carthage/jpsim/Yams","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/carthage/jpsim/Yams","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/carthage/jpsim/Yams/dependencies","status":null,"funding_links":["https://github.com/sponsors/jpsim"],"critical":false,"issue_metadata":{"last_synced_at":"2026-03-04T15:08:44.515Z","issues_count":50,"pull_requests_count":183,"avg_time_to_close_issue":78291424.14285715,"avg_time_to_close_pull_request":3495754.673076923,"issues_closed_count":35,"pull_requests_closed_count":156,"pull_request_authors_count":43,"issue_authors_count":43,"avg_comments_per_issue":2.56,"avg_comments_per_pull_request":1.644808743169399,"merged_pull_requests_count":132,"bot_issues_count":0,"bot_pull_requests_count":12,"past_year_issues_count":5,"past_year_pull_requests_count":44,"past_year_avg_time_to_close_issue":2946585.0,"past_year_avg_time_to_close_pull_request":838838.696969697,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":33,"past_year_pull_request_authors_count":13,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":4.0,"past_year_avg_comments_per_pull_request":1.6363636363636365,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":2,"past_year_merged_pull_requests_count":29,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams/issues","maintainers":[{"login":"jpsim","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jpsim"},{"login":"lynchsft","count":26,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lynchsft"},{"login":"luispadron","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/luispadron"},{"login":"norio-nomura","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/norio-nomura"},{"login":"brentleyjones","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentleyjones"},{"login":"tonyarnold","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tonyarnold"}],"active_maintainers":[{"login":"lynchsft","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lynchsft"},{"login":"brentleyjones","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentleyjones"},{"login":"jpsim","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jpsim"},{"login":"luispadron","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/luispadron"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/carthage/packages/jpsim%2FYams/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/carthage/packages/jpsim%2FYams/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/carthage/packages/jpsim%2FYams/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/carthage/packages/jpsim%2FYams/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/carthage/packages/jpsim%2FYams/codemeta","maintainers":[],"registry":{"name":"carthage","url":"https://github.com/Carthage/Carthage","ecosystem":"carthage","default":true,"packages_count":2089,"maintainers_count":0,"namespaces_count":521,"keywords_count":0,"github":"Carthage","metadata":{"funded_packages_count":207},"icon_url":"https://github.com/Carthage.png","created_at":"2022-12-01T15:03:57.971Z","updated_at":"2026-03-18T08:06:05.044Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/carthage/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/carthage/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/carthage/namespaces"}},{"id":416497,"name":"Yams","ecosystem":"cocoapods","description":"A sweet and swifty YAML parser.","homepage":"https://github.com/jpsim/Yams","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/jpsim/Yams","keywords_array":[],"namespace":null,"versions_count":32,"first_release_published_at":"2016-11-20T05:50:23.000Z","latest_release_published_at":"2023-07-04T15:29:29.464Z","latest_release_number":"5.0.6","last_synced_at":"2026-03-23T19:01:49.522Z","created_at":"2022-04-06T17:56:43.528Z","updated_at":"2026-03-23T19:01:49.522Z","registry_url":"https://cocoapods.org/pods/Yams","install_command":"pod try Yams","documentation_url":"https://cocoadocs.org/docsets/Yams/","metadata":{},"repo_metadata":{"id":37678088,"uuid":"74237729","full_name":"jpsim/Yams","owner":"jpsim","description":"A Sweet and Swifty YAML parser.","archived":false,"fork":false,"pushed_at":"2025-10-08T11:33:55.000Z","size":26048,"stargazers_count":1206,"open_issues_count":25,"forks_count":163,"subscribers_count":21,"default_branch":"main","last_synced_at":"2025-10-26T18:47:44.267Z","etag":null,"topics":["ios","libyaml","linux","macos","swift","yaml"],"latest_commit_sha":null,"homepage":"https://jpsim.com/Yams","language":"Swift","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/jpsim.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2016-11-19T21:55:12.000Z","updated_at":"2025-10-26T11:05:09.000Z","dependencies_parsed_at":"2023-10-16T10:56:08.697Z","dependency_job_id":"311b22f6-db38-49dc-bb05-56b31dc6b14c","html_url":"https://github.com/jpsim/Yams","commit_stats":{"total_commits":795,"total_committers":37,"mean_commits":"21.486486486486488","dds":"0.42515723270440253","last_synced_commit":"53d8b3b730635b68a0b2fc720643e8cea4f6b6e2"},"previous_names":[],"tags_count":53,"template":false,"template_full_name":null,"purl":"pkg:github/jpsim/Yams","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jpsim","download_url":"https://codeload.github.com/jpsim/Yams/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams/sbom","scorecard":{"id":536166,"data":{"date":"2025-08-11","repo":{"name":"github.com/jpsim/Yams","commit":"d41ba4e7164c0838c6d48351f7575f7f762151fe"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.6,"checks":[{"name":"Maintained","score":10,"reason":"9 commit(s) and 23 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":2,"reason":"Found 4/15 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/bazel.yml:1","Warn: no topLevel permission defined: .github/workflows/cmake.yml:1","Warn: no topLevel permission defined: .github/workflows/jazzy.yml:1","Warn: no topLevel permission defined: .github/workflows/nightly.yml:1","Warn: no topLevel permission defined: .github/workflows/pod_lib_lint.yml:1","Warn: no topLevel permission defined: .github/workflows/swiftlint.yml:1","Warn: no topLevel permission defined: .github/workflows/swiftlint_analyze.yml:1","Warn: no topLevel permission defined: .github/workflows/swiftpm.yml:1","Warn: no topLevel permission defined: .github/workflows/xcodebuild.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bazel.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/bazel.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bazel.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/bazel.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/bazel.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/bazel.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cmake.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/cmake.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cmake.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/cmake.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jazzy.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/jazzy.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/jazzy.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/jazzy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/jazzy.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/jazzy.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/nightly.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pod_lib_lint.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/pod_lib_lint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftlint.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftlint.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftlint_analyze.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftlint_analyze.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/swiftpm.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/swiftpm.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/xcodebuild.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/xcodebuild.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/xcodebuild.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/xcodebuild.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/xcodebuild.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/jpsim/Yams/xcodebuild.yml/main?enable=pin","Warn: downloadThenRun not pinned by hash: .github/workflows/swiftpm.yml:64","Warn: downloadThenRun not pinned by hash: .github/workflows/swiftpm.yml:87","Info:   0 out of  19 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned","Info:   0 out of   2 downloadThenRun dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 6.0.1 not signed: https://api.github.com/repos/jpsim/Yams/releases/224657865","Warn: release artifact 6.0.1 does not have provenance: https://api.github.com/repos/jpsim/Yams/releases/224657865"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 23 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T07:00:56.371Z","repository_id":37678088,"created_at":"2025-08-20T07:00:56.371Z","updated_at":"2025-08-20T07:00:56.371Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":283302470,"owners_count":26813587,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-11-08T02:00:06.281Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"tags":[]},"repo_metadata_updated_at":"2025-11-08T05:14:52.788Z","dependent_packages_count":8,"downloads":null,"downloads_period":null,"dependent_repos_count":53,"rankings":{"downloads":null,"dependent_repos_count":1.0896817743490839,"dependent_packages_count":0.9043180113575485,"stargazers_count":1.8730845888429308,"forks_count":2.3885043183815178,"docker_downloads_count":null,"average":1.5638971732327702},"purl":"pkg:cocoapods/Yams","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/cocoapods/Yams","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/cocoapods/Yams","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/cocoapods/Yams/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-08T14:00:46.972Z","issues_count":49,"pull_requests_count":180,"avg_time_to_close_issue":78291424.14285715,"avg_time_to_close_pull_request":3509560.858064516,"issues_closed_count":35,"pull_requests_closed_count":155,"pull_request_authors_count":41,"issue_authors_count":42,"avg_comments_per_issue":2.612244897959184,"avg_comments_per_pull_request":1.6611111111111112,"merged_pull_requests_count":131,"bot_issues_count":0,"bot_pull_requests_count":12,"past_year_issues_count":4,"past_year_pull_requests_count":58,"past_year_avg_time_to_close_issue":2946585.0,"past_year_avg_time_to_close_pull_request":1905316.5,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":44,"past_year_pull_request_authors_count":15,"past_year_issue_authors_count":4,"past_year_avg_comments_per_issue":5.0,"past_year_avg_comments_per_pull_request":1.6896551724137931,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":4,"past_year_merged_pull_requests_count":38,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams/issues","maintainers":[{"login":"jpsim","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jpsim"},{"login":"lynchsft","count":26,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lynchsft"},{"login":"luispadron","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/luispadron"},{"login":"norio-nomura","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/norio-nomura"},{"login":"brentleyjones","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentleyjones"},{"login":"tonyarnold","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tonyarnold"}],"active_maintainers":[{"login":"lynchsft","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lynchsft"},{"login":"jpsim","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jpsim"},{"login":"luispadron","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/luispadron"},{"login":"brentleyjones","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentleyjones"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/cocoapods.org/packages/Yams/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/cocoapods.org/packages/Yams/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/cocoapods.org/packages/Yams/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/cocoapods.org/packages/Yams/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/cocoapods.org/packages/Yams/codemeta","maintainers":[{"uuid":"jp@jpsim.com","login":null,"name":"JP Simard","email":"jp@jpsim.com","url":null,"packages_count":11,"html_url":null,"role":null,"created_at":"2022-11-08T04:49:02.393Z","updated_at":"2022-11-08T04:49:02.393Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/cocoapods.org/maintainers/jp@jpsim.com/packages"},{"uuid":"norio.nomura@gmail.com","login":null,"name":"Norio Nomura","email":"norio.nomura@gmail.com","url":null,"packages_count":3,"html_url":null,"role":null,"created_at":"2022-11-08T04:49:02.408Z","updated_at":"2022-11-08T04:49:02.408Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/cocoapods.org/maintainers/norio.nomura@gmail.com/packages"}],"registry":{"name":"cocoapods.org","url":"https://cocoapods.org","ecosystem":"cocoapods","default":true,"packages_count":102418,"maintainers_count":46663,"namespaces_count":0,"keywords_count":0,"github":"cocoapods","metadata":{"funded_packages_count":1670},"icon_url":"https://github.com/cocoapods.png","created_at":"2022-04-04T15:19:22.772Z","updated_at":"2026-03-18T07:57:15.860Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/cocoapods.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/cocoapods.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/cocoapods.org/namespaces"}}],"commits":{"id":18761,"full_name":"jpsim/Yams","default_branch":"main","total_commits":866,"total_committers":45,"total_bot_commits":9,"total_bot_committers":2,"mean_commits":19.244444444444444,"dds":0.47228637413394914,"past_year_total_commits":33,"past_year_total_committers":11,"past_year_total_bot_commits":1,"past_year_total_bot_committers":1,"past_year_mean_commits":3.0,"past_year_dds":0.48484848484848486,"last_synced_at":"2026-03-23T19:05:31.487Z","last_synced_commit":"1c0fd023ac88240220147360e9ccd671974d5b9a","created_at":"2023-03-07T11:38:53.656Z","updated_at":"2026-03-23T19:04:38.327Z","committers":[{"name":"Norio Nomura","email":"norio.nomura@gmail.com","login":"norio-nomura","count":457},{"name":"JP Simard","email":"jp@jpsim.com","login":"jpsim","count":267},{"name":"Adora Lynch","email":"lynchal@omnissa.com","login":null,"count":31},{"name":"Saleem Abdulrasool","email":"compnerd@compnerd.org","login":"compnerd","count":24},{"name":"Keith Smiley","email":"keithbsmiley@gmail.com","login":"keith","count":11},{"name":"Tejas Sharma","email":"tejass@zillowgroup.com","login":"tejassharma96","count":11},{"name":"Marc Prud'hommeaux","email":"marc@skip.tools","login":"marcprux","count":8},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":8},{"name":"Brentley Jones","email":"brentleyjones@lyft.com","login":"brentleyjones","count":3},{"name":"Maxwell Elliott","email":"56700854+tinder-maxwellelliott","login":"tinder-maxwellelliott","count":3},{"name":"Honza Dvorsky","email":"honza@apple.com","login":"czechboy0","count":3},{"name":"Adora Lynch","email":"lynch.sft@gmail.com","login":"lynchsft","count":2},{"name":"Danny Mösch","email":"danny.moesch@icloud.com","login":"SimplyDanny","count":2},{"name":"David Hart","email":"david@hartbit.com","login":"hartbit","count":2},{"name":"Matt Pennig","email":"mpennig@slack-corp.com","login":"pennig","count":2},{"name":"norio-nomura-test-forked-repository","email":"57336541+norio-nomura-test-forked-repository","login":"norio-nomura-test-forked-repository","count":2},{"name":"Luis Padron","email":"heyluispadron@gmail.com","login":"luispadron","count":2},{"name":"1024jp","email":"1024jp@wolfrosch.com","login":"1024jp","count":1},{"name":"Adin Cebic","email":"cebic.ad@gmail.com","login":"adincebic","count":1},{"name":"Andrew Watt","email":"awatt@squareup.com","login":"watt","count":1},{"name":"Andrés Cecilia Luque","email":"a.cecilia.luque@gmail.com","login":"acecilia","count":1},{"name":"Bradley Mackey","email":"bradleymackey@me.com","login":"bradleymackey","count":1},{"name":"Brennan Stehling","email":"brennan@smallsharptools.com","login":"brennanMKE","count":1},{"name":"ruralharry","email":"103827197+ruralharry","login":"ruralharry","count":1},{"name":"finagolfin","email":"finagolfin@tuta.io","login":"finagolfin","count":1},{"name":"azure-pipelines[bot]","email":"azure-pipelines[bot]","login":"azure-pipelines[bot]","count":1},{"name":"Yuta Saito","email":"kateinoigakukun@gmail.com","login":"kateinoigakukun","count":1},{"name":"Vitalii Budnik","email":"nekrich","login":"nekrich","count":1},{"name":"Tony Arnold","email":"tony@thecocoabots.com","login":"tonyarnold","count":1},{"name":"Tomek Popis","email":"tomek@melon-it.com","login":"PopTo","count":1},{"name":"Terence J. Grant","email":"tjgrant@tatewake.com","login":"tatewake","count":1},{"name":"Sven A. Schmidt","email":"sas@finestructure.co","login":"finestructure","count":1},{"name":"Ryan Lovelett","email":"ryan@lovelett.me","login":"RLovelett","count":1},{"name":"Rob Napier","email":"rob@neverwood.org","login":"rnapier","count":1},{"name":"Ondrej Rafaj","email":"ondrej.rafaj@gmail.com","login":"rafiki270","count":1},{"name":"Neil Jones","email":"futurejones","login":"futurejones","count":1},{"name":"Max Desiatov","email":"max@desiatov.com","login":"MaxDesiatov","count":1},{"name":"Mattt","email":"mattt@github.com","login":"mattt","count":1},{"name":"Mathew Polzin","email":"matt.polzin@gmail.com","login":"mattpolzin","count":1},{"name":"Lukas Stührk","email":"Lukas@Stuehrk.net","login":"Lukas-Stuehrk","count":1},{"name":"Liam Nichols","email":"liam.nichols.ln@gmail.com","login":"liamnichols","count":1},{"name":"Koen Punt","email":"koen@koenpunt.nl","login":"koenpunt","count":1},{"name":"Himanshu Kumar","email":"hikumar@microsoft.com","login":"hi-kumar","count":1},{"name":"Gary Miguel","email":"garymm@gmail.com","login":"garymm","count":1},{"name":"Eugene Gubin","email":"hemet.mail@gmail.com","login":"HeMet","count":1}],"past_year_committers":[{"name":"Adora Lynch","email":"lynchal@omnissa.com","login":null,"count":17},{"name":"JP Simard","email":"jp@jpsim.com","login":"jpsim","count":5},{"name":"Matt Pennig","email":"mpennig@slack-corp.com","login":"pennig","count":2},{"name":"Adora Lynch","email":"lynch.sft@gmail.com","login":"lynchsft","count":2},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":1},{"name":"Vitalii Budnik","email":"nekrich","login":"nekrich","count":1},{"name":"Tomek Popis","email":"tomek@melon-it.com","login":"PopTo","count":1},{"name":"Luis Padron","email":"lpadron@squareup.com","login":"luispadron","count":1},{"name":"Danny Mösch","email":"danny.moesch@icloud.com","login":"SimplyDanny","count":1},{"name":"Andrew Watt","email":"awatt@squareup.com","login":"watt","count":1},{"name":"Adin Cebic","email":"cebic.ad@gmail.com","login":"adincebic","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-03-25T00:00:58.194Z","repositories_count":6201883,"commits_count":926585721,"contributors_count":35876876,"owners_count":1144038,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"jpsim/Yams","html_url":"https://github.com/jpsim/Yams","last_synced_at":"2026-03-19T17:11:35.234Z","status":"active","issues_count":50,"pull_requests_count":184,"avg_time_to_close_issue":78291424.14285715,"avg_time_to_close_pull_request":3495754.673076923,"issues_closed_count":35,"pull_requests_closed_count":156,"pull_request_authors_count":43,"issue_authors_count":43,"avg_comments_per_issue":2.56,"avg_comments_per_pull_request":1.6358695652173914,"merged_pull_requests_count":132,"bot_issues_count":0,"bot_pull_requests_count":13,"past_year_issues_count":5,"past_year_pull_requests_count":43,"past_year_avg_time_to_close_issue":2946585.0,"past_year_avg_time_to_close_pull_request":630323.5161290322,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":31,"past_year_pull_request_authors_count":12,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":4.0,"past_year_avg_comments_per_pull_request":1.3953488372093024,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":3,"past_year_merged_pull_requests_count":27,"created_at":"2023-05-10T10:42:22.285Z","updated_at":"2026-03-19T17:11:35.234Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/jpsim%2FYams/issues","issue_labels_count":{"table":{"bug":1,"enhancement":1}},"pull_request_labels_count":{"table":{"dependencies":13,"ruby":3}},"issue_author_associations_count":{"table":{"NONE":38,"CONTRIBUTOR":7,"OWNER":3,"COLLABORATOR":2}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":56,"OWNER":54,"NONE":38,"COLLABORATOR":36}},"issue_authors":{"table":{"jpsim":3,"SpectralDragon":2,"tjprescott":2,"norio-nomura":2,"kean":2,"tejassharma96":2,"dominikmayer":1,"shmidt":1,"kvaDrug":1,"pennig":1,"liquidoshin":1,"ileitch":1,"ABridoux":1,"br-tyler-milner":1,"tatewake":1,"ajwitt212":1,"yulingtianxia":1,"ahartwel":1,"t089":1,"stevelandeyasana":1,"amomchilov":1,"FunkyMonkey14":1,"ra1028":1,"Juke-Duke":1,"keith":1,"arasan01":1,"balrajverma":1,"fappelman":1,"sbarex":1,"erkekin":1,"mattt":1,"ltns35":1,"sbarow":1,"maximkrouk":1,"alteredtech":1,"ffried":1,"JensAyton":1,"Whirlwind":1,"fbp93":1,"acecilia":1,"finestructure":1,"algal":1,"zhangferry":1}},"pull_request_authors":{"table":{"jpsim":54,"lynchsft":30,"dependabot[bot]":13,"compnerd":9,"keith":8,"luispadron":6,"pennig":4,"czechboy0":4,"tejassharma96":4,"brentleyjones":3,"tinder-maxwellelliott":3,"SimplyDanny":3,"ssgutierrez42":2,"hi-kumar":2,"ruralharry":2,"nekrich":2,"finagolfin":2,"futurejones":2,"marcprux":2,"PopTo":2,"arasan01":2,"1024jp":2,"SpectralDragon":2,"khng300":2,"zeionara":1,"rnapier":1,"bradleymackey":1,"NSCoder":1,"kateinoigakukun":1,"foscomputerservices":1,"johnfairh":1,"mattt":1,"kevboh":1,"ABridoux":1,"tatewake":1,"mxchinegod":1,"tonyarnold":1,"hjyamauchi":1,"finestructure":1,"liamnichols":1,"norio-nomura":1,"watt":1,"HeMet":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-03-23T00:00:07.489Z","repositories_count":13887312,"issues_count":34647234,"pull_requests_count":113114772,"authors_count":11208691,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{}},"past_year_pull_request_labels_count":{"table":{"dependencies":3,"ruby":3}},"past_year_issue_author_associations_count":{"table":{"NONE":5}},"past_year_pull_request_author_associations_count":{"table":{"COLLABORATOR":26,"NONE":7,"CONTRIBUTOR":6,"OWNER":2}},"past_year_issue_authors":{"table":{"ajwitt212":1,"alteredtech":1,"balrajverma":1,"ileitch":1,"pennig":1}},"past_year_pull_request_authors":{"table":{"lynchsft":22,"dependabot[bot]":3,"brentleyjones":2,"jpsim":2,"luispadron":2,"nekrich":2,"pennig":2,"SpectralDragon":2,"foscomputerservices":1,"johnfairh":1,"SimplyDanny":1,"watt":1}},"maintainers":[{"table":{"login":"jpsim","count":57,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jpsim"}},{"table":{"login":"lynchsft","count":26,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lynchsft"}},{"table":{"login":"luispadron","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/luispadron"}},{"table":{"login":"norio-nomura","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/norio-nomura"}},{"table":{"login":"brentleyjones","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentleyjones"}},{"table":{"login":"tonyarnold","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tonyarnold"}}],"active_maintainers":[{"table":{"login":"lynchsft","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lynchsft"}},{"table":{"login":"brentleyjones","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/brentleyjones"}},{"table":{"login":"jpsim","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jpsim"}},{"table":{"login":"luispadron","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/luispadron"}}]}},"events":{"total":{"ReleaseEvent":6,"DeleteEvent":8,"PullRequestEvent":53,"ForkEvent":20,"IssuesEvent":21,"WatchEvent":103,"IssueCommentEvent":125,"PushEvent":79,"PullRequestReviewCommentEvent":18,"PullRequestReviewEvent":44,"CreateEvent":19},"last_year":{"ReleaseEvent":3,"DeleteEvent":5,"PullRequestEvent":32,"ForkEvent":9,"IssuesEvent":18,"WatchEvent":60,"IssueCommentEvent":80,"PushEvent":48,"PullRequestReviewCommentEvent":10,"PullRequestReviewEvent":17,"CreateEvent":14}},"keywords":["ios","libyaml","linux","macos","swift","yaml"],"dependencies":[{"ecosystem":"rubygems","filepath":"Gemfile","sha":null,"kind":"manifest","created_at":"2022-07-21T21:47:29.780Z","updated_at":"2022-07-21T21:47:29.780Z","repository_link":"https://github.com/jpsim/Yams/blob/main/Gemfile","dependencies":[{"id":353656515,"package_name":"cocoapods","ecosystem":"rubygems","requirements":"\u003e= 0","direct":true,"kind":"runtime","optional":false},{"id":353656516,"package_name":"jazzy","ecosystem":"rubygems","requirements":"\u003e= 0","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"rubygems","filepath":"Gemfile.lock","sha":null,"kind":"lockfile","created_at":"2022-07-21T21:47:30.053Z","updated_at":"2022-07-21T21:47:30.053Z","repository_link":"https://github.com/jpsim/Yams/blob/main/Gemfile.lock","dependencies":[{"id":353658073,"package_name":"CFPropertyList","ecosystem":"rubygems","requirements":"3.0.5","direct":false,"kind":"runtime","optional":false},{"id":353658074,"package_name":"activesupport","ecosystem":"rubygems","requirements":"6.1.5","direct":false,"kind":"runtime","optional":false},{"id":353658075,"package_name":"addressable","ecosystem":"rubygems","requirements":"2.8.0","direct":false,"kind":"runtime","optional":false},{"id":353658076,"package_name":"algoliasearch","ecosystem":"rubygems","requirements":"1.27.5","direct":false,"kind":"runtime","optional":false},{"id":353658077,"package_name":"atomos","ecosystem":"rubygems","requirements":"0.1.3","direct":false,"kind":"runtime","optional":false},{"id":353658078,"package_name":"claide","ecosystem":"rubygems","requirements":"1.1.0","direct":false,"kind":"runtime","optional":false},{"id":353658079,"package_name":"cocoapods","ecosystem":"rubygems","requirements":"1.11.3","direct":false,"kind":"runtime","optional":false},{"id":353658080,"package_name":"cocoapods-core","ecosystem":"rubygems","requirements":"1.11.3","direct":false,"kind":"runtime","optional":false},{"id":353658081,"package_name":"cocoapods-deintegrate","ecosystem":"rubygems","requirements":"1.0.5","direct":false,"kind":"runtime","optional":false},{"id":353658082,"package_name":"cocoapods-downloader","ecosystem":"rubygems","requirements":"1.6.3","direct":false,"kind":"runtime","optional":false},{"id":353658083,"package_name":"cocoapods-plugins","ecosystem":"rubygems","requirements":"1.0.0","direct":false,"kind":"runtime","optional":false},{"id":353658084,"package_name":"cocoapods-search","ecosystem":"rubygems","requirements":"1.0.1","direct":false,"kind":"runtime","optional":false},{"id":353658085,"package_name":"cocoapods-trunk","ecosystem":"rubygems","requirements":"1.6.0","direct":false,"kind":"runtime","optional":false},{"id":353658086,"package_name":"cocoapods-try","ecosystem":"rubygems","requirements":"1.2.0","direct":false,"kind":"runtime","optional":false},{"id":353658087,"package_name":"colored2","ecosystem":"rubygems","requirements":"3.1.2","direct":false,"kind":"runtime","optional":false},{"id":353658088,"package_name":"concurrent-ruby","ecosystem":"rubygems","requirements":"1.1.10","direct":false,"kind":"runtime","optional":false},{"id":353658089,"package_name":"escape","ecosystem":"rubygems","requirements":"0.0.4","direct":false,"kind":"runtime","optional":false},{"id":353658090,"package_name":"ethon","ecosystem":"rubygems","requirements":"0.15.0","direct":false,"kind":"runtime","optional":false},{"id":353658091,"package_name":"ffi","ecosystem":"rubygems","requirements":"1.15.5","direct":false,"kind":"runtime","optional":false},{"id":353658092,"package_name":"fourflusher","ecosystem":"rubygems","requirements":"2.3.1","direct":false,"kind":"runtime","optional":false},{"id":353658093,"package_name":"fuzzy_match","ecosystem":"rubygems","requirements":"2.0.4","direct":false,"kind":"runtime","optional":false},{"id":353658094,"package_name":"gh_inspector","ecosystem":"rubygems","requirements":"1.1.3","direct":false,"kind":"runtime","optional":false},{"id":353658095,"package_name":"httpclient","ecosystem":"rubygems","requirements":"2.8.3","direct":false,"kind":"runtime","optional":false},{"id":353658096,"package_name":"i18n","ecosystem":"rubygems","requirements":"1.10.0","direct":false,"kind":"runtime","optional":false},{"id":353658097,"package_name":"jazzy","ecosystem":"rubygems","requirements":"0.14.2","direct":false,"kind":"runtime","optional":false},{"id":353658098,"package_name":"json","ecosystem":"rubygems","requirements":"2.6.1","direct":false,"kind":"runtime","optional":false},{"id":353658099,"package_name":"liferaft","ecosystem":"rubygems","requirements":"0.0.6","direct":false,"kind":"runtime","optional":false},{"id":353658100,"package_name":"minitest","ecosystem":"rubygems","requirements":"5.15.0","direct":false,"kind":"runtime","optional":false},{"id":353658101,"package_name":"molinillo","ecosystem":"rubygems","requirements":"0.8.0","direct":false,"kind":"runtime","optional":false},{"id":353658102,"package_name":"mustache","ecosystem":"rubygems","requirements":"1.1.1","direct":false,"kind":"runtime","optional":false},{"id":353658103,"package_name":"nanaimo","ecosystem":"rubygems","requirements":"0.3.0","direct":false,"kind":"runtime","optional":false},{"id":353658104,"package_name":"nap","ecosystem":"rubygems","requirements":"1.1.0","direct":false,"kind":"runtime","optional":false},{"id":353658105,"package_name":"netrc","ecosystem":"rubygems","requirements":"0.11.0","direct":false,"kind":"runtime","optional":false},{"id":353658106,"package_name":"open4","ecosystem":"rubygems","requirements":"1.3.4","direct":false,"kind":"runtime","optional":false},{"id":353658107,"package_name":"public_suffix","ecosystem":"rubygems","requirements":"4.0.6","direct":false,"kind":"runtime","optional":false},{"id":353658108,"package_name":"redcarpet","ecosystem":"rubygems","requirements":"3.5.1","direct":false,"kind":"runtime","optional":false},{"id":353658109,"package_name":"rexml","ecosystem":"rubygems","requirements":"3.2.5","direct":false,"kind":"runtime","optional":false},{"id":353658110,"package_name":"rouge","ecosystem":"rubygems","requirements":"3.28.0","direct":false,"kind":"runtime","optional":false},{"id":353658111,"package_name":"ruby-macho","ecosystem":"rubygems","requirements":"2.5.1","direct":false,"kind":"runtime","optional":false},{"id":353658114,"package_name":"sassc","ecosystem":"rubygems","requirements":"2.4.0","direct":false,"kind":"runtime","optional":false},{"id":353658116,"package_name":"sqlite3","ecosystem":"rubygems","requirements":"1.4.2","direct":false,"kind":"runtime","optional":false},{"id":353658117,"package_name":"typhoeus","ecosystem":"rubygems","requirements":"1.4.0","direct":false,"kind":"runtime","optional":false},{"id":353658118,"package_name":"tzinfo","ecosystem":"rubygems","requirements":"2.0.4","direct":false,"kind":"runtime","optional":false},{"id":353658119,"package_name":"xcinvoke","ecosystem":"rubygems","requirements":"0.3.0","direct":false,"kind":"runtime","optional":false},{"id":353658120,"package_name":"xcodeproj","ecosystem":"rubygems","requirements":"1.21.0","direct":false,"kind":"runtime","optional":false},{"id":353658121,"package_name":"zeitwerk","ecosystem":"rubygems","requirements":"2.5.4","direct":false,"kind":"runtime","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/bazel.yml","sha":null,"kind":"manifest","created_at":"2023-10-16T10:56:05.421Z","updated_at":"2023-10-16T10:56:05.421Z","repository_link":"https://github.com/jpsim/Yams/blob/main/.github/workflows/bazel.yml","dependencies":[{"id":14238361553,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":14238361630,"package_name":"bazelbuild/setup-bazelisk","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/cmake.yml","sha":null,"kind":"manifest","created_at":"2023-10-16T10:56:06.704Z","updated_at":"2023-10-16T10:56:06.704Z","repository_link":"https://github.com/jpsim/Yams/blob/main/.github/workflows/cmake.yml","dependencies":[{"id":14238361655,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/jazzy.yml","sha":null,"kind":"manifest","created_at":"2023-10-16T10:56:06.808Z","updated_at":"2023-10-16T10:56:06.808Z","repository_link":"https://github.com/jpsim/Yams/blob/main/.github/workflows/jazzy.yml","dependencies":[{"id":14238361706,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":14238361707,"package_name":"ruby/setup-ruby","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":14238361708,"package_name":"actions/upload-artifact","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/nightly.yml","sha":null,"kind":"manifest","created_at":"2023-10-16T10:56:06.998Z","updated_at":"2023-10-16T10:56:06.998Z","repository_link":"https://github.com/jpsim/Yams/blob/main/.github/workflows/nightly.yml","dependencies":[{"id":14238361719,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/pod_lib_lint.yml","sha":null,"kind":"manifest","created_at":"2023-10-16T10:56:07.087Z","updated_at":"2023-10-16T10:56:07.087Z","repository_link":"https://github.com/jpsim/Yams/blob/main/.github/workflows/pod_lib_lint.yml","dependencies":[{"id":14238361779,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/swiftlint.yml","sha":null,"kind":"manifest","created_at":"2023-10-16T10:56:07.125Z","updated_at":"2023-10-16T10:56:07.125Z","repository_link":"https://github.com/jpsim/Yams/blob/main/.github/workflows/swiftlint.yml","dependencies":[{"id":14238361785,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/swiftlint_analyze.yml","sha":null,"kind":"manifest","created_at":"2023-10-16T10:56:07.137Z","updated_at":"2023-10-16T10:56:07.137Z","repository_link":"https://github.com/jpsim/Yams/blob/main/.github/workflows/swiftlint_analyze.yml","dependencies":[{"id":14238361833,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/swiftpm.yml","sha":null,"kind":"manifest","created_at":"2023-10-16T10:56:07.498Z","updated_at":"2023-10-16T10:56:07.498Z","repository_link":"https://github.com/jpsim/Yams/blob/main/.github/workflows/swiftpm.yml","dependencies":[{"id":14238361851,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":14238361854,"package_name":"compnerd/gha-setup-swift","ecosystem":"actions","requirements":"main","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/xcodebuild.yml","sha":null,"kind":"manifest","created_at":"2023-10-16T10:56:07.924Z","updated_at":"2023-10-16T10:56:07.924Z","repository_link":"https://github.com/jpsim/Yams/blob/main/.github/workflows/xcodebuild.yml","dependencies":[{"id":14238362014,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"cocoapods","filepath":"Yams.podspec","sha":null,"kind":"manifest","created_at":"2023-10-16T10:56:08.310Z","updated_at":"2023-10-16T10:56:08.310Z","repository_link":"https://github.com/jpsim/Yams/blob/main/Yams.podspec","dependencies":[]},{"ecosystem":"swiftpm","filepath":"Package.swift","sha":null,"kind":"manifest","created_at":"2023-10-16T10:56:08.366Z","updated_at":"2023-10-16T10:56:08.366Z","repository_link":"https://github.com/jpsim/Yams/blob/main/Package.swift","dependencies":[]}],"score":17.530524755030243,"created_at":"2025-05-07T15:43:48.378Z","updated_at":"2026-06-21T15:01:29.271Z","avatar_url":"https://github.com/jpsim.png","language":"Swift","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/360426","html_url":"https://summary.ecosyste.ms/projects/360426"}