{"id":362625,"url":"https://github.com/cncf/xds","last_synced_at":"2026-06-21T02:31:06.694Z","repository":{"id":37807785,"uuid":"314298379","full_name":"cncf/xds","owner":"cncf","description":"xDS API Working Group","archived":false,"fork":false,"pushed_at":"2026-03-09T18:28:24.000Z","size":606,"stargazers_count":266,"open_issues_count":31,"forks_count":83,"subscribers_count":19,"default_branch":"main","last_synced_at":"2026-06-05T17:32:33.837Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Starlark","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cncf.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-11-19T16:01:59.000Z","updated_at":"2026-06-04T06:53:51.000Z","dependencies_parsed_at":"2024-01-13T17:47:55.868Z","dependency_job_id":"f454f473-9238-4a6b-826a-514d0ca90d24","html_url":"https://github.com/cncf/xds","commit_stats":{"total_commits":51,"total_committers":20,"mean_commits":2.55,"dds":0.8431372549019608,"last_synced_commit":"b4127c9b8d78b77423fd25169f05b7476b6ea932"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/cncf/xds","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cncf","download_url":"https://codeload.github.com/cncf/xds/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/sbom","scorecard":{"id":294580,"data":{"date":"2025-08-11","repo":{"name":"github.com/cncf/xds","commit":"2ac532fd44436293585084f8d94c6bdb17835af0"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: python/dist/xds-0.1.0-py3-none-any.whl:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:09:04.113Z","repository_id":37807785,"created_at":"2025-08-17T19:09:04.113Z","updated_at":"2025-08-17T19:09:04.113Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":34080026,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-08T02:00:07.615Z","response_time":111,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"cncf","name":"Cloud Native Computing Foundation (CNCF)","uuid":"13455738","kind":"organization","description":"Sustaining and integrating open source technologies to orchestrate containers as part of a microservices architecture","email":"info@cncf.io","website":"https://www.cncf.io","location":"San Francisco, CA","twitter":"CloudNativeFdn","company":null,"icon_url":"https://avatars.githubusercontent.com/u/13455738?v=4","repositories_count":163,"last_synced_at":"2026-05-16T15:59:05.555Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/cncf","funding_links":[],"total_stars":39976,"followers":7274,"following":0,"created_at":"2022-11-05T20:17:10.088Z","updated_at":"2026-05-16T15:59:05.555Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cncf","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cncf/repositories"},"packages":[{"id":12707221,"name":"xds","ecosystem":"bazel","description":null,"homepage":"https://github.com/cncf/xds","licenses":"apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/cncf/xds","keywords_array":[],"namespace":null,"versions_count":2,"first_release_published_at":"2026-01-23T14:08:40.685Z","latest_release_published_at":"2026-01-23T14:08:40.685Z","latest_release_number":"0.0.0-20251210-ee656c7","last_synced_at":"2026-06-08T21:00:58.430Z","created_at":"2026-01-23T14:08:40.280Z","updated_at":"2026-06-08T21:00:58.430Z","registry_url":"https://registry.bazel.build/modules/xds","install_command":"bazel_dep(name = \"xds\")","documentation_url":"https://registry.bazel.build/docs/xds","metadata":{"maintainers":[{"email":"bcr-maintainers@bazel.build","name":"No Maintainer Specified"}],"yanked_versions":{},"deprecated":null,"repository":["github:cncf/xds"]},"repo_metadata":{"id":37807785,"uuid":"314298379","full_name":"cncf/xds","owner":"cncf","description":"xDS API Working Group","archived":false,"fork":false,"pushed_at":"2026-02-02T19:58:03.000Z","size":592,"stargazers_count":260,"open_issues_count":28,"forks_count":81,"subscribers_count":20,"default_branch":"main","last_synced_at":"2026-03-05T01:56:57.999Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Starlark","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cncf.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-11-19T16:01:59.000Z","updated_at":"2026-03-02T01:56:22.000Z","dependencies_parsed_at":"2024-01-13T17:47:55.868Z","dependency_job_id":"f454f473-9238-4a6b-826a-514d0ca90d24","html_url":"https://github.com/cncf/xds","commit_stats":{"total_commits":51,"total_committers":20,"mean_commits":2.55,"dds":0.8431372549019608,"last_synced_commit":"b4127c9b8d78b77423fd25169f05b7476b6ea932"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/cncf/xds","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cncf","download_url":"https://codeload.github.com/cncf/xds/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/sbom","scorecard":{"id":294580,"data":{"date":"2025-08-11","repo":{"name":"github.com/cncf/xds","commit":"2ac532fd44436293585084f8d94c6bdb17835af0"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: python/dist/xds-0.1.0-py3-none-any.whl:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:09:04.113Z","repository_id":37807785,"created_at":"2025-08-17T19:09:04.113Z","updated_at":"2025-08-17T19:09:04.113Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30454971,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-12T21:31:01.033Z","status":"online","status_checked_at":"2026-03-13T02:00:07.565Z","response_time":60,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-13T13:00:09.389Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:bazel/xds","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/bazel/xds","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/bazel/xds","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/bazel/xds/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-11T01:00:43.803Z","issues_count":30,"pull_requests_count":133,"avg_time_to_close_issue":11884870.75,"avg_time_to_close_pull_request":3442368.1681415928,"issues_closed_count":12,"pull_requests_closed_count":113,"pull_request_authors_count":34,"issue_authors_count":24,"avg_comments_per_issue":2.3666666666666667,"avg_comments_per_pull_request":1.8270676691729324,"merged_pull_requests_count":69,"bot_issues_count":0,"bot_pull_requests_count":1,"past_year_issues_count":4,"past_year_pull_requests_count":23,"past_year_avg_time_to_close_issue":2746266.0,"past_year_avg_time_to_close_pull_request":1492838.857142857,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":14,"past_year_pull_request_authors_count":9,"past_year_issue_authors_count":4,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":1.2608695652173914,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":9,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/issues","maintainers":[{"login":"phlax","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/phlax"}],"active_maintainers":[{"login":"phlax","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/phlax"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/registry.bazel.build/packages/xds/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/registry.bazel.build/packages/xds/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/registry.bazel.build/packages/xds/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/registry.bazel.build/packages/xds/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/registry.bazel.build/packages/xds/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/registry.bazel.build/packages/xds/codemeta","maintainers":[],"registry":{"name":"registry.bazel.build","url":"https://registry.bazel.build","ecosystem":"bazel","default":true,"packages_count":1154,"maintainers_count":433,"namespaces_count":0,"keywords_count":174,"github":"bazelbuild","metadata":{"funded_packages_count":15},"icon_url":"https://github.com/bazelbuild.png","created_at":"2026-01-23T13:05:25.896Z","updated_at":"2026-06-10T05:13:28.605Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/registry.bazel.build/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/registry.bazel.build/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/registry.bazel.build/namespaces"}},{"id":13964057,"name":"go-github-com-cncf-xds-go","ecosystem":"guix","description":"Universal data-plane API using the xDS protocol in Golang","homepage":"https://github.com/cncf/xds","licenses":"asl2.0","normalized_licenses":["CERN-OHL-P-2.0"],"repository_url":"https://github.com/cncf/xds","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-03-02T23:03:15.469Z","latest_release_published_at":"2026-03-02T23:03:15.469Z","latest_release_number":"0.0.0-20250501225837-2ac532fd4443","last_synced_at":"2026-04-02T23:16:08.512Z","created_at":"2026-03-02T23:03:15.189Z","updated_at":"2026-04-02T23:18:10.823Z","registry_url":"https://packages.guix.gnu.org/packages/go-github-com-cncf-xds-go/0.0.0-20250501225837-2ac532fd4443/","install_command":"guix install go-github-com-cncf-xds-go","documentation_url":"https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/golang-web.scm#n3703","metadata":{"location":"gnu/packages/golang-web.scm:3703","variable_name":"go-github-com-cncf-xds-go"},"repo_metadata":{"id":37807785,"uuid":"314298379","full_name":"cncf/xds","owner":"cncf","description":"xDS API Working Group","archived":false,"fork":false,"pushed_at":"2026-02-02T19:58:03.000Z","size":592,"stargazers_count":260,"open_issues_count":28,"forks_count":81,"subscribers_count":20,"default_branch":"main","last_synced_at":"2026-03-05T01:56:57.999Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Starlark","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cncf.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-11-19T16:01:59.000Z","updated_at":"2026-03-02T01:56:22.000Z","dependencies_parsed_at":"2024-01-13T17:47:55.868Z","dependency_job_id":"f454f473-9238-4a6b-826a-514d0ca90d24","html_url":"https://github.com/cncf/xds","commit_stats":{"total_commits":51,"total_committers":20,"mean_commits":2.55,"dds":0.8431372549019608,"last_synced_commit":"b4127c9b8d78b77423fd25169f05b7476b6ea932"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/cncf/xds","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cncf","download_url":"https://codeload.github.com/cncf/xds/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/sbom","scorecard":{"id":294580,"data":{"date":"2025-08-11","repo":{"name":"github.com/cncf/xds","commit":"2ac532fd44436293585084f8d94c6bdb17835af0"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: python/dist/xds-0.1.0-py3-none-any.whl:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:09:04.113Z","repository_id":37807785,"created_at":"2025-08-17T19:09:04.113Z","updated_at":"2025-08-17T19:09:04.113Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30454971,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-12T21:31:01.033Z","status":"online","status_checked_at":"2026-03-13T02:00:07.565Z","response_time":60,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"cncf","name":"Cloud Native Computing Foundation (CNCF)","uuid":"13455738","kind":"organization","description":"Sustaining and integrating open source technologies to orchestrate containers as part of a microservices architecture","email":"info@cncf.io","website":"https://www.cncf.io","location":"San Francisco, CA","twitter":"CloudNativeFdn","company":null,"icon_url":"https://avatars.githubusercontent.com/u/13455738?v=4","repositories_count":132,"last_synced_at":"2023-08-02T12:40:49.567Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/cncf","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-05T20:17:10.088Z","updated_at":"2023-08-02T12:40:49.953Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cncf","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cncf/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-04-02T23:18:10.795Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:guix/go-github-com-cncf-xds-go","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/guix/go-github-com-cncf-xds-go","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/guix/go-github-com-cncf-xds-go","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/guix/go-github-com-cncf-xds-go/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-11T01:00:43.803Z","issues_count":30,"pull_requests_count":133,"avg_time_to_close_issue":11884870.75,"avg_time_to_close_pull_request":3442368.1681415928,"issues_closed_count":12,"pull_requests_closed_count":113,"pull_request_authors_count":34,"issue_authors_count":24,"avg_comments_per_issue":2.3666666666666667,"avg_comments_per_pull_request":1.8270676691729324,"merged_pull_requests_count":69,"bot_issues_count":0,"bot_pull_requests_count":1,"past_year_issues_count":4,"past_year_pull_requests_count":23,"past_year_avg_time_to_close_issue":2746266.0,"past_year_avg_time_to_close_pull_request":1492838.857142857,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":14,"past_year_pull_request_authors_count":9,"past_year_issue_authors_count":4,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":1.2608695652173914,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":9,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/issues","maintainers":[{"login":"phlax","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/phlax"}],"active_maintainers":[{"login":"phlax","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/phlax"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-cncf-xds-go/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-cncf-xds-go/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-cncf-xds-go/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-cncf-xds-go/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-cncf-xds-go/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-cncf-xds-go/codemeta","maintainers":[],"registry":{"name":"guix","url":"https://guix.gnu.org","ecosystem":"guix","default":true,"packages_count":31649,"maintainers_count":0,"namespaces_count":0,"keywords_count":1627,"github":"guix-mirror","metadata":{"funded_packages_count":368},"icon_url":"https://github.com/guix-mirror.png","created_at":"2026-03-02T16:23:46.981Z","updated_at":"2026-06-10T05:17:25.224Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/guix/namespaces"}},{"id":3888027,"name":"github.com/cncf/xds/go","ecosystem":"go","description":"","homepage":"https://github.com/cncf/xds","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/cncf/xds","keywords_array":[],"namespace":"github.com/cncf/xds","versions_count":31,"first_release_published_at":"2021-03-12T22:13:58.000Z","latest_release_published_at":"2026-02-02T19:58:03.000Z","latest_release_number":"v0.0.0-20260202195803-dba9d589def2","last_synced_at":"2026-06-10T05:33:09.246Z","created_at":"2022-04-11T23:32:16.175Z","updated_at":"2026-06-10T05:33:09.247Z","registry_url":"https://pkg.go.dev/github.com/cncf/xds/go","install_command":"go get github.com/cncf/xds/go","documentation_url":"https://pkg.go.dev/github.com/cncf/xds/go#section-documentation","metadata":{},"repo_metadata":{"id":37807785,"uuid":"314298379","full_name":"cncf/xds","owner":"cncf","description":"xDS API Working Group","archived":false,"fork":false,"pushed_at":"2026-02-02T19:58:03.000Z","size":592,"stargazers_count":260,"open_issues_count":28,"forks_count":81,"subscribers_count":20,"default_branch":"main","last_synced_at":"2026-03-05T01:56:57.999Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Starlark","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cncf.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-11-19T16:01:59.000Z","updated_at":"2026-03-02T01:56:22.000Z","dependencies_parsed_at":"2024-01-13T17:47:55.868Z","dependency_job_id":"f454f473-9238-4a6b-826a-514d0ca90d24","html_url":"https://github.com/cncf/xds","commit_stats":{"total_commits":51,"total_committers":20,"mean_commits":2.55,"dds":0.8431372549019608,"last_synced_commit":"b4127c9b8d78b77423fd25169f05b7476b6ea932"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/cncf/xds","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cncf","download_url":"https://codeload.github.com/cncf/xds/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/sbom","scorecard":{"id":294580,"data":{"date":"2025-08-11","repo":{"name":"github.com/cncf/xds","commit":"2ac532fd44436293585084f8d94c6bdb17835af0"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: python/dist/xds-0.1.0-py3-none-any.whl:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:09:04.113Z","repository_id":37807785,"created_at":"2025-08-17T19:09:04.113Z","updated_at":"2025-08-17T19:09:04.113Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30454971,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-12T21:31:01.033Z","status":"online","status_checked_at":"2026-03-13T02:00:07.565Z","response_time":60,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"cncf","name":"Cloud Native Computing Foundation (CNCF)","uuid":"13455738","kind":"organization","description":"Sustaining and integrating open source technologies to orchestrate containers as part of a microservices architecture","email":"info@cncf.io","website":"https://www.cncf.io","location":"San Francisco, CA","twitter":"CloudNativeFdn","company":null,"icon_url":"https://avatars.githubusercontent.com/u/13455738?v=4","repositories_count":132,"last_synced_at":"2023-08-02T12:40:49.567Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/cncf","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-05T20:17:10.088Z","updated_at":"2023-08-02T12:40:49.953Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cncf","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cncf/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-03-13T13:00:12.484Z","dependent_packages_count":2833,"downloads":null,"downloads_period":null,"dependent_repos_count":53305,"rankings":{"downloads":null,"dependent_repos_count":0.022720034194170183,"dependent_packages_count":0.07946824745540804,"stargazers_count":3.956977026345972,"forks_count":3.2090940577939735,"docker_downloads_count":0.04792993514934532,"average":1.4632378601877738},"purl":"pkg:golang/github.com/cncf/xds/go","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/cncf/xds/go","docker_dependents_count":1392,"docker_downloads_count":6118845911,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/cncf/xds/go","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/cncf/xds/go/dependencies","status":null,"funding_links":[],"critical":true,"issue_metadata":{"last_synced_at":"2026-03-11T01:00:43.803Z","issues_count":30,"pull_requests_count":133,"avg_time_to_close_issue":11884870.75,"avg_time_to_close_pull_request":3442368.1681415928,"issues_closed_count":12,"pull_requests_closed_count":113,"pull_request_authors_count":34,"issue_authors_count":24,"avg_comments_per_issue":2.3666666666666667,"avg_comments_per_pull_request":1.8270676691729324,"merged_pull_requests_count":69,"bot_issues_count":0,"bot_pull_requests_count":1,"past_year_issues_count":4,"past_year_pull_requests_count":23,"past_year_avg_time_to_close_issue":2746266.0,"past_year_avg_time_to_close_pull_request":1492838.857142857,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":14,"past_year_pull_request_authors_count":9,"past_year_issue_authors_count":4,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":1.2608695652173914,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":9,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/issues","maintainers":[{"login":"phlax","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/phlax"}],"active_maintainers":[{"login":"phlax","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/phlax"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcncf%2Fxds%2Fgo/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcncf%2Fxds%2Fgo/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcncf%2Fxds%2Fgo/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcncf%2Fxds%2Fgo/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcncf%2Fxds%2Fgo/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcncf%2Fxds%2Fgo/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2166600,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}}],"commits":{"id":1256436,"full_name":"cncf/xds","default_branch":"main","total_commits":63,"total_committers":23,"total_bot_commits":0,"total_bot_committers":0,"mean_commits":2.739130434782609,"dds":0.8253968253968254,"past_year_total_commits":7,"past_year_total_committers":3,"past_year_total_bot_commits":0,"past_year_total_bot_committers":0,"past_year_mean_commits":2.3333333333333335,"past_year_dds":0.2857142857142857,"last_synced_at":"2026-06-08T21:01:36.661Z","last_synced_commit":"dba9d589def2cd10099a3a64887d859188c2f57a","created_at":"2023-04-19T16:47:58.086Z","updated_at":"2026-06-08T21:01:09.454Z","committers":[{"name":"Matthieu MOREL","email":"matthieu.morel35@gmail.com","login":"mmorel-35","count":11},{"name":"Sergii Tkachenko","email":"sergiitk@google.com","login":"sergiitk","count":10},{"name":"Kuat","email":"kyessenov","login":"kyessenov","count":6},{"name":"Keith Smiley","email":"keithbsmiley@gmail.com","login":"keith","count":4},{"name":"Mark D. Roth","email":"roth@google.com","login":"markdroth","count":4},{"name":"Yousuk Seung","email":"ysseung@google.com","login":"yousukseung","count":4},{"name":"Tianyu","email":"72890320+tyxia","login":"tyxia","count":3},{"name":"phlax","email":"phlax","login":"phlax","count":3},{"name":"htuch","email":"htuch","login":"htuch","count":3},{"name":"Snow Pettersen","email":"aickck@gmail.com","login":"snowp","count":2},{"name":"Anirudh Ramachandra","email":"anramach@google.com","login":"anicr7","count":1},{"name":"Chris Aniszczyk","email":"caniszczyk@gmail.com","login":"caniszczyk","count":1},{"name":"Florent Lecoultre","email":"104759954+fl0Lec","login":"fl0Lec","count":1},{"name":"Greg Greenway","email":"ggreenway@apple.com","login":"ggreenway","count":1},{"name":"John Howard","email":"howardjohn@google.com","login":"howardjohn","count":1},{"name":"Kunjan","email":"kunjanp@google.com","login":"coolkp","count":1},{"name":"Matt Klein","email":"mattklein123@gmail.com","login":"mattklein123","count":1},{"name":"Misha Efimov","email":"mef@google.com","login":"efimki","count":1},{"name":"Rohit Agrawal","email":"rohit.agrawal@databricks.com","login":"agrawroh","count":1},{"name":"alyssawilk","email":"alyssar@google.com","login":"alyssawilk","count":1},{"name":"bsurber","email":"73970703+bsurber","login":"bsurber","count":1},{"name":"code","email":"wbphub@gmail.com","login":"wbpcode","count":1},{"name":"yanavlasov","email":"yavlasov@google.com","login":"yanavlasov","count":1}],"past_year_committers":[{"name":"Matthieu MOREL","email":"matthieu.morel35@gmail.com","login":"mmorel-35","count":5},{"name":"Yousuk Seung","email":"ysseung@google.com","login":"yousukseung","count":1},{"name":"Florent Lecoultre","email":"104759954+fl0Lec","login":"fl0Lec","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-06-10T00:00:07.748Z","repositories_count":6255108,"commits_count":884278549,"contributors_count":35063055,"owners_count":1164139,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"cncf/xds","html_url":"https://github.com/cncf/xds","last_synced_at":"2026-05-19T11:00:23.139Z","status":"active","issues_count":30,"pull_requests_count":135,"avg_time_to_close_issue":11884870.75,"avg_time_to_close_pull_request":3412185.8157894737,"issues_closed_count":12,"pull_requests_closed_count":114,"pull_request_authors_count":34,"issue_authors_count":24,"avg_comments_per_issue":2.3666666666666667,"avg_comments_per_pull_request":1.8074074074074074,"merged_pull_requests_count":69,"bot_issues_count":0,"bot_pull_requests_count":1,"past_year_issues_count":4,"past_year_pull_requests_count":21,"past_year_avg_time_to_close_issue":2746266.0,"past_year_avg_time_to_close_pull_request":1109716.3636363635,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":11,"past_year_pull_request_authors_count":8,"past_year_issue_authors_count":4,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.9523809523809523,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":5,"created_at":"2023-05-09T11:07:07.162Z","updated_at":"2026-05-19T11:00:23.139Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/issues","issue_labels_count":{"table":{}},"pull_request_labels_count":{"table":{}},"issue_author_associations_count":{"table":{"NONE":20,"MEMBER":5,"CONTRIBUTOR":5}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":86,"NONE":43,"MEMBER":6}},"issue_authors":{"table":{"phlax":5,"PapaCharlie":2,"kyessenov":2,"jferrl":1,"tyxeron":1,"fl0Lec":1,"Rick-xuy":1,"easwars":1,"sergiitk":1,"robberphex":1,"dfawley":1,"markdroth":1,"hobbytp":1,"meteorcloudy":1,"howardjohn":1,"adalrsjr1":1,"ejona86":1,"dws":1,"sfc-gh-ptabor":1,"oxy-star":1,"StupidScience":1,"zhangbc97":1,"veblush":1,"sfc-gh-randerson":1}},"pull_request_authors":{"table":{"mmorel-35":37,"sergiitk":16,"kyessenov":8,"wbpcode":7,"phlax":6,"keith":5,"tyxia":5,"anicr7":4,"markdroth":4,"efimki":4,"silverstar194":3,"coolkp":3,"zhxie":3,"agrawroh":2,"htuch":2,"AndresGuedez":2,"snowp":2,"adisuissa":2,"ggreenway":2,"zirain":2,"bsurber":2,"yousukseung":2,"pugmajere":1,"renuka-fernando":1,"fl0Lec":1,"HackToHell":1,"rootvector2":1,"mattklein123":1,"alyssawilk":1,"howardjohn":1,"yanavlasov":1,"110y":1,"sanjay20m":1,"kusari-inspector[bot]":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-06-10T00:00:24.323Z","repositories_count":14788102,"issues_count":33450452,"pull_requests_count":110021122,"authors_count":11299023,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{}},"past_year_pull_request_labels_count":{"table":{}},"past_year_issue_author_associations_count":{"table":{"NONE":2,"CONTRIBUTOR":1,"MEMBER":1}},"past_year_pull_request_author_associations_count":{"table":{"CONTRIBUTOR":17,"NONE":3,"MEMBER":1}},"past_year_issue_authors":{"table":{"dws":1,"fl0Lec":1,"oxy-star":1,"phlax":1}},"past_year_pull_request_authors":{"table":{"mmorel-35":13,"efimki":2,"fl0Lec":1,"kusari-inspector[bot]":1,"phlax":1,"rootvector2":1,"sanjay20m":1,"yousukseung":1}},"maintainers":[{"table":{"login":"phlax","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/phlax"}}],"active_maintainers":[{"table":{"login":"phlax","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/phlax"}}]}},"events":{"total":{"PullRequestEvent":24,"ForkEvent":11,"IssuesEvent":4,"WatchEvent":37,"IssueCommentEvent":30,"PushEvent":8,"PullRequestReviewCommentEvent":127,"PullRequestReviewEvent":110},"last_year":{"PullRequestEvent":5,"ForkEvent":3,"IssuesEvent":2,"WatchEvent":10,"IssueCommentEvent":11,"PushEvent":3,"PullRequestReviewCommentEvent":6,"PullRequestReviewEvent":10}},"keywords":[],"dependencies":[{"ecosystem":"go","filepath":"go/go.mod","sha":null,"kind":"manifest","created_at":"2022-07-12T16:53:44.079Z","updated_at":"2022-07-12T16:53:44.079Z","repository_link":"https://github.com/cncf/xds/blob/main/go/go.mod","dependencies":[{"id":176594818,"package_name":"github.com/envoyproxy/protoc-gen-validate","ecosystem":"go","requirements":"v0.1.0","direct":true,"kind":"runtime","optional":false},{"id":176594819,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.3.2","direct":true,"kind":"runtime","optional":false},{"id":176594820,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.25.1","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"go","filepath":"go/go.sum","sha":null,"kind":"lockfile","created_at":"2024-01-13T17:47:55.762Z","updated_at":"2024-01-13T17:47:55.762Z","repository_link":"https://github.com/cncf/xds/blob/main/go/go.sum","dependencies":[{"id":15590899011,"package_name":"github.com/envoyproxy/protoc-gen-validate","ecosystem":"go","requirements":"v1.0.2","direct":false,"kind":"runtime","optional":false},{"id":15590899012,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.5.0","direct":false,"kind":"runtime","optional":false},{"id":15590899013,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.5.3","direct":false,"kind":"runtime","optional":false},{"id":15590899014,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.5","direct":false,"kind":"runtime","optional":false},{"id":15590899015,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.9","direct":false,"kind":"runtime","optional":false},{"id":15590899016,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.14.0","direct":false,"kind":"runtime","optional":false},{"id":15590899017,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.11.0","direct":false,"kind":"runtime","optional":false},{"id":15590899018,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.12.0","direct":false,"kind":"runtime","optional":false},{"id":15590899019,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20191204190536-9bdfabe68543","direct":false,"kind":"runtime","optional":false},{"id":15590899020,"package_name":"google.golang.org/genproto/googleapis/api","ecosystem":"go","requirements":"v0.0.0-20230822172742-b8732ec3820d","direct":false,"kind":"runtime","optional":false},{"id":15590899021,"package_name":"google.golang.org/genproto/googleapis/rpc","ecosystem":"go","requirements":"v0.0.0-20230822172742-b8732ec3820d","direct":false,"kind":"runtime","optional":false},{"id":15590899022,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.59.0","direct":false,"kind":"runtime","optional":false},{"id":15590899023,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.26.0-rc.1","direct":false,"kind":"runtime","optional":false},{"id":15590899024,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.26.0","direct":false,"kind":"runtime","optional":false},{"id":15590899025,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.31.0","direct":false,"kind":"runtime","optional":false}]}],"score":31.363875095841315,"created_at":"2025-08-07T15:52:08.942Z","updated_at":"2026-06-21T02:31:06.694Z","avatar_url":"https://github.com/cncf.png","language":"Starlark","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/362625","html_url":"https://summary.ecosyste.ms/projects/362625"}