{"id":362625,"url":"https://github.com/cncf/xds","last_synced_at":"2026-08-23T11:31:31.725Z","repository":{"id":37807785,"uuid":"314298379","full_name":"cncf/xds","owner":"cncf","description":"xDS API Working Group","archived":false,"fork":false,"pushed_at":"2026-03-09T18:28:24.000Z","size":606,"stargazers_count":270,"open_issues_count":31,"forks_count":84,"subscribers_count":19,"default_branch":"main","last_synced_at":"2026-08-20T10:11:18.479Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Starlark","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cncf.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-11-19T16:01:59.000Z","updated_at":"2026-08-19T18:05:38.000Z","dependencies_parsed_at":"2024-01-13T17:47:55.868Z","dependency_job_id":"fd84d159-02ca-4b93-9e9b-c2dbf311e443","html_url":"https://github.com/cncf/xds","commit_stats":{"total_commits":51,"total_committers":20,"mean_commits":2.55,"dds":0.8431372549019608,"last_synced_commit":"b4127c9b8d78b77423fd25169f05b7476b6ea932"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/cncf/xds","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cncf","download_url":"https://codeload.github.com/cncf/xds/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/sbom","scorecard":{"id":294580,"data":{"date":"2025-08-11","repo":{"name":"github.com/cncf/xds","commit":"2ac532fd44436293585084f8d94c6bdb17835af0"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: python/dist/xds-0.1.0-py3-none-any.whl:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:09:04.113Z","repository_id":37807785,"created_at":"2025-08-17T19:09:04.113Z","updated_at":"2025-08-17T19:09:04.113Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36790938,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-20T02:00:06.210Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"cncf","name":"Cloud Native Computing Foundation (CNCF)","uuid":"13455738","kind":"organization","description":"Sustaining and integrating open source technologies to orchestrate containers as part of a microservices architecture","email":"info@cncf.io","website":"https://www.cncf.io","location":"San Francisco, CA","twitter":"CloudNativeFdn","company":null,"icon_url":"https://avatars.githubusercontent.com/u/13455738?v=4","repositories_count":169,"last_synced_at":"2026-08-22T05:37:22.005Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/cncf","funding_links":[],"total_stars":40780,"followers":7736,"following":0,"created_at":"2022-11-05T20:17:10.088Z","updated_at":"2026-08-22T05:37:22.015Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cncf","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cncf/repositories"},"packages":[{"id":13964057,"name":"go-github-com-cncf-xds-go","ecosystem":"guix","description":"Universal data-plane API using the xDS protocol in Golang","homepage":"https://github.com/cncf/xds","licenses":"asl2.0","normalized_licenses":["CERN-OHL-P-2.0"],"repository_url":"https://github.com/cncf/xds","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-03-02T23:03:15.469Z","latest_release_published_at":"2026-03-02T23:03:15.469Z","latest_release_number":"0.0.0-20250501225837-2ac532fd4443","last_synced_at":"2026-04-02T23:16:08.512Z","created_at":"2026-03-02T23:03:15.189Z","updated_at":"2026-08-20T11:03:16.001Z","registry_url":"https://packages.guix.gnu.org/packages/go-github-com-cncf-xds-go/0.0.0-20250501225837-2ac532fd4443/","install_command":"guix install go-github-com-cncf-xds-go","documentation_url":"https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/golang-web.scm#n3703","metadata":{"location":"gnu/packages/golang-web.scm:3703","variable_name":"go-github-com-cncf-xds-go"},"repo_metadata":{"id":37807785,"uuid":"314298379","full_name":"cncf/xds","owner":"cncf","description":"xDS API Working Group","archived":false,"fork":false,"pushed_at":"2026-03-09T18:28:24.000Z","size":606,"stargazers_count":270,"open_issues_count":31,"forks_count":84,"subscribers_count":19,"default_branch":"main","last_synced_at":"2026-08-20T10:11:18.479Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Starlark","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cncf.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-11-19T16:01:59.000Z","updated_at":"2026-08-19T18:05:38.000Z","dependencies_parsed_at":"2024-01-13T17:47:55.868Z","dependency_job_id":"fd84d159-02ca-4b93-9e9b-c2dbf311e443","html_url":"https://github.com/cncf/xds","commit_stats":{"total_commits":51,"total_committers":20,"mean_commits":2.55,"dds":0.8431372549019608,"last_synced_commit":"b4127c9b8d78b77423fd25169f05b7476b6ea932"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/cncf/xds","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cncf","download_url":"https://codeload.github.com/cncf/xds/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/sbom","scorecard":{"id":294580,"data":{"date":"2025-08-11","repo":{"name":"github.com/cncf/xds","commit":"2ac532fd44436293585084f8d94c6bdb17835af0"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: python/dist/xds-0.1.0-py3-none-any.whl:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:09:04.113Z","repository_id":37807785,"created_at":"2025-08-17T19:09:04.113Z","updated_at":"2025-08-17T19:09:04.113Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36790938,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-20T02:00:06.210Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"cncf","name":"Cloud Native Computing Foundation (CNCF)","uuid":"13455738","kind":"organization","description":"Sustaining and integrating open source technologies to orchestrate containers as part of a microservices architecture","email":"info@cncf.io","website":"https://www.cncf.io","location":"San Francisco, CA","twitter":"CloudNativeFdn","company":null,"icon_url":"https://avatars.githubusercontent.com/u/13455738?v=4","repositories_count":169,"last_synced_at":"2026-08-14T19:17:10.741Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/cncf","funding_links":[],"total_stars":40729,"followers":7702,"following":0,"created_at":"2022-11-05T20:17:10.088Z","updated_at":"2026-08-14T19:17:10.761Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cncf","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cncf/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-20T11:03:16.001Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:guix/go-github-com-cncf-xds-go","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/guix/go-github-com-cncf-xds-go","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/guix/go-github-com-cncf-xds-go","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/guix/go-github-com-cncf-xds-go/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-20T10:02:03.926Z","issues_count":30,"pull_requests_count":137,"avg_time_to_close_issue":12696820.57142857,"avg_time_to_close_pull_request":3522798.627118644,"issues_closed_count":14,"pull_requests_closed_count":118,"pull_request_authors_count":36,"issue_authors_count":24,"avg_comments_per_issue":3.466666666666667,"avg_comments_per_pull_request":1.7956204379562044,"merged_pull_requests_count":71,"bot_issues_count":0,"bot_pull_requests_count":1,"past_year_issues_count":3,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1447560.5,"past_year_avg_time_to_close_pull_request":1017475.9230769231,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":13,"past_year_pull_request_authors_count":9,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.9090909090909091,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":7,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/issues","maintainers":[{"login":"phlax","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/phlax"},{"login":"dfawley","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dfawley"}],"active_maintainers":[{"login":"phlax","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/phlax"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-cncf-xds-go/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-cncf-xds-go/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-cncf-xds-go/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-cncf-xds-go/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-cncf-xds-go/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-cncf-xds-go/codemeta","maintainers":[],"registry":{"name":"guix","url":"https://guix.gnu.org","ecosystem":"guix","default":true,"packages_count":32314,"maintainers_count":0,"namespaces_count":0,"keywords_count":1654,"github":"guix-mirror","metadata":{"funded_packages_count":1213},"icon_url":"https://github.com/guix-mirror.png","created_at":"2026-03-02T16:23:46.981Z","updated_at":"2026-08-23T05:05:01.027Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/guix/namespaces"}},{"id":12707221,"name":"xds","ecosystem":"bazel","description":null,"homepage":"https://github.com/cncf/xds","licenses":"apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/cncf/xds","keywords_array":[],"namespace":null,"versions_count":2,"first_release_published_at":"2026-01-23T14:08:40.685Z","latest_release_published_at":"2026-01-23T14:08:40.685Z","latest_release_number":"0.0.0-20251210-ee656c7","last_synced_at":"2026-08-22T11:04:29.478Z","created_at":"2026-01-23T14:08:40.280Z","updated_at":"2026-08-22T11:04:29.478Z","registry_url":"https://registry.bazel.build/modules/xds","install_command":"bazel_dep(name = \"xds\")","documentation_url":"https://registry.bazel.build/docs/xds","metadata":{"maintainers":[{"email":"bcr-maintainers@bazel.build","name":"No Maintainer Specified"}],"yanked_versions":{},"deprecated":null,"repository":["github:cncf/xds"]},"repo_metadata":{"id":37807785,"uuid":"314298379","full_name":"cncf/xds","owner":"cncf","description":"xDS API Working Group","archived":false,"fork":false,"pushed_at":"2026-03-09T18:28:24.000Z","size":606,"stargazers_count":270,"open_issues_count":31,"forks_count":84,"subscribers_count":19,"default_branch":"main","last_synced_at":"2026-08-20T10:11:18.479Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Starlark","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cncf.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-11-19T16:01:59.000Z","updated_at":"2026-08-19T18:05:38.000Z","dependencies_parsed_at":"2024-01-13T17:47:55.868Z","dependency_job_id":"fd84d159-02ca-4b93-9e9b-c2dbf311e443","html_url":"https://github.com/cncf/xds","commit_stats":{"total_commits":51,"total_committers":20,"mean_commits":2.55,"dds":0.8431372549019608,"last_synced_commit":"b4127c9b8d78b77423fd25169f05b7476b6ea932"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/cncf/xds","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cncf","download_url":"https://codeload.github.com/cncf/xds/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/sbom","scorecard":{"id":294580,"data":{"date":"2025-08-11","repo":{"name":"github.com/cncf/xds","commit":"2ac532fd44436293585084f8d94c6bdb17835af0"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: python/dist/xds-0.1.0-py3-none-any.whl:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:09:04.113Z","repository_id":37807785,"created_at":"2025-08-17T19:09:04.113Z","updated_at":"2025-08-17T19:09:04.113Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36790938,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-20T02:00:06.210Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"cncf","name":"Cloud Native Computing Foundation (CNCF)","uuid":"13455738","kind":"organization","description":"Sustaining and integrating open source technologies to orchestrate containers as part of a microservices architecture","email":"info@cncf.io","website":"https://www.cncf.io","location":"San Francisco, CA","twitter":"CloudNativeFdn","company":null,"icon_url":"https://avatars.githubusercontent.com/u/13455738?v=4","repositories_count":169,"last_synced_at":"2026-08-14T19:17:10.741Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/cncf","funding_links":[],"total_stars":40729,"followers":7702,"following":0,"created_at":"2022-11-05T20:17:10.088Z","updated_at":"2026-08-14T19:17:10.761Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cncf","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cncf/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-20T19:44:10.606Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:bazel/xds","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/bazel/xds","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/bazel/xds","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/bazel/xds/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-20T10:02:03.926Z","issues_count":30,"pull_requests_count":137,"avg_time_to_close_issue":12696820.57142857,"avg_time_to_close_pull_request":3522798.627118644,"issues_closed_count":14,"pull_requests_closed_count":118,"pull_request_authors_count":36,"issue_authors_count":24,"avg_comments_per_issue":3.466666666666667,"avg_comments_per_pull_request":1.7956204379562044,"merged_pull_requests_count":71,"bot_issues_count":0,"bot_pull_requests_count":1,"past_year_issues_count":3,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1447560.5,"past_year_avg_time_to_close_pull_request":1017475.9230769231,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":13,"past_year_pull_request_authors_count":9,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.9090909090909091,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":7,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/issues","maintainers":[{"login":"phlax","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/phlax"},{"login":"dfawley","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dfawley"}],"active_maintainers":[{"login":"phlax","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/phlax"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/registry.bazel.build/packages/xds/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/registry.bazel.build/packages/xds/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/registry.bazel.build/packages/xds/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/registry.bazel.build/packages/xds/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/registry.bazel.build/packages/xds/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/registry.bazel.build/packages/xds/codemeta","maintainers":[],"registry":{"name":"registry.bazel.build","url":"https://registry.bazel.build","ecosystem":"bazel","default":true,"packages_count":1247,"maintainers_count":470,"namespaces_count":0,"keywords_count":731,"github":"bazelbuild","metadata":{"funded_packages_count":78},"icon_url":"https://github.com/bazelbuild.png","created_at":"2026-01-23T13:05:25.896Z","updated_at":"2026-08-23T05:05:43.116Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/registry.bazel.build/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/registry.bazel.build/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/registry.bazel.build/namespaces"}},{"id":3888027,"name":"github.com/cncf/xds/go","ecosystem":"go","description":"","homepage":"https://github.com/cncf/xds","licenses":"apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/cncf/xds","keywords_array":[],"namespace":"github.com/cncf/xds","versions_count":31,"first_release_published_at":"2021-03-12T22:13:58.000Z","latest_release_published_at":"2026-08-22T11:12:50.794Z","latest_release_number":null,"last_synced_at":"2026-08-22T11:12:51.439Z","created_at":"2022-04-11T23:32:16.175Z","updated_at":"2026-08-22T11:12:51.439Z","registry_url":"https://pkg.go.dev/github.com/cncf/xds/go","install_command":"go get github.com/cncf/xds/go","documentation_url":"https://pkg.go.dev/github.com/cncf/xds/go#section-documentation","metadata":{},"repo_metadata":{"id":37807785,"uuid":"314298379","full_name":"cncf/xds","owner":"cncf","description":"xDS API Working Group","archived":false,"fork":false,"pushed_at":"2026-03-09T18:28:24.000Z","size":606,"stargazers_count":270,"open_issues_count":31,"forks_count":84,"subscribers_count":19,"default_branch":"main","last_synced_at":"2026-08-20T10:11:18.479Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Starlark","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cncf.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-11-19T16:01:59.000Z","updated_at":"2026-08-19T18:05:38.000Z","dependencies_parsed_at":"2024-01-13T17:47:55.868Z","dependency_job_id":"fd84d159-02ca-4b93-9e9b-c2dbf311e443","html_url":"https://github.com/cncf/xds","commit_stats":{"total_commits":51,"total_committers":20,"mean_commits":2.55,"dds":0.8431372549019608,"last_synced_commit":"b4127c9b8d78b77423fd25169f05b7476b6ea932"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/cncf/xds","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cncf","download_url":"https://codeload.github.com/cncf/xds/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/sbom","scorecard":{"id":294580,"data":{"date":"2025-08-11","repo":{"name":"github.com/cncf/xds","commit":"2ac532fd44436293585084f8d94c6bdb17835af0"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.2,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: python/dist/xds-0.1.0-py3-none-any.whl:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GO-2024-2687 / GHSA-4v7x-pqxf-cx7m","Warn: Project is vulnerable to: GO-2024-3333","Warn: Project is vulnerable to: GO-2025-3503 / GHSA-qxp5-gwg8-xv66","Warn: Project is vulnerable to: GO-2025-3595 / GHSA-vvgc-356p-c3xw"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-17T19:09:04.113Z","repository_id":37807785,"created_at":"2025-08-17T19:09:04.113Z","updated_at":"2025-08-17T19:09:04.113Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36790938,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-20T02:00:06.210Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"cncf","name":"Cloud Native Computing Foundation (CNCF)","uuid":"13455738","kind":"organization","description":"Sustaining and integrating open source technologies to orchestrate containers as part of a microservices architecture","email":"info@cncf.io","website":"https://www.cncf.io","location":"San Francisco, CA","twitter":"CloudNativeFdn","company":null,"icon_url":"https://avatars.githubusercontent.com/u/13455738?v=4","repositories_count":169,"last_synced_at":"2026-08-14T19:17:10.741Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/cncf","funding_links":[],"total_stars":40729,"followers":7702,"following":0,"created_at":"2022-11-05T20:17:10.088Z","updated_at":"2026-08-14T19:17:10.761Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cncf","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cncf/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-20T11:03:16.081Z","dependent_packages_count":2833,"downloads":null,"downloads_period":null,"dependent_repos_count":53305,"rankings":{"downloads":null,"dependent_repos_count":0.022720034194170183,"dependent_packages_count":0.07946824745540804,"stargazers_count":3.956977026345972,"forks_count":3.2090940577939735,"docker_downloads_count":0.04792993514934532,"average":1.4632378601877738},"purl":"pkg:golang/github.com/cncf/xds/go","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/cncf/xds/go","docker_dependents_count":1392,"docker_downloads_count":6118845911,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/cncf/xds/go","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/cncf/xds/go/dependencies","status":null,"funding_links":[],"critical":true,"issue_metadata":{"last_synced_at":"2026-08-20T10:02:03.926Z","issues_count":30,"pull_requests_count":137,"avg_time_to_close_issue":12696820.57142857,"avg_time_to_close_pull_request":3522798.627118644,"issues_closed_count":14,"pull_requests_closed_count":118,"pull_request_authors_count":36,"issue_authors_count":24,"avg_comments_per_issue":3.466666666666667,"avg_comments_per_pull_request":1.7956204379562044,"merged_pull_requests_count":71,"bot_issues_count":0,"bot_pull_requests_count":1,"past_year_issues_count":3,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1447560.5,"past_year_avg_time_to_close_pull_request":1017475.9230769231,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":13,"past_year_pull_request_authors_count":9,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.9090909090909091,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":7,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/issues","maintainers":[{"login":"phlax","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/phlax"},{"login":"dfawley","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dfawley"}],"active_maintainers":[{"login":"phlax","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/phlax"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcncf%2Fxds%2Fgo/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcncf%2Fxds%2Fgo/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcncf%2Fxds%2Fgo/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcncf%2Fxds%2Fgo/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcncf%2Fxds%2Fgo/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fcncf%2Fxds%2Fgo/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2281883,"maintainers_count":0,"namespaces_count":839478,"keywords_count":124863,"github":"golang","metadata":{"funded_packages_count":67811,"sync_missing_packages_cursor":{"timestamp":"2026-08-17T00:00:58.969562Z","path":"github.com/Tektoncd/operator","version":"v0.78.0"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-08-23T05:01:16.146Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}}],"commits":{"id":1256436,"full_name":"cncf/xds","default_branch":"main","total_commits":63,"total_committers":23,"total_bot_commits":0,"total_bot_committers":0,"mean_commits":2.739130434782609,"dds":0.8253968253968254,"past_year_total_commits":7,"past_year_total_committers":3,"past_year_total_bot_commits":0,"past_year_total_bot_committers":0,"past_year_mean_commits":2.3333333333333335,"past_year_dds":0.2857142857142857,"last_synced_at":"2026-08-19T09:31:30.411Z","last_synced_commit":"dba9d589def2cd10099a3a64887d859188c2f57a","created_at":"2023-04-19T16:47:58.086Z","updated_at":"2026-08-19T09:31:30.246Z","committers":[{"name":"Matthieu MOREL","email":"matthieu.morel35@gmail.com","login":"mmorel-35","count":11},{"name":"Sergii Tkachenko","email":"sergiitk@google.com","login":"sergiitk","count":10},{"name":"Kuat","email":"kyessenov","login":"kyessenov","count":6},{"name":"Keith Smiley","email":"keithbsmiley@gmail.com","login":"keith","count":4},{"name":"Mark D. Roth","email":"roth@google.com","login":"markdroth","count":4},{"name":"Yousuk Seung","email":"ysseung@google.com","login":"yousukseung","count":4},{"name":"Tianyu","email":"72890320+tyxia","login":"tyxia","count":3},{"name":"phlax","email":"phlax","login":"phlax","count":3},{"name":"htuch","email":"htuch","login":"htuch","count":3},{"name":"Snow Pettersen","email":"aickck@gmail.com","login":"snowp","count":2},{"name":"Anirudh Ramachandra","email":"anramach@google.com","login":"anicr7","count":1},{"name":"Chris Aniszczyk","email":"caniszczyk@gmail.com","login":"caniszczyk","count":1},{"name":"Florent Lecoultre","email":"104759954+fl0Lec","login":"fl0Lec","count":1},{"name":"Greg Greenway","email":"ggreenway@apple.com","login":"ggreenway","count":1},{"name":"John Howard","email":"howardjohn@google.com","login":"howardjohn","count":1},{"name":"Kunjan","email":"kunjanp@google.com","login":"coolkp","count":1},{"name":"Matt Klein","email":"mattklein123@gmail.com","login":"mattklein123","count":1},{"name":"Misha Efimov","email":"mef@google.com","login":"efimki","count":1},{"name":"Rohit Agrawal","email":"rohit.agrawal@databricks.com","login":"agrawroh","count":1},{"name":"alyssawilk","email":"alyssar@google.com","login":"alyssawilk","count":1},{"name":"bsurber","email":"73970703+bsurber","login":"bsurber","count":1},{"name":"code","email":"wbphub@gmail.com","login":"wbpcode","count":1},{"name":"yanavlasov","email":"yavlasov@google.com","login":"yanavlasov","count":1}],"past_year_committers":[{"name":"Matthieu MOREL","email":"matthieu.morel35@gmail.com","login":"mmorel-35","count":5},{"name":"Yousuk Seung","email":"ysseung@google.com","login":"yousukseung","count":1},{"name":"Florent Lecoultre","email":"104759954+fl0Lec","login":"fl0Lec","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-08-20T00:00:10.776Z","repositories_count":6750506,"commits_count":978010206,"contributors_count":41229425,"owners_count":1358604,"committers_count":3352512,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"cncf/xds","html_url":"https://github.com/cncf/xds","last_synced_at":"2026-08-22T11:03:56.285Z","status":null,"issues_count":30,"pull_requests_count":137,"avg_time_to_close_issue":12696820.57142857,"avg_time_to_close_pull_request":3522798.627118644,"issues_closed_count":14,"pull_requests_closed_count":118,"pull_request_authors_count":36,"issue_authors_count":24,"avg_comments_per_issue":3.466666666666667,"avg_comments_per_pull_request":1.7956204379562044,"merged_pull_requests_count":71,"bot_issues_count":0,"bot_pull_requests_count":1,"past_year_issues_count":3,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":1447560.5,"past_year_avg_time_to_close_pull_request":1017475.9230769231,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":13,"past_year_pull_request_authors_count":9,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.9090909090909091,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":1,"past_year_merged_pull_requests_count":7,"created_at":"2023-05-09T11:07:07.162Z","updated_at":"2026-08-22T11:03:56.285Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/cncf%2Fxds/issues","issue_labels_count":{"table":{}},"pull_request_labels_count":{"table":{}},"issue_author_associations_count":{"table":{"NONE":18,"MEMBER":6,"CONTRIBUTOR":6}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":94,"NONE":37,"MEMBER":6}},"issue_authors":{"table":{"phlax":5,"PapaCharlie":2,"kyessenov":2,"jferrl":1,"tyxeron":1,"fl0Lec":1,"Rick-xuy":1,"easwars":1,"sergiitk":1,"robberphex":1,"dfawley":1,"markdroth":1,"hobbytp":1,"meteorcloudy":1,"howardjohn":1,"adalrsjr1":1,"ejona86":1,"dws":1,"sfc-gh-ptabor":1,"oxy-star":1,"StupidScience":1,"zhangbc97":1,"veblush":1,"sfc-gh-randerson":1}},"pull_request_authors":{"table":{"mmorel-35":37,"sergiitk":16,"kyessenov":8,"wbpcode":7,"phlax":6,"keith":5,"tyxia":5,"anicr7":4,"markdroth":4,"efimki":4,"silverstar194":3,"coolkp":3,"zhxie":3,"agrawroh":2,"htuch":2,"AndresGuedez":2,"snowp":2,"adisuissa":2,"ggreenway":2,"zirain":2,"bsurber":2,"yousukseung":2,"mattklein123":1,"pugmajere":1,"renuka-fernando":1,"fl0Lec":1,"HackToHell":1,"rootvector2":1,"110y":1,"alyssawilk":1,"howardjohn":1,"yanavlasov":1,"sanjay20m":1,"leonm1":1,"Shubham7-1":1,"kusari-inspector[bot]":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-08-23T00:00:07.901Z","repositories_count":16277450,"issues_count":42193190,"pull_requests_count":134426820,"authors_count":11510733,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{}},"past_year_pull_request_labels_count":{"table":{}},"past_year_issue_author_associations_count":{"table":{"CONTRIBUTOR":1,"MEMBER":1,"NONE":1}},"past_year_pull_request_author_associations_count":{"table":{"CONTRIBUTOR":17,"NONE":4,"MEMBER":1}},"past_year_issue_authors":{"table":{"fl0Lec":1,"oxy-star":1,"phlax":1}},"past_year_pull_request_authors":{"table":{"mmorel-35":13,"efimki":2,"fl0Lec":1,"kusari-inspector[bot]":1,"phlax":1,"rootvector2":1,"sanjay20m":1,"Shubham7-1":1,"yousukseung":1}},"maintainers":[{"table":{"login":"phlax","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/phlax"}},{"table":{"login":"dfawley","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dfawley"}}],"active_maintainers":[{"table":{"login":"phlax","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/phlax"}}]}},"events":{"total":{"ForkEvent":11,"IssueCommentEvent":30,"IssuesEvent":4,"PullRequestEvent":24,"PullRequestReviewCommentEvent":127,"PullRequestReviewEvent":110,"PushEvent":8,"WatchEvent":37},"last_year":{"ForkEvent":2,"IssueCommentEvent":8,"IssuesEvent":1,"PullRequestEvent":5,"PullRequestReviewCommentEvent":5,"PullRequestReviewEvent":9,"PushEvent":3,"WatchEvent":6}},"keywords":[],"dependencies":[{"ecosystem":"go","filepath":"go/go.mod","sha":null,"kind":"manifest","created_at":"2022-07-12T16:53:44.079Z","updated_at":"2022-07-12T16:53:44.079Z","repository_link":"https://github.com/cncf/xds/blob/main/go/go.mod","dependencies":[{"id":176594818,"package_name":"github.com/envoyproxy/protoc-gen-validate","ecosystem":"go","requirements":"v0.1.0","direct":true,"kind":"runtime","optional":false},{"id":176594819,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.3.2","direct":true,"kind":"runtime","optional":false},{"id":176594820,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.25.1","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"go","filepath":"go/go.sum","sha":null,"kind":"lockfile","created_at":"2024-01-13T17:47:55.762Z","updated_at":"2024-01-13T17:47:55.762Z","repository_link":"https://github.com/cncf/xds/blob/main/go/go.sum","dependencies":[{"id":15590899011,"package_name":"github.com/envoyproxy/protoc-gen-validate","ecosystem":"go","requirements":"v1.0.2","direct":false,"kind":"runtime","optional":false},{"id":15590899012,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.5.0","direct":false,"kind":"runtime","optional":false},{"id":15590899013,"package_name":"github.com/golang/protobuf","ecosystem":"go","requirements":"v1.5.3","direct":false,"kind":"runtime","optional":false},{"id":15590899014,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.5","direct":false,"kind":"runtime","optional":false},{"id":15590899015,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.9","direct":false,"kind":"runtime","optional":false},{"id":15590899016,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.14.0","direct":false,"kind":"runtime","optional":false},{"id":15590899017,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.11.0","direct":false,"kind":"runtime","optional":false},{"id":15590899018,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.12.0","direct":false,"kind":"runtime","optional":false},{"id":15590899019,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20191204190536-9bdfabe68543","direct":false,"kind":"runtime","optional":false},{"id":15590899020,"package_name":"google.golang.org/genproto/googleapis/api","ecosystem":"go","requirements":"v0.0.0-20230822172742-b8732ec3820d","direct":false,"kind":"runtime","optional":false},{"id":15590899021,"package_name":"google.golang.org/genproto/googleapis/rpc","ecosystem":"go","requirements":"v0.0.0-20230822172742-b8732ec3820d","direct":false,"kind":"runtime","optional":false},{"id":15590899022,"package_name":"google.golang.org/grpc","ecosystem":"go","requirements":"v1.59.0","direct":false,"kind":"runtime","optional":false},{"id":15590899023,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.26.0-rc.1","direct":false,"kind":"runtime","optional":false},{"id":15590899024,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.26.0","direct":false,"kind":"runtime","optional":false},{"id":15590899025,"package_name":"google.golang.org/protobuf","ecosystem":"go","requirements":"v1.31.0","direct":false,"kind":"runtime","optional":false}]}],"score":31.37725322178749,"created_at":"2025-08-07T15:52:08.942Z","updated_at":"2026-08-23T11:31:31.726Z","avatar_url":"https://github.com/cncf.png","language":"Starlark","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/362625","html_url":"https://summary.ecosyste.ms/projects/362625"}