{"id":366725,"url":"https://github.com/tiran/defusedxml","last_synced_at":"2026-08-23T22:06:53.040Z","repository":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":235,"last_synced_at":"2026-08-22T00:20:38.270Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":863,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-22T00:20:38.290Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"packages":[{"id":4110151,"name":"github.com/tiran/defusedxml","ecosystem":"go","description":"","homepage":null,"licenses":"other","normalized_licenses":["Other"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"github.com/tiran","versions_count":5,"first_release_published_at":"2013-03-28T11:22:24.000Z","latest_release_published_at":"2021-03-08T10:58:00.000Z","latest_release_number":"v0.7.1","last_synced_at":"2026-08-22T21:35:39.088Z","created_at":"2022-04-12T14:02:44.875Z","updated_at":"2026-08-22T21:35:39.088Z","registry_url":"https://pkg.go.dev/github.com/tiran/defusedxml","install_command":"go get github.com/tiran/defusedxml","documentation_url":"https://pkg.go.dev/github.com/tiran/defusedxml#section-documentation","metadata":{},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T21:31:12.596Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":9.345852080216646,"dependent_packages_count":6.999148183520997,"stargazers_count":null,"forks_count":null,"average":8.172500131868823},"purl":"pkg:golang/github.com/tiran/defusedxml","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/tiran/defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/tiran/defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/tiran/defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Ftiran%2Fdefusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Ftiran%2Fdefusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Ftiran%2Fdefusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Ftiran%2Fdefusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Ftiran%2Fdefusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Ftiran%2Fdefusedxml/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2281883,"maintainers_count":0,"namespaces_count":839461,"keywords_count":124729,"github":"golang","metadata":{"funded_packages_count":67494,"sync_missing_packages_cursor":{"timestamp":"2026-08-17T00:00:58.969562Z","path":"github.com/Tektoncd/operator","version":"v0.78.0"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-08-22T05:01:09.392Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":2692412,"name":"defusedxml","ecosystem":"pypi","description":"XML bomb protection for Python stdlib modules","homepage":"https://github.com/tiran/defusedxml","licenses":"PSFL","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":["xml","bomb","DoS"],"namespace":null,"versions_count":13,"first_release_published_at":"2013-02-19T15:05:02.000Z","latest_release_published_at":"2021-03-08T10:59:24.000Z","latest_release_number":"0.7.1","last_synced_at":"2026-08-22T21:33:31.941Z","created_at":"2022-04-10T10:34:41.700Z","updated_at":"2026-08-22T21:33:31.941Z","registry_url":"https://pypi.org/project/defusedxml/","install_command":"pip install defusedxml --index-url https://pypi.org/simple","documentation_url":"https://defusedxml.readthedocs.io/","metadata":{"funding":null,"documentation":null,"classifiers":["Development Status :: 5 - Production/Stable","Intended Audience :: Developers","License :: OSI Approved :: Python Software Foundation License","Natural Language :: English","Programming Language :: Python","Programming Language :: Python :: 2","Programming Language :: Python :: 2.7","Programming Language :: Python :: 3","Programming Language :: Python :: 3.5","Programming Language :: Python :: 3.6","Programming Language :: Python :: 3.7","Programming Language :: Python :: 3.8","Programming Language :: Python :: 3.9","Topic :: Text Processing :: Markup :: XML"],"normalized_name":"defusedxml","project_status":null},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":235,"last_synced_at":"2026-08-22T00:20:38.270Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":863,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-22T00:20:38.290Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-22T16:49:55.942Z","dependent_packages_count":565,"downloads":253831978,"downloads_period":"last-month","dependent_repos_count":94220,"rankings":{"downloads":0.03925114681212823,"dependent_repos_count":0.012288910450526129,"dependent_packages_count":0.04952247494988142,"stargazers_count":4.199322459176056,"forks_count":7.529066941546972,"docker_downloads_count":0.02549490377049451,"average":1.9758244727843433},"purl":"pkg:pypi/defusedxml","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/pypi/defusedxml","docker_dependents_count":7707,"docker_downloads_count":1927598057,"usage_url":"https://repos.ecosyste.ms/usage/pypi/defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/pypi/defusedxml/dependencies","status":null,"funding_links":[],"critical":true,"issue_metadata":{"last_synced_at":"2026-08-21T21:04:55.270Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/defusedxml/codemeta","maintainers":[{"uuid":"tiran","login":"tiran","name":null,"email":null,"url":null,"packages_count":50,"html_url":"https://pypi.org/user/tiran/","role":null,"created_at":"2022-12-22T02:06:14.361Z","updated_at":"2022-12-22T02:06:14.361Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/tiran/packages"}],"registry":{"name":"pypi.org","url":"https://pypi.org","ecosystem":"pypi","default":true,"packages_count":930042,"maintainers_count":399479,"namespaces_count":0,"keywords_count":311543,"github":"pypi","metadata":{"funded_packages_count":58281,"rate_limit":2},"icon_url":"https://github.com/pypi.png","created_at":"2022-04-04T15:19:23.364Z","updated_at":"2026-08-22T05:05:20.986Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/namespaces"}},{"id":75222,"name":"py-defusedxml","ecosystem":"spack","description":"defusing XML bombs and other exploits\n","homepage":"https://github.com/tiran/defusedxml","licenses":"[]","normalized_licenses":["Other"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":null,"versions_count":3,"first_release_published_at":"2022-04-05T09:23:57.795Z","latest_release_published_at":"2022-04-05T09:23:57.795Z","latest_release_number":"0.7.1","last_synced_at":"2026-08-22T21:33:32.609Z","created_at":"2022-04-05T09:23:57.743Z","updated_at":"2026-08-22T21:33:32.610Z","registry_url":"https://packages.spack.io/package.html?name=py-defusedxml","install_command":"spack install py-defusedxml","documentation_url":null,"metadata":{},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-20T00:04:23.496Z","dependent_packages_count":5,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":14.186466583298596,"stargazers_count":12.032791440878142,"forks_count":16.29845769070446,"average":10.6294289287203},"purl":"pkg:spack/py-defusedxml","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/spack/py-defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/spack/py-defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/spack/py-defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/packages/py-defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/packages/py-defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/packages/py-defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/packages/py-defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/packages/py-defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/packages/py-defusedxml/codemeta","maintainers":[{"uuid":"adamjstewart","login":"adamjstewart","name":null,"email":null,"url":"https://github.com/adamjstewart","packages_count":2155,"html_url":null,"role":null,"created_at":"2022-11-14T16:50:48.939Z","updated_at":"2022-11-14T16:50:48.939Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/maintainers/adamjstewart/packages"}],"registry":{"name":"spack.io","url":"https://packages.spack.io","ecosystem":"spack","default":true,"packages_count":9302,"maintainers_count":1032,"namespaces_count":0,"keywords_count":3955,"github":"spack","metadata":{"funded_packages_count":509},"icon_url":"https://github.com/spack.png","created_at":"2022-04-04T15:19:23.514Z","updated_at":"2026-08-22T05:06:19.396Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/namespaces"}},{"id":6113855,"name":"py3-defusedxml","ecosystem":"alpine","description":"XML bomb protection for Python stdlib modules (for python3)","homepage":"https://github.com/tiran/defusedxml","licenses":"GPL","normalized_licenses":["GPL-2.0+"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2018-05-21T14:48:33.000Z","latest_release_published_at":"2018-05-21T14:48:33.000Z","latest_release_number":"0.5.0-r0","last_synced_at":"2026-04-01T01:10:50.456Z","created_at":"2023-01-31T21:24:57.153Z","updated_at":"2026-08-19T21:14:05.340Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.8/community/x86_64/py3-defusedxml","install_command":"apk add py3-defusedxml","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T21:14:05.339Z","dependent_packages_count":7,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":9.02704969595303,"stargazers_count":5.776892430278884,"forks_count":7.821346194170687,"average":5.65632208010065},"purl":"pkg:apk/alpine/py3-defusedxml?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.8","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/packages/py3-defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/packages/py3-defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/packages/py3-defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/packages/py3-defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/packages/py3-defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/packages/py3-defusedxml/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":25,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2023-02-01T09:24:17.755Z","updated_at":"2023-02-01T09:24:17.755Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-v3.8","url":"https://pkgs.alpinelinux.org/packages?branch=v3.8","ecosystem":"alpine","default":false,"packages_count":9538,"maintainers_count":148,"namespaces_count":2,"keywords_count":770,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":337},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.817Z","updated_at":"2026-08-12T05:03:16.204Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/namespaces"}},{"id":13075066,"name":"python311Packages.defusedxml","ecosystem":"nixpkgs","description":"Python module to defuse XML issues","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":["python"],"namespace":null,"versions_count":1,"first_release_published_at":"2026-02-01T17:29:45.068Z","latest_release_published_at":"2026-02-01T17:29:45.068Z","latest_release_number":"0.8.0rc2","last_synced_at":"2026-03-07T08:20:42.774Z","created_at":"2026-02-01T17:29:44.719Z","updated_at":"2026-08-20T01:24:50.372Z","registry_url":"https://search.nixos.org/packages?channel=24.11\u0026query=python311Packages.defusedxml","install_command":"nix-env -iA nixpkgs.python311Packages.defusedxml","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-24.11/pkgs/development/python-modules/defusedxml/default.nix#L36","metadata":{"nix_attribute":"python3.11-defusedxml-0.8.0rc2","position":"pkgs/development/python-modules/defusedxml/default.nix:36","platforms":["aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux","x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin","i686-cygwin","x86_64-cygwin","aarch64-windows","x86_64-windows","i686-windows","i686-freebsd","x86_64-freebsd"],"broken":false,"insecure":false,"unfree":false,"outputs":["dist","out"],"upstream_ecosystem":"pypi","upstream_name":"defusedxml","upstream_purl":"pkg:pypi/defusedxml"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-20T01:24:50.372Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/python311Packages.defusedxml?channel=24.11\u0026repository_url=https://channels.nixos.org/nixos-24.11","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/python311Packages.defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/python311Packages.defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/python311Packages.defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/python311Packages.defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/python311Packages.defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/python311Packages.defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/python311Packages.defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/python311Packages.defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/python311Packages.defusedxml/codemeta","maintainers":[{"uuid":"fabaff","login":null,"name":"Fabian Affolter","email":"mail@fabian-affolter.ch","url":"https://github.com/fabaff","packages_count":5052,"html_url":null,"role":null,"created_at":"2026-03-07T08:20:43.019Z","updated_at":"2026-03-07T08:20:43.019Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/maintainers/fabaff/packages"}],"registry":{"name":"nixpkgs-24.11","url":"https://channels.nixos.org/nixos-24.11","ecosystem":"nixpkgs","default":false,"packages_count":121983,"maintainers_count":3777,"namespaces_count":0,"keywords_count":739,"github":"NixOS","metadata":{"funded_packages_count":3170},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.059Z","updated_at":"2026-08-22T05:04:27.355Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/namespaces"}},{"id":14540082,"name":"textproc/py-defusedxml","ecosystem":"pkgsrc","description":"XML bomb protection for Python stdlib modules","homepage":"https://github.com/tiran/defusedxml","licenses":"python-software-foundation","normalized_licenses":["Other"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":["textproc","python"],"namespace":"textproc","versions_count":1,"first_release_published_at":"2026-03-19T05:33:38.000Z","latest_release_published_at":"2026-03-19T05:33:38.000Z","latest_release_number":"0.7.1nb2","last_synced_at":"2026-05-27T10:19:25.704Z","created_at":"2026-05-27T10:19:24.953Z","updated_at":"2026-08-19T22:20:13.796Z","registry_url":"https://pkgsrc.se/textproc/py-defusedxml","install_command":"pkg_add py313-defusedxml","documentation_url":"https://pkgsrc.se/textproc/py-defusedxml","metadata":{"pkg_slug":"py-defusedxml","pkgbase":"py311-defusedxml","machine_arch":"x86_64","opsys":"NetBSD","pkgname_latest":"py311-defusedxml-0.7.1nb2"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T22:20:13.796Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:pkgsrc/textproc/py-defusedxml?arch=x86_64\u0026os=NetBSD","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/pkgsrc/textproc/py-defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/pkgsrc/textproc/py-defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/pkgsrc/textproc/py-defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/packages/textproc%2Fpy-defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/packages/textproc%2Fpy-defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/packages/textproc%2Fpy-defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/packages/textproc%2Fpy-defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/packages/textproc%2Fpy-defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/packages/textproc%2Fpy-defusedxml/codemeta","maintainers":[],"registry":{"name":"pkgsrc-netbsd-x86_64-10.1-all","url":"https://cdn.netbsd.org/pub/pkgsrc/packages/NetBSD/x86_64/10.1/All","ecosystem":"pkgsrc","default":true,"packages_count":19690,"maintainers_count":0,"namespaces_count":43,"keywords_count":368,"github":"pkgsrc","metadata":{"funded_packages_count":469},"icon_url":"https://github.com/pkgsrc.png","created_at":"2026-05-26T08:59:24.518Z","updated_at":"2026-08-22T05:00:17.841Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/namespaces"}},{"id":13276384,"name":"kodiPackages.defusedxml","ecosystem":"nixpkgs","description":"defusing XML bombs and other exploits","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-02-02T05:17:12.976Z","latest_release_published_at":"2026-02-02T05:17:12.976Z","latest_release_number":"0.6.0+matrix.1","last_synced_at":"2026-03-08T06:27:36.590Z","created_at":"2026-02-02T05:17:12.550Z","updated_at":"2026-08-19T20:13:14.863Z","registry_url":"https://search.nixos.org/packages?channel=23.11\u0026query=kodiPackages.defusedxml","install_command":"nix-env -iA nixpkgs.kodiPackages.defusedxml","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-23.11/pkgs/applications/video/kodi/addons/defusedxml/default.nix#L22","metadata":{"nix_attribute":"kodi-defusedxml-0.6.0+matrix.1","position":"pkgs/applications/video/kodi/addons/defusedxml/default.nix:22","broken":false,"insecure":false,"unfree":false,"outputs":["out"]},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":550,"open_issues_count":8,"forks_count":59,"subscribers_count":15,"default_branch":"main","last_synced_at":"2026-08-12T16:46:42.124Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-11T14:02:53.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36616505,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-13T02:00:06.325Z","response_time":111,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T20:13:14.862Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/kodiPackages.defusedxml?channel=23.11\u0026repository_url=https://channels.nixos.org/nixos-23.11","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/kodiPackages.defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/kodiPackages.defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/kodiPackages.defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/kodiPackages.defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/kodiPackages.defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/kodiPackages.defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/kodiPackages.defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/kodiPackages.defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/kodiPackages.defusedxml/codemeta","maintainers":[{"uuid":"peterhoeg","login":null,"name":"Peter Hoeg","email":"peter@hoeg.com","url":"https://github.com/peterhoeg","packages_count":329,"html_url":null,"role":null,"created_at":"2026-03-08T06:27:36.968Z","updated_at":"2026-03-08T06:27:36.968Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/maintainers/peterhoeg/packages"},{"uuid":"sephalon","login":null,"name":"Stefan Wiehler","email":"me@sephalon.net","url":"https://github.com/sephalon","packages_count":79,"html_url":null,"role":null,"created_at":"2026-03-08T06:27:37.008Z","updated_at":"2026-03-08T06:27:37.008Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/maintainers/sephalon/packages"},{"uuid":"aanderse","login":null,"name":"Aaron Andersen","email":"aaron@fosslib.net","url":"https://github.com/aanderse","packages_count":561,"html_url":null,"role":null,"created_at":"2026-03-08T06:27:36.818Z","updated_at":"2026-03-08T06:27:36.818Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/maintainers/aanderse/packages"},{"uuid":"cpages","login":null,"name":"Carles Pagès","email":"page@ruiec.cat","url":"https://github.com/cpages","packages_count":81,"html_url":null,"role":null,"created_at":"2026-03-08T06:27:36.855Z","updated_at":"2026-03-08T06:27:36.855Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/maintainers/cpages/packages"},{"uuid":"edwtjo","login":null,"name":"Edward Tjörnhammar","email":"ed@cflags.cc","url":"https://github.com/edwtjo","packages_count":416,"html_url":null,"role":null,"created_at":"2026-03-08T06:27:36.892Z","updated_at":"2026-03-08T06:27:36.892Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/maintainers/edwtjo/packages"},{"uuid":"minijackson","login":null,"name":"Rémi Nicole","email":"minijackson@riseup.net","url":"https://github.com/minijackson","packages_count":146,"html_url":null,"role":null,"created_at":"2026-03-08T06:27:36.930Z","updated_at":"2026-03-08T06:27:36.930Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/maintainers/minijackson/packages"}],"registry":{"name":"nixpkgs-23.11","url":"https://channels.nixos.org/nixos-23.11","ecosystem":"nixpkgs","default":false,"packages_count":108178,"maintainers_count":2997,"namespaces_count":0,"keywords_count":569,"github":"NixOS","metadata":{"funded_packages_count":2963},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.577Z","updated_at":"2026-08-22T05:04:32.698Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/namespaces"}},{"id":13379669,"name":"defusedxml","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/tiran/defusedxml","licenses":"other","normalized_licenses":[],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-05T05:07:39.205Z","latest_release_published_at":"2026-02-05T05:07:39.205Z","latest_release_number":"0.7.1-2","last_synced_at":"2026-08-04T11:19:33.527Z","created_at":"2026-02-05T05:07:37.914Z","updated_at":"2026-08-19T20:16:36.446Z","registry_url":"https://launchpad.net/ubuntu/+source/defusedxml","install_command":"apt-get install defusedxml","documentation_url":null,"metadata":{"component":"main","architecture":"all","priority":"optional","binary":"python3-defusedxml","standards_version":"4.6.1","maintainer":"Debian Python Team \u003cteam+python@tracker.debian.org\u003e","build_depends":"dh-python, python3-all, debhelper-compat (= 13), python3-setuptools","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":550,"open_issues_count":8,"forks_count":59,"subscribers_count":15,"default_branch":"main","last_synced_at":"2026-08-12T16:46:42.124Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-11T14:02:53.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36616505,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-13T02:00:06.325Z","response_time":111,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T20:16:36.445Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/defusedxml?arch=source\u0026distro=ubuntu-24.04","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/defusedxml/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.04","url":"https://launchpad.net/ubuntu/noble","ecosystem":"ubuntu","default":true,"packages_count":37306,"maintainers_count":0,"namespaces_count":4,"keywords_count":1697,"github":"ubuntu","metadata":{"codename":"noble","funded_packages_count":1210},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:45.928Z","updated_at":"2026-08-22T05:05:42.400Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/namespaces"}},{"id":6219421,"name":"py3-defusedxml","ecosystem":"alpine","description":"XML bomb protection for Python stdlib modules","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2019-11-05T15:33:56.000Z","latest_release_published_at":"2019-11-05T15:33:56.000Z","latest_release_number":"0.6.0-r1","last_synced_at":"2026-04-03T01:09:33.090Z","created_at":"2023-02-01T03:35:55.416Z","updated_at":"2026-08-19T20:24:29.983Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.12/community/x86_64/py3-defusedxml","install_command":"apk add py3-defusedxml","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":550,"open_issues_count":8,"forks_count":59,"subscribers_count":15,"default_branch":"main","last_synced_at":"2026-08-12T16:46:42.124Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-11T14:02:53.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36616505,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-13T02:00:06.325Z","response_time":111,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T20:24:29.983Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":10.036825197837498,"stargazers_count":7.231842043406722,"forks_count":9.457024210608791,"average":6.681422862963252},"purl":"pkg:apk/alpine/py3-defusedxml?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.12","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.12/packages/py3-defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.12/packages/py3-defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.12/packages/py3-defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.12/packages/py3-defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.12/packages/py3-defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.12/packages/py3-defusedxml/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":36,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2023-02-18T17:18:45.266Z","updated_at":"2023-02-18T17:18:45.266Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.12/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-v3.12","url":"https://pkgs.alpinelinux.org/packages?branch=v3.12","ecosystem":"alpine","default":false,"packages_count":12763,"maintainers_count":216,"namespaces_count":2,"keywords_count":1442,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":489},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.748Z","updated_at":"2026-08-22T05:04:23.212Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.12/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.12/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.12/namespaces"}},{"id":11765042,"name":"py3-defusedxml-pyc","ecosystem":"alpine","description":"Precompiled Python bytecode for py3-defusedxml","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_number":"0.7.1-r5","last_synced_at":"2026-04-03T01:26:40.345Z","created_at":"2025-06-07T18:09:47.007Z","updated_at":"2026-08-19T20:36:37.891Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.22/community/x86_64/py3-defusedxml-pyc","install_command":"apk add py3-defusedxml-pyc","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":550,"open_issues_count":8,"forks_count":59,"subscribers_count":15,"default_branch":"main","last_synced_at":"2026-08-12T16:46:42.124Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-11T14:02:53.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36616505,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-13T02:00:06.325Z","response_time":111,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T20:36:37.890Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/py3-defusedxml-pyc?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.22","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-defusedxml-pyc","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-defusedxml-pyc","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-defusedxml-pyc/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/py3-defusedxml-pyc/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/py3-defusedxml-pyc/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/py3-defusedxml-pyc/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/py3-defusedxml-pyc/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/py3-defusedxml-pyc/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/py3-defusedxml-pyc/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":34,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2025-06-08T14:47:22.546Z","updated_at":"2025-06-08T14:47:22.546Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-v3.22","url":"https://pkgs.alpinelinux.org/packages?branch=v3.22","ecosystem":"alpine","default":false,"packages_count":26323,"maintainers_count":422,"namespaces_count":2,"keywords_count":4638,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1795},"icon_url":"https://github.com/alpinelinux.png","created_at":"2025-06-05T10:49:56.987Z","updated_at":"2026-08-22T05:05:58.012Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/namespaces"}},{"id":13083930,"name":"python312Packages.defusedxml","ecosystem":"nixpkgs","description":"Python module to defuse XML issues","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":["python"],"namespace":null,"versions_count":1,"first_release_published_at":"2026-02-01T17:57:34.148Z","latest_release_published_at":"2026-02-01T17:57:34.148Z","latest_release_number":"0.8.0rc2","last_synced_at":"2026-03-07T16:08:28.599Z","created_at":"2026-02-01T17:56:50.564Z","updated_at":"2026-08-19T20:36:37.951Z","registry_url":"https://search.nixos.org/packages?channel=24.11\u0026query=python312Packages.defusedxml","install_command":"nix-env -iA nixpkgs.python312Packages.defusedxml","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-24.11/pkgs/development/python-modules/defusedxml/default.nix#L36","metadata":{"nix_attribute":"python3.12-defusedxml-0.8.0rc2","position":"pkgs/development/python-modules/defusedxml/default.nix:36","platforms":["aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux","x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin","i686-cygwin","x86_64-cygwin","aarch64-windows","x86_64-windows","i686-windows","i686-freebsd","x86_64-freebsd"],"broken":false,"insecure":false,"unfree":false,"outputs":["dist","out"],"upstream_ecosystem":"pypi","upstream_name":"defusedxml","upstream_purl":"pkg:pypi/defusedxml"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":550,"open_issues_count":8,"forks_count":59,"subscribers_count":15,"default_branch":"main","last_synced_at":"2026-08-12T16:46:42.124Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-11T14:02:53.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36616505,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-13T02:00:06.325Z","response_time":111,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T20:36:37.951Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/python312Packages.defusedxml?channel=24.11\u0026repository_url=https://channels.nixos.org/nixos-24.11","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/python312Packages.defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/python312Packages.defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/python312Packages.defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/python312Packages.defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/python312Packages.defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/python312Packages.defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/python312Packages.defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/python312Packages.defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/python312Packages.defusedxml/codemeta","maintainers":[{"uuid":"fabaff","login":null,"name":"Fabian Affolter","email":"mail@fabian-affolter.ch","url":"https://github.com/fabaff","packages_count":5052,"html_url":null,"role":null,"created_at":"2026-03-07T16:08:29.098Z","updated_at":"2026-03-07T16:08:29.098Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/maintainers/fabaff/packages"}],"registry":{"name":"nixpkgs-24.11","url":"https://channels.nixos.org/nixos-24.11","ecosystem":"nixpkgs","default":false,"packages_count":121983,"maintainers_count":3777,"namespaces_count":0,"keywords_count":739,"github":"NixOS","metadata":{"funded_packages_count":3170},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.059Z","updated_at":"2026-08-22T05:04:27.355Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/namespaces"}},{"id":12810690,"name":"kodiPackages.defusedxml","ecosystem":"nixpkgs","description":"Defusing XML bombs and other exploits","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-01-26T16:18:14.276Z","latest_release_published_at":"2026-01-26T16:18:14.276Z","latest_release_number":"0.6.0+matrix.1","last_synced_at":"2026-03-07T12:31:06.048Z","created_at":"2026-01-26T16:18:13.947Z","updated_at":"2026-08-19T20:36:47.771Z","registry_url":"https://search.nixos.org/packages?channel=unstable\u0026query=kodiPackages.defusedxml","install_command":"nix-env -iA nixpkgs.kodiPackages.defusedxml","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-unstable/pkgs/applications/video/kodi/addons/defusedxml/default.nix#L28","metadata":{"nix_attribute":"kodi-defusedxml-0.6.0+matrix.1","position":"pkgs/applications/video/kodi/addons/defusedxml/default.nix:28","broken":false,"insecure":false,"unfree":false,"outputs":["out"]},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":550,"open_issues_count":8,"forks_count":59,"subscribers_count":15,"default_branch":"main","last_synced_at":"2026-08-12T16:46:42.124Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-11T14:02:53.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36616505,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-13T02:00:06.325Z","response_time":111,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T20:36:47.771Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/kodiPackages.defusedxml?channel=unstable","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/kodiPackages.defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/kodiPackages.defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/kodiPackages.defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/kodiPackages.defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/kodiPackages.defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/kodiPackages.defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/kodiPackages.defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/kodiPackages.defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/kodiPackages.defusedxml/codemeta","maintainers":[{"uuid":"minijackson","login":null,"name":"Rémi Nicole","email":"minijackson@riseup.net","url":"https://github.com/minijackson","packages_count":270,"html_url":null,"role":null,"created_at":"2026-03-07T12:31:06.662Z","updated_at":"2026-03-07T12:31:06.662Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/maintainers/minijackson/packages"},{"uuid":"aanderse","login":null,"name":"Aaron Andersen","email":"aaron@fosslib.net","url":"https://github.com/aanderse","packages_count":822,"html_url":null,"role":null,"created_at":"2026-03-07T12:31:06.393Z","updated_at":"2026-03-07T12:31:06.393Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/maintainers/aanderse/packages"},{"uuid":"peterhoeg","login":null,"name":"Peter Hoeg","email":"peter@hoeg.com","url":"https://github.com/peterhoeg","packages_count":761,"html_url":null,"role":null,"created_at":"2026-03-07T12:31:06.725Z","updated_at":"2026-03-07T12:31:06.725Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/maintainers/peterhoeg/packages"},{"uuid":"dschrempf","login":null,"name":"Dominik Schrempf","email":"dominik.schrempf@gmail.com","url":"https://github.com/dschrempf","packages_count":119,"html_url":null,"role":null,"created_at":"2026-03-07T12:31:06.520Z","updated_at":"2026-03-07T12:31:06.520Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/maintainers/dschrempf/packages"},{"uuid":"cpages","login":null,"name":"Carles Pagès","email":"page@ruiec.cat","url":"https://github.com/cpages","packages_count":91,"html_url":null,"role":null,"created_at":"2026-03-07T12:31:06.458Z","updated_at":"2026-03-07T12:31:06.458Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/maintainers/cpages/packages"},{"uuid":"nvmd","login":null,"name":"Sergey Kazenyuk","email":"kazenyuk@pm.me","url":"https://github.com/nvmd","packages_count":92,"html_url":null,"role":null,"created_at":"2026-03-07T12:31:06.601Z","updated_at":"2026-03-07T12:31:06.601Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/maintainers/nvmd/packages"}],"registry":{"name":"nixpkgs-unstable","url":"https://channels.nixos.org/nixos-unstable","ecosystem":"nixpkgs","default":true,"packages_count":153756,"maintainers_count":4901,"namespaces_count":0,"keywords_count":3257,"github":"NixOS","metadata":{"funded_packages_count":5674},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:52.762Z","updated_at":"2026-08-22T05:03:04.456Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/namespaces"}},{"id":13942943,"name":"python-defusedxml","ecosystem":"guix","description":"XML bomb protection for Python stdlib modules","homepage":"https://github.com/tiran/defusedxml","licenses":"psfl","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-03-02T16:29:57.189Z","latest_release_published_at":"2026-03-02T16:29:57.189Z","latest_release_number":"0.7.1-0.c744588","last_synced_at":"2026-04-27T14:22:56.746Z","created_at":"2026-03-02T16:29:57.006Z","updated_at":"2026-08-19T20:43:55.849Z","registry_url":"https://packages.guix.gnu.org/packages/python-defusedxml/0.7.1-0.c744588/","install_command":"guix install python-defusedxml","documentation_url":"https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/xml.scm#n1559","metadata":{"location":"gnu/packages/xml.scm:1559","variable_name":"python-defusedxml"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":550,"open_issues_count":8,"forks_count":59,"subscribers_count":15,"default_branch":"main","last_synced_at":"2026-08-12T16:46:42.124Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-11T14:02:53.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36616505,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-13T02:00:06.325Z","response_time":111,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T20:43:55.848Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:guix/python-defusedxml","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/guix/python-defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/guix/python-defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/guix/python-defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/python-defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/python-defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/python-defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/python-defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/python-defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/python-defusedxml/codemeta","maintainers":[],"registry":{"name":"guix","url":"https://guix.gnu.org","ecosystem":"guix","default":true,"packages_count":32302,"maintainers_count":0,"namespaces_count":0,"keywords_count":1654,"github":"guix-mirror","metadata":{"funded_packages_count":1199},"icon_url":"https://github.com/guix-mirror.png","created_at":"2026-03-02T16:23:46.981Z","updated_at":"2026-08-22T05:04:53.021Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/guix/namespaces"}},{"id":6204084,"name":"py3-defusedxml","ecosystem":"alpine","description":"XML bomb protection for Python stdlib modules","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2019-11-05T15:33:56.000Z","latest_release_published_at":"2019-11-05T15:33:56.000Z","latest_release_number":"0.6.0-r1","last_synced_at":"2026-04-03T01:00:22.437Z","created_at":"2023-02-01T02:21:09.523Z","updated_at":"2026-08-19T21:00:20.682Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.13/community/x86_64/py3-defusedxml","install_command":"apk add py3-defusedxml","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":550,"open_issues_count":8,"forks_count":59,"subscribers_count":15,"default_branch":"main","last_synced_at":"2026-08-12T16:46:42.124Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-11T14:02:53.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36616505,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-13T02:00:06.325Z","response_time":111,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T21:00:20.682Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":9.376124343383465,"stargazers_count":8.483845434266389,"forks_count":10.880046053104987,"average":7.185003957688711},"purl":"pkg:apk/alpine/py3-defusedxml?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.13","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.13/packages/py3-defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.13/packages/py3-defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.13/packages/py3-defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.13/packages/py3-defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.13/packages/py3-defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.13/packages/py3-defusedxml/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":34,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2023-02-04T19:56:57.527Z","updated_at":"2023-02-04T19:56:57.527Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.13/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-v3.13","url":"https://pkgs.alpinelinux.org/packages?branch=v3.13","ecosystem":"alpine","default":false,"packages_count":13897,"maintainers_count":231,"namespaces_count":2,"keywords_count":1898,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":599},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.734Z","updated_at":"2026-08-19T05:03:05.556Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.13/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.13/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.13/namespaces"}},{"id":13533264,"name":"defusedxml","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/tiran/defusedxml","licenses":"other","normalized_licenses":[],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-11T00:04:26.783Z","latest_release_published_at":"2026-02-11T00:04:26.783Z","latest_release_number":"0.7.1-2","last_synced_at":"2026-03-11T01:28:21.635Z","created_at":"2026-02-11T00:04:26.607Z","updated_at":"2026-08-19T21:00:20.874Z","registry_url":"https://launchpad.net/ubuntu/+source/defusedxml","install_command":"apt-get install defusedxml","documentation_url":null,"metadata":{"component":"main","architecture":"all","priority":"optional","binary":"python3-defusedxml","standards_version":"4.6.1","maintainer":"Debian Python Team \u003cteam+python@tracker.debian.org\u003e","build_depends":"dh-python, python3-all, debhelper-compat (= 13), python3-setuptools","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":550,"open_issues_count":8,"forks_count":59,"subscribers_count":15,"default_branch":"main","last_synced_at":"2026-08-12T16:46:42.124Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-11T14:02:53.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36616505,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-13T02:00:06.325Z","response_time":111,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T21:00:20.874Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/defusedxml?arch=source\u0026distro=ubuntu-23.04\u0026repository_url=https://launchpad.net/ubuntu/lunar","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/defusedxml/codemeta","maintainers":[],"registry":{"name":"ubuntu-23.04","url":"https://launchpad.net/ubuntu/lunar","ecosystem":"ubuntu","default":false,"packages_count":36116,"maintainers_count":0,"namespaces_count":4,"keywords_count":1000,"github":"ubuntu","metadata":{"codename":"lunar","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":1073},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:49.117Z","updated_at":"2026-08-22T05:05:45.471Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/namespaces"}},{"id":6109808,"name":"py2-defusedxml","ecosystem":"alpine","description":"XML bomb protection for Python stdlib modules (for python2)","homepage":"https://github.com/tiran/defusedxml","licenses":"GPL","normalized_licenses":["GPL-2.0+"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2018-05-21T14:48:33.000Z","latest_release_published_at":"2018-05-21T14:48:33.000Z","latest_release_number":"0.5.0-r0","last_synced_at":"2026-04-03T01:09:31.086Z","created_at":"2023-01-31T21:15:25.438Z","updated_at":"2026-08-19T21:14:05.656Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.8/community/x86_64/py2-defusedxml","install_command":"apk add py2-defusedxml","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T21:14:05.656Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":25.225414132941914,"stargazers_count":5.776892430278884,"forks_count":7.821346194170687,"average":9.705913189347871},"purl":"pkg:apk/alpine/py2-defusedxml?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.8","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py2-defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py2-defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py2-defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/packages/py2-defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/packages/py2-defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/packages/py2-defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/packages/py2-defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/packages/py2-defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/packages/py2-defusedxml/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":25,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2023-02-01T08:53:24.733Z","updated_at":"2023-02-01T08:53:24.733Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-v3.8","url":"https://pkgs.alpinelinux.org/packages?branch=v3.8","ecosystem":"alpine","default":false,"packages_count":9538,"maintainers_count":148,"namespaces_count":2,"keywords_count":770,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":337},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.817Z","updated_at":"2026-08-12T05:03:16.204Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/namespaces"}},{"id":6092985,"name":"py-defusedxml","ecosystem":"alpine","description":"XML bomb protection for Python stdlib modules","homepage":"https://github.com/tiran/defusedxml","licenses":"GPL","normalized_licenses":["GPL-2.0+"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2018-12-24T16:41:34.000Z","latest_release_published_at":"2018-12-24T16:41:34.000Z","latest_release_number":"0.5.0-r0","last_synced_at":"2026-04-03T01:00:24.052Z","created_at":"2023-01-31T20:26:25.151Z","updated_at":"2026-08-19T21:08:39.433Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.9/community/x86_64/py-defusedxml","install_command":"apk add py-defusedxml","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":550,"open_issues_count":8,"forks_count":59,"subscribers_count":15,"default_branch":"main","last_synced_at":"2026-08-12T16:46:42.124Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-11T14:02:53.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36616505,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-13T02:00:06.325Z","response_time":111,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T21:08:39.432Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":23.15109241973536,"stargazers_count":6.185249769207099,"forks_count":8.22648476766848,"average":9.390706739152733},"purl":"pkg:apk/alpine/py-defusedxml?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.9","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py-defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py-defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py-defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/packages/py-defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/packages/py-defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/packages/py-defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/packages/py-defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/packages/py-defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/packages/py-defusedxml/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":48,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2023-02-01T06:31:46.089Z","updated_at":"2023-02-01T06:31:46.089Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-v3.9","url":"https://pkgs.alpinelinux.org/packages?branch=v3.9","ecosystem":"alpine","default":false,"packages_count":9749,"maintainers_count":154,"namespaces_count":2,"keywords_count":832,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":361},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.805Z","updated_at":"2026-08-18T05:03:05.558Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/namespaces"}},{"id":10344087,"name":"py3-defusedxml","ecosystem":"alpine","description":"XML bomb protection for Python stdlib modules","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_number":"0.7.1-r5","last_synced_at":"2026-04-03T01:27:02.340Z","created_at":"2024-06-11T09:43:34.449Z","updated_at":"2026-08-19T21:08:39.708Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.20/community/x86_64/py3-defusedxml","install_command":"apk add py3-defusedxml","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":550,"open_issues_count":8,"forks_count":59,"subscribers_count":15,"default_branch":"main","last_synced_at":"2026-08-12T16:46:42.124Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-11T14:02:53.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36616505,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-13T02:00:06.325Z","response_time":111,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T21:08:39.708Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/py3-defusedxml?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.20","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/py3-defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/py3-defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/py3-defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/py3-defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/py3-defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/py3-defusedxml/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":42,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2024-06-12T01:03:57.502Z","updated_at":"2024-06-12T01:03:57.502Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-v3.20","url":"https://pkgs.alpinelinux.org/packages?branch=v3.20","ecosystem":"alpine","default":false,"packages_count":24162,"maintainers_count":405,"namespaces_count":2,"keywords_count":4251,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1535},"icon_url":"https://github.com/alpinelinux.png","created_at":"2024-06-07T11:51:39.915Z","updated_at":"2026-08-22T05:06:09.013Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/namespaces"}},{"id":6051083,"name":"py3-defusedxml","ecosystem":"alpine","description":"XML bomb protection for Python stdlib modules","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":4,"first_release_published_at":"2022-11-22T19:33:35.000Z","latest_release_published_at":"2026-03-15T22:47:28.000Z","latest_release_number":"0.7.1-r6","last_synced_at":"2026-08-03T12:51:19.548Z","created_at":"2023-01-31T18:25:42.451Z","updated_at":"2026-08-19T21:08:39.711Z","registry_url":"https://pkgs.alpinelinux.org/package/edge/community/x86_64/py3-defusedxml","install_command":"apk add py3-defusedxml","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":550,"open_issues_count":8,"forks_count":59,"subscribers_count":15,"default_branch":"main","last_synced_at":"2026-08-12T16:46:42.124Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-11T14:02:53.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36616505,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-13T02:00:06.325Z","response_time":111,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T21:08:39.711Z","dependent_packages_count":4,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":1.745460237946149,"stargazers_count":14.985128365685659,"forks_count":17.857701941139638,"average":8.647072636192862},"purl":"pkg:apk/alpine/py3-defusedxml?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=edge","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/py3-defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/py3-defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/py3-defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/py3-defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/py3-defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/py3-defusedxml/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":"robertoguimaraes8@gmail.com","url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":68,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2023-01-31T21:33:11.107Z","updated_at":"2023-01-31T21:33:11.107Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-edge","url":"https://pkgs.alpinelinux.org/packages?branch=edge","ecosystem":"alpine","default":false,"packages_count":39920,"maintainers_count":905,"namespaces_count":3,"keywords_count":6584,"github":"alpinelinux","metadata":{"repos":["main","community","testing"],"funded_packages_count":2938},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.616Z","updated_at":"2026-08-22T05:05:25.017Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/namespaces"}},{"id":6103227,"name":"py3-defusedxml","ecosystem":"alpine","description":"XML bomb protection for Python stdlib modules","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2021-12-15T19:18:06.000Z","latest_release_published_at":"2021-12-15T19:18:06.000Z","latest_release_number":"0.7.1-r2","last_synced_at":"2026-04-03T01:27:47.191Z","created_at":"2023-01-31T20:54:41.561Z","updated_at":"2026-08-19T21:12:11.972Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.17/community/x86_64/py3-defusedxml","install_command":"apk add py3-defusedxml","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T21:12:11.972Z","dependent_packages_count":4,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":7.8926686875491185,"stargazers_count":12.692264511058719,"forks_count":15.521499943864375,"average":9.026608285618053},"purl":"pkg:apk/alpine/py3-defusedxml?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.17","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.17/packages/py3-defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.17/packages/py3-defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.17/packages/py3-defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.17/packages/py3-defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.17/packages/py3-defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.17/packages/py3-defusedxml/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":34,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2023-02-01T08:02:20.272Z","updated_at":"2023-02-01T08:02:20.272Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.17/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-v3.17","url":"https://pkgs.alpinelinux.org/packages?branch=v3.17","ecosystem":"alpine","default":false,"packages_count":17817,"maintainers_count":352,"namespaces_count":2,"keywords_count":3375,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1065},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.642Z","updated_at":"2026-08-22T05:06:16.255Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.17/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.17/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.17/namespaces"}},{"id":6183192,"name":"py3-defusedxml","ecosystem":"alpine","description":"XML bomb protection for Python stdlib modules","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2021-04-05T18:18:26.000Z","latest_release_published_at":"2021-04-05T18:18:26.000Z","latest_release_number":"0.7.1-r1","last_synced_at":"2026-04-03T01:26:08.768Z","created_at":"2023-02-01T00:42:11.086Z","updated_at":"2026-08-19T21:14:05.476Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.15/community/x86_64/py3-defusedxml","install_command":"apk add py3-defusedxml","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T21:14:05.475Z","dependent_packages_count":8,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":3.6261587942233713,"stargazers_count":9.53522103802737,"forks_count":12.164974459229363,"average":6.331588572870026},"purl":"pkg:apk/alpine/py3-defusedxml?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.15","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.15/packages/py3-defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.15/packages/py3-defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.15/packages/py3-defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.15/packages/py3-defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.15/packages/py3-defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.15/packages/py3-defusedxml/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":33,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2023-02-04T19:56:58.202Z","updated_at":"2023-02-04T19:56:58.202Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.15/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-v3.15","url":"https://pkgs.alpinelinux.org/packages?branch=v3.15","ecosystem":"alpine","default":false,"packages_count":15857,"maintainers_count":287,"namespaces_count":2,"keywords_count":2466,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":799},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.684Z","updated_at":"2026-08-18T05:05:23.265Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.15/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.15/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.15/namespaces"}},{"id":6077530,"name":"py-defusedxml","ecosystem":"alpine","description":"XML bomb protection for Python stdlib modules","homepage":"https://github.com/tiran/defusedxml","licenses":"GPL","normalized_licenses":["GPL-2.0+"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2019-05-08T15:47:49.000Z","latest_release_published_at":"2019-05-08T15:47:49.000Z","latest_release_number":"0.5.0-r1","last_synced_at":"2026-04-01T01:35:25.534Z","created_at":"2023-01-31T19:47:39.400Z","updated_at":"2026-08-19T21:19:22.898Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.10/community/x86_64/py-defusedxml","install_command":"apk add py-defusedxml","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T21:19:22.898Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":21.460348162475825,"stargazers_count":6.5473887814313345,"forks_count":8.868471953578338,"average":9.219052224371374},"purl":"pkg:apk/alpine/py-defusedxml?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.10","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py-defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py-defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py-defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/packages/py-defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/packages/py-defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/packages/py-defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/packages/py-defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/packages/py-defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/packages/py-defusedxml/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":50,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2023-02-01T04:05:36.100Z","updated_at":"2023-02-01T04:05:36.100Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-v3.10","url":"https://pkgs.alpinelinux.org/packages?branch=v3.10","ecosystem":"alpine","default":false,"packages_count":10340,"maintainers_count":177,"namespaces_count":2,"keywords_count":925,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":401},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.780Z","updated_at":"2026-08-18T05:04:45.736Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/namespaces"}},{"id":7604784,"name":"py3-defusedxml-pyc","ecosystem":"alpine","description":"Precompiled Python bytecode for py3-defusedxml","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":3,"first_release_published_at":"2023-04-19T22:10:20.000Z","latest_release_published_at":"2026-03-15T22:47:28.000Z","latest_release_number":"0.7.1-r6","last_synced_at":"2026-08-03T12:51:27.870Z","created_at":"2023-04-19T22:34:37.782Z","updated_at":"2026-08-19T21:19:24.559Z","registry_url":"https://pkgs.alpinelinux.org/package/edge/community/x86_64/py3-defusedxml-pyc","install_command":"apk add py3-defusedxml-pyc","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T21:19:24.559Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":14.250941315178945,"stargazers_count":15.24028842160897,"forks_count":18.396315451696932,"average":11.971886297121213},"purl":"pkg:apk/alpine/py3-defusedxml-pyc?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=edge","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-defusedxml-pyc","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-defusedxml-pyc","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-defusedxml-pyc/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/py3-defusedxml-pyc/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/py3-defusedxml-pyc/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/py3-defusedxml-pyc/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/py3-defusedxml-pyc/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/py3-defusedxml-pyc/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/py3-defusedxml-pyc/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":"robertoguimaraes8@gmail.com","url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":68,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2023-04-20T05:17:06.703Z","updated_at":"2023-04-20T05:17:06.703Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-edge","url":"https://pkgs.alpinelinux.org/packages?branch=edge","ecosystem":"alpine","default":false,"packages_count":39920,"maintainers_count":905,"namespaces_count":3,"keywords_count":6584,"github":"alpinelinux","metadata":{"repos":["main","community","testing"],"funded_packages_count":2938},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.616Z","updated_at":"2026-08-22T05:05:25.017Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/namespaces"}},{"id":12885695,"name":"python314Packages.defusedxml","ecosystem":"nixpkgs","description":"Python module to defuse XML issues","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":["python"],"namespace":null,"versions_count":1,"first_release_published_at":"2026-01-27T06:53:41.256Z","latest_release_published_at":"2026-01-27T06:53:41.256Z","latest_release_number":"0.8.0rc2","last_synced_at":"2026-08-11T18:10:21.700Z","created_at":"2026-01-27T06:53:41.042Z","updated_at":"2026-08-19T21:31:12.507Z","registry_url":"https://search.nixos.org/packages?channel=unstable\u0026query=python314Packages.defusedxml","install_command":"nix-env -iA nixpkgs.python314Packages.defusedxml","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-unstable/pkgs/development/python-modules/defusedxml/default.nix#L36","metadata":{"nix_attribute":"python3.14-defusedxml-0.8.0rc2","position":"pkgs/development/python-modules/defusedxml/default.nix:36","platforms":["aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux","x86_64-darwin","aarch64-darwin","aarch64-windows","x86_64-windows","i686-windows","i686-freebsd","x86_64-freebsd","aarch64-freebsd"],"broken":false,"insecure":false,"unfree":false,"outputs":["dist","out"],"upstream_ecosystem":"pypi","upstream_name":"defusedxml","upstream_purl":"pkg:pypi/defusedxml"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T21:31:12.507Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":4.841263063856062,"forks_count":4.951685267783828,"docker_downloads_count":null,"average":2.448237082909973},"purl":"pkg:nix/python314Packages.defusedxml?channel=unstable","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/python314Packages.defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/python314Packages.defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/python314Packages.defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/python314Packages.defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/python314Packages.defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/python314Packages.defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/python314Packages.defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/python314Packages.defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/python314Packages.defusedxml/codemeta","maintainers":[{"uuid":"fabaff","login":null,"name":"Fabian Affolter","email":"mail@fabian-affolter.ch","url":"https://github.com/fabaff","packages_count":5658,"html_url":null,"role":null,"created_at":"2026-03-05T10:12:25.604Z","updated_at":"2026-03-05T10:12:25.604Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/maintainers/fabaff/packages"}],"registry":{"name":"nixpkgs-unstable","url":"https://channels.nixos.org/nixos-unstable","ecosystem":"nixpkgs","default":true,"packages_count":153756,"maintainers_count":4901,"namespaces_count":0,"keywords_count":3257,"github":"NixOS","metadata":{"funded_packages_count":5674},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:52.762Z","updated_at":"2026-08-22T05:03:04.456Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/namespaces"}},{"id":13440347,"name":"defusedxml","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/tiran/defusedxml","licenses":"other","normalized_licenses":[],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-08T04:05:46.535Z","latest_release_published_at":"2026-02-08T04:05:46.535Z","latest_release_number":"0.7.1-2","last_synced_at":"2026-03-08T04:52:29.157Z","created_at":"2026-02-08T04:05:45.959Z","updated_at":"2026-08-19T21:31:12.577Z","registry_url":"https://launchpad.net/ubuntu/+source/defusedxml","install_command":"apt-get install defusedxml","documentation_url":null,"metadata":{"component":"main","architecture":"all","priority":"optional","binary":"python3-defusedxml","standards_version":"4.6.1","maintainer":"Debian Python Team \u003cteam+python@tracker.debian.org\u003e","build_depends":"dh-python, python3-all, debhelper-compat (= 13), python3-setuptools","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T21:31:12.577Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/defusedxml?arch=source\u0026distro=ubuntu-24.10\u0026repository_url=https://launchpad.net/ubuntu/oracular","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/defusedxml/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.10","url":"https://launchpad.net/ubuntu/oracular","ecosystem":"ubuntu","default":false,"packages_count":38437,"maintainers_count":0,"namespaces_count":4,"keywords_count":1440,"github":"ubuntu","metadata":{"codename":"oracular","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":1278},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.028Z","updated_at":"2026-08-22T05:04:50.434Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/namespaces"}},{"id":13008514,"name":"py3-defusedxml-pyc","ecosystem":"alpine","description":"Precompiled Python bytecode for py3-defusedxml","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_number":"0.7.1-r5","last_synced_at":"2026-04-13T20:08:59.394Z","created_at":"2026-01-31T00:39:04.140Z","updated_at":"2026-08-19T21:33:15.085Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.23/community/x86_64/py3-defusedxml-pyc","install_command":"apk add py3-defusedxml-pyc","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T21:33:15.085Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/py3-defusedxml-pyc?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.23","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-defusedxml-pyc","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-defusedxml-pyc","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-defusedxml-pyc/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/py3-defusedxml-pyc/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/py3-defusedxml-pyc/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/py3-defusedxml-pyc/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/py3-defusedxml-pyc/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/py3-defusedxml-pyc/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/py3-defusedxml-pyc/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":34,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2026-03-04T05:53:31.681Z","updated_at":"2026-03-04T05:53:31.681Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-v3.23","url":"https://pkgs.alpinelinux.org/packages?branch=v3.23","ecosystem":"alpine","default":false,"packages_count":27576,"maintainers_count":428,"namespaces_count":2,"keywords_count":189,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1031},"icon_url":"https://github.com/alpinelinux.png","created_at":"2026-01-24T14:35:50.739Z","updated_at":"2026-08-22T05:04:51.681Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/namespaces"}},{"id":6195774,"name":"py3-defusedxml","ecosystem":"alpine","description":"XML bomb protection for Python stdlib modules","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2021-04-05T18:18:26.000Z","latest_release_published_at":"2021-04-05T18:18:26.000Z","latest_release_number":"0.7.1-r1","last_synced_at":"2026-04-03T01:09:29.840Z","created_at":"2023-02-01T01:42:39.249Z","updated_at":"2026-08-19T21:33:15.719Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.14/community/x86_64/py3-defusedxml","install_command":"apk add py3-defusedxml","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T21:33:15.718Z","dependent_packages_count":7,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":2.6540981414627627,"stargazers_count":8.62414761331729,"forks_count":11.19802112581896,"average":5.619066720149753},"purl":"pkg:apk/alpine/py3-defusedxml?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.14","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.14/packages/py3-defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.14/packages/py3-defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.14/packages/py3-defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.14/packages/py3-defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.14/packages/py3-defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.14/packages/py3-defusedxml/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":33,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2023-02-04T19:56:57.835Z","updated_at":"2023-02-04T19:56:57.835Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.14/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-v3.14","url":"https://pkgs.alpinelinux.org/packages?branch=v3.14","ecosystem":"alpine","default":false,"packages_count":14958,"maintainers_count":258,"namespaces_count":2,"keywords_count":2179,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":682},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.706Z","updated_at":"2026-08-18T05:04:15.407Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.14/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.14/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.14/namespaces"}},{"id":13194247,"name":"python311Packages.defusedxml","ecosystem":"nixpkgs","description":"Python module to defuse XML issues","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":["python"],"namespace":null,"versions_count":1,"first_release_published_at":"2026-02-02T00:19:26.313Z","latest_release_published_at":"2026-02-02T00:19:26.313Z","latest_release_number":"0.7.1","last_synced_at":"2026-05-01T13:40:09.164Z","created_at":"2026-02-02T00:19:15.137Z","updated_at":"2026-08-19T21:34:43.293Z","registry_url":"https://search.nixos.org/packages?channel=24.05\u0026query=python311Packages.defusedxml","install_command":"nix-env -iA nixpkgs.python311Packages.defusedxml","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-24.05/pkgs/development/python-modules/defusedxml/default.nix#L25","metadata":{"nix_attribute":"python3.11-defusedxml-0.7.1","position":"pkgs/development/python-modules/defusedxml/default.nix:25","platforms":["aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux","x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin","i686-cygwin","x86_64-cygwin","x86_64-windows","i686-windows"],"broken":false,"insecure":false,"unfree":false,"outputs":["dist","out"],"upstream_ecosystem":"pypi","upstream_name":"defusedxml","upstream_purl":"pkg:pypi/defusedxml"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T21:34:43.293Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/python311Packages.defusedxml?channel=24.05\u0026repository_url=https://channels.nixos.org/nixos-24.05","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/python311Packages.defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/python311Packages.defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/python311Packages.defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/python311Packages.defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/python311Packages.defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/python311Packages.defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/python311Packages.defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/python311Packages.defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/python311Packages.defusedxml/codemeta","maintainers":[{"uuid":"fabaff","login":null,"name":"Fabian Affolter","email":"mail@fabian-affolter.ch","url":"https://github.com/fabaff","packages_count":4856,"html_url":null,"role":null,"created_at":"2026-03-07T02:04:49.203Z","updated_at":"2026-03-07T02:04:49.203Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/maintainers/fabaff/packages"}],"registry":{"name":"nixpkgs-24.05","url":"https://channels.nixos.org/nixos-24.05","ecosystem":"nixpkgs","default":false,"packages_count":116156,"maintainers_count":3383,"namespaces_count":0,"keywords_count":654,"github":"NixOS","metadata":{"funded_packages_count":2831},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.309Z","updated_at":"2026-08-22T05:00:20.407Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/namespaces"}},{"id":7778483,"name":"py3-defusedxml-pyc","ecosystem":"alpine","description":"Precompiled Python bytecode for py3-defusedxml","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2023-04-19T22:10:20.000Z","latest_release_published_at":"2023-04-19T22:10:20.000Z","latest_release_number":"0.7.1-r4","last_synced_at":"2026-04-03T01:27:39.653Z","created_at":"2023-05-22T14:18:34.127Z","updated_at":"2026-08-19T21:36:39.887Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.18/community/x86_64/py3-defusedxml-pyc","install_command":"apk add py3-defusedxml-pyc","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T21:36:39.887Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":13.650192010373546,"forks_count":16.93182384918458,"docker_downloads_count":null,"average":7.6455039648895315},"purl":"pkg:apk/alpine/py3-defusedxml-pyc?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.18","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-defusedxml-pyc","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-defusedxml-pyc","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-defusedxml-pyc/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/py3-defusedxml-pyc/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/py3-defusedxml-pyc/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/py3-defusedxml-pyc/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/py3-defusedxml-pyc/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/py3-defusedxml-pyc/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/py3-defusedxml-pyc/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":44,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2023-05-23T07:06:55.499Z","updated_at":"2023-05-23T07:06:55.499Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-v3.18","url":"https://pkgs.alpinelinux.org/packages?branch=v3.18","ecosystem":"alpine","default":false,"packages_count":20068,"maintainers_count":367,"namespaces_count":2,"keywords_count":3639,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1238},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-05-22T10:43:30.622Z","updated_at":"2026-08-22T05:06:15.110Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/namespaces"}},{"id":6146976,"name":"py3-defusedxml","ecosystem":"alpine","description":"XML bomb protection for Python stdlib modules","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2021-12-15T19:18:06.000Z","latest_release_published_at":"2021-12-15T19:18:06.000Z","latest_release_number":"0.7.1-r2","last_synced_at":"2026-04-03T01:26:11.967Z","created_at":"2023-01-31T23:07:08.467Z","updated_at":"2026-08-19T21:40:08.556Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.16/community/x86_64/py3-defusedxml","install_command":"apk add py3-defusedxml","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T21:40:08.556Z","dependent_packages_count":16,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":3.7917473733638554,"stargazers_count":10.324587662147092,"forks_count":13.053941421611787,"average":6.792569114280684},"purl":"pkg:apk/alpine/py3-defusedxml?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.16","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.16/packages/py3-defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.16/packages/py3-defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.16/packages/py3-defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.16/packages/py3-defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.16/packages/py3-defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.16/packages/py3-defusedxml/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":31,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2023-02-01T14:04:48.901Z","updated_at":"2023-02-01T14:04:48.901Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.16/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-v3.16","url":"https://pkgs.alpinelinux.org/packages?branch=v3.16","ecosystem":"alpine","default":false,"packages_count":17040,"maintainers_count":328,"namespaces_count":2,"keywords_count":2855,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":947},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.662Z","updated_at":"2026-08-22T05:05:52.310Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.16/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.16/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.16/namespaces"}},{"id":6093548,"name":"py2-defusedxml","ecosystem":"alpine","description":"XML bomb protection for Python stdlib modules (for python2)","homepage":"https://github.com/tiran/defusedxml","licenses":"GPL","normalized_licenses":["GPL-2.0+"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2018-12-24T16:41:28.000Z","latest_release_published_at":"2018-12-24T16:41:28.000Z","latest_release_number":"0.5.0-r0","last_synced_at":"2026-04-03T01:00:28.006Z","created_at":"2023-01-31T20:27:52.413Z","updated_at":"2026-08-19T21:49:40.105Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.9/community/x86_64/py2-defusedxml","install_command":"apk add py2-defusedxml","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T21:49:40.105Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":23.15109241973536,"stargazers_count":6.185249769207099,"forks_count":8.22648476766848,"average":9.390706739152733},"purl":"pkg:apk/alpine/py2-defusedxml?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.9","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py2-defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py2-defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py2-defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/packages/py2-defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/packages/py2-defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/packages/py2-defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/packages/py2-defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/packages/py2-defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/packages/py2-defusedxml/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":48,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2023-02-01T06:36:45.996Z","updated_at":"2023-02-01T06:36:45.996Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-v3.9","url":"https://pkgs.alpinelinux.org/packages?branch=v3.9","ecosystem":"alpine","default":false,"packages_count":9749,"maintainers_count":154,"namespaces_count":2,"keywords_count":832,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":361},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.805Z","updated_at":"2026-08-18T05:03:05.558Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/namespaces"}},{"id":6236209,"name":"py3-defusedxml","ecosystem":"alpine","description":"XML bomb protection for Python stdlib modules","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2019-11-05T15:33:56.000Z","latest_release_published_at":"2019-11-05T15:33:56.000Z","latest_release_number":"0.6.0-r1","last_synced_at":"2026-04-03T01:17:32.781Z","created_at":"2023-02-01T04:49:08.796Z","updated_at":"2026-08-19T22:01:43.605Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.11/community/x86_64/py3-defusedxml","install_command":"apk add py3-defusedxml","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T22:01:43.604Z","dependent_packages_count":3,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":6.0227071137129675,"stargazers_count":7.113712967890722,"forks_count":9.25137484477559,"average":5.59694873159482},"purl":"pkg:apk/alpine/py3-defusedxml?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.11","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.11/packages/py3-defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.11/packages/py3-defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.11/packages/py3-defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.11/packages/py3-defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.11/packages/py3-defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.11/packages/py3-defusedxml/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":36,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2023-03-28T01:35:11.905Z","updated_at":"2023-03-28T01:35:11.905Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.11/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-v3.11","url":"https://pkgs.alpinelinux.org/packages?branch=v3.11","ecosystem":"alpine","default":false,"packages_count":11274,"maintainers_count":184,"namespaces_count":2,"keywords_count":1196,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":408},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.767Z","updated_at":"2026-08-22T05:04:27.915Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.11/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.11/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.11/namespaces"}},{"id":13294808,"name":"python310Packages.defusedxml","ecosystem":"nixpkgs","description":"Python module to defuse XML issues","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":["python"],"namespace":null,"versions_count":1,"first_release_published_at":"2026-02-02T06:24:01.081Z","latest_release_published_at":"2026-02-02T06:24:01.081Z","latest_release_number":"0.7.1","last_synced_at":"2026-03-08T23:27:46.793Z","created_at":"2026-02-02T06:23:53.272Z","updated_at":"2026-08-19T22:07:59.932Z","registry_url":"https://search.nixos.org/packages?channel=23.11\u0026query=python310Packages.defusedxml","install_command":"nix-env -iA nixpkgs.python310Packages.defusedxml","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-23.11/pkgs/development/python-modules/defusedxml/default.nix#L23","metadata":{"nix_attribute":"python3.10-defusedxml-0.7.1","position":"pkgs/development/python-modules/defusedxml/default.nix:23","platforms":["aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux","x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin","i686-cygwin","x86_64-cygwin","x86_64-windows","i686-windows"],"broken":false,"insecure":false,"unfree":false,"outputs":["dist","out"],"upstream_ecosystem":"pypi","upstream_name":"defusedxml","upstream_purl":"pkg:pypi/defusedxml"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T22:07:59.932Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/python310Packages.defusedxml?channel=23.11\u0026repository_url=https://channels.nixos.org/nixos-23.11","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/python310Packages.defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/python310Packages.defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/python310Packages.defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/python310Packages.defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/python310Packages.defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/python310Packages.defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/python310Packages.defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/python310Packages.defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/python310Packages.defusedxml/codemeta","maintainers":[{"uuid":"fabaff","login":null,"name":"Fabian Affolter","email":"mail@fabian-affolter.ch","url":"https://github.com/fabaff","packages_count":4331,"html_url":null,"role":null,"created_at":"2026-03-08T23:27:46.971Z","updated_at":"2026-03-08T23:27:46.971Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/maintainers/fabaff/packages"}],"registry":{"name":"nixpkgs-23.11","url":"https://channels.nixos.org/nixos-23.11","ecosystem":"nixpkgs","default":false,"packages_count":108178,"maintainers_count":2997,"namespaces_count":0,"keywords_count":569,"github":"NixOS","metadata":{"funded_packages_count":2963},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.577Z","updated_at":"2026-08-22T05:04:32.698Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/namespaces"}},{"id":13638651,"name":"defusedxml","ecosystem":"debian","description":null,"homepage":"https://github.com/tiran/defusedxml","licenses":"other","normalized_licenses":[],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T01:31:37.460Z","latest_release_published_at":"2026-02-12T01:31:37.460Z","latest_release_number":"0.7.1-3","last_synced_at":"2026-03-13T16:13:14.022Z","created_at":"2026-02-12T01:31:37.240Z","updated_at":"2026-08-19T22:14:27.446Z","registry_url":"https://tracker.debian.org/pkg/defusedxml","install_command":"apt-get install defusedxml","documentation_url":"https://packages.debian.org/trixie/defusedxml","metadata":{"component":"main","architecture":"all","priority":"source","binary":"python3-defusedxml","standards_version":"4.6.1","maintainer":"Debian Python Team \u003cteam+python@tracker.debian.org\u003e","build_depends":"dh-python, python3-all, debhelper-compat (= 13), python3-setuptools","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T22:14:27.446Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/defusedxml?arch=source\u0026distro=debian-13\u0026repository_url=https://packages.debian.org/trixie","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/defusedxml/codemeta","maintainers":[],"registry":{"name":"debian-13","url":"https://packages.debian.org/trixie","ecosystem":"debian","default":false,"packages_count":38024,"maintainers_count":0,"namespaces_count":4,"keywords_count":1985,"github":"debian","metadata":{"codename":"trixie","funded_packages_count":1651},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:50.448Z","updated_at":"2026-08-22T05:04:48.554Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/namespaces"}},{"id":7778482,"name":"py3-defusedxml","ecosystem":"alpine","description":"XML bomb protection for Python stdlib modules","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2023-04-19T22:10:20.000Z","latest_release_published_at":"2023-04-19T22:10:20.000Z","latest_release_number":"0.7.1-r4","last_synced_at":"2026-04-03T01:27:40.044Z","created_at":"2023-05-22T14:18:33.879Z","updated_at":"2026-08-19T22:18:23.948Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.18/community/x86_64/py3-defusedxml","install_command":"apk add py3-defusedxml","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T22:18:23.947Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":13.650192010373546,"forks_count":16.93182384918458,"docker_downloads_count":null,"average":7.6455039648895315},"purl":"pkg:apk/alpine/py3-defusedxml?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.18","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/py3-defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/py3-defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/py3-defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/py3-defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/py3-defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/py3-defusedxml/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":44,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2023-05-23T07:06:56.757Z","updated_at":"2023-05-23T07:06:56.757Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-v3.18","url":"https://pkgs.alpinelinux.org/packages?branch=v3.18","ecosystem":"alpine","default":false,"packages_count":20068,"maintainers_count":367,"namespaces_count":2,"keywords_count":3639,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1238},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-05-22T10:43:30.622Z","updated_at":"2026-08-22T05:06:15.110Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/namespaces"}},{"id":14512088,"name":"dev-python/defusedxml","ecosystem":"gentoo","description":"XML bomb protection for Python stdlib modules, an xml serialiser","homepage":"https://github.com/tiran/defusedxml/","licenses":"PSF-2","normalized_licenses":["libpng-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":["~alpha","amd64","arm","arm64","~hppa","~loong","~mips","ppc","ppc64","~riscv","~s390","~sparc","x86"],"namespace":"dev-python","versions_count":1,"first_release_published_at":"2026-05-11T16:39:47.000Z","latest_release_published_at":"2026-05-11T16:39:47.000Z","latest_release_number":"0.8.0_rc2","last_synced_at":"2026-06-30T01:48:59.356Z","created_at":"2026-05-27T02:22:08.611Z","updated_at":"2026-08-19T22:20:13.200Z","registry_url":"https://packages.gentoo.org/packages/dev-python/defusedxml","install_command":"emerge dev-python/defusedxml","documentation_url":"https://packages.gentoo.org/packages/dev-python/defusedxml","metadata":{"category":"dev-python","slot":"0","eapi":"8","inherit":"distutils-r1","iuse":"examples python_targets_python3_12 python_targets_python3_13 python_targets_python3_14 python_targets_python3_15"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T22:20:13.200Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:gentoo/dev-python/defusedxml","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/gentoo/dev-python/defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/gentoo/dev-python/defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/gentoo/dev-python/defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/packages/dev-python%2Fdefusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/packages/dev-python%2Fdefusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/packages/dev-python%2Fdefusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/packages/dev-python%2Fdefusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/packages/dev-python%2Fdefusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/packages/dev-python%2Fdefusedxml/codemeta","maintainers":[],"registry":{"name":"gentoo-portage","url":"https://packages.gentoo.org/","ecosystem":"gentoo","default":true,"packages_count":19521,"maintainers_count":0,"namespaces_count":174,"keywords_count":1054,"github":"gentoo","metadata":{"snapshot_url":"https://distfiles.gentoo.org/snapshots/portage-latest.tar.xz","funded_packages_count":605},"icon_url":"https://github.com/gentoo.png","created_at":"2026-05-26T08:59:24.155Z","updated_at":"2026-08-22T05:04:55.321Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/namespaces"}},{"id":13008518,"name":"py3-defusedxml","ecosystem":"alpine","description":"XML bomb protection for Python stdlib modules","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_number":"0.7.1-r5","last_synced_at":"2026-04-12T23:02:37.668Z","created_at":"2026-01-31T00:39:06.615Z","updated_at":"2026-08-19T22:25:19.454Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.23/community/x86_64/py3-defusedxml","install_command":"apk add py3-defusedxml","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T22:25:19.454Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/py3-defusedxml?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.23","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/py3-defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/py3-defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/py3-defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/py3-defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/py3-defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/py3-defusedxml/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":34,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2026-03-04T03:55:38.979Z","updated_at":"2026-03-04T03:55:38.979Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-v3.23","url":"https://pkgs.alpinelinux.org/packages?branch=v3.23","ecosystem":"alpine","default":false,"packages_count":27576,"maintainers_count":428,"namespaces_count":2,"keywords_count":189,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1031},"icon_url":"https://github.com/alpinelinux.png","created_at":"2026-01-24T14:35:50.739Z","updated_at":"2026-08-22T05:04:51.681Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/namespaces"}},{"id":13055728,"name":"kodiPackages.defusedxml","ecosystem":"nixpkgs","description":"defusing XML bombs and other exploits","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-02-01T16:27:36.461Z","latest_release_published_at":"2026-02-01T16:27:36.461Z","latest_release_number":"0.6.0+matrix.1","last_synced_at":"2026-03-07T22:21:59.214Z","created_at":"2026-02-01T16:27:24.665Z","updated_at":"2026-08-19T22:28:56.859Z","registry_url":"https://search.nixos.org/packages?channel=24.11\u0026query=kodiPackages.defusedxml","install_command":"nix-env -iA nixpkgs.kodiPackages.defusedxml","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-24.11/pkgs/applications/video/kodi/addons/defusedxml/default.nix#L28","metadata":{"nix_attribute":"kodi-defusedxml-0.6.0+matrix.1","position":"pkgs/applications/video/kodi/addons/defusedxml/default.nix:28","broken":false,"insecure":false,"unfree":false,"outputs":["out"]},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T22:28:56.859Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/kodiPackages.defusedxml?channel=24.11\u0026repository_url=https://channels.nixos.org/nixos-24.11","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/kodiPackages.defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/kodiPackages.defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/kodiPackages.defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/kodiPackages.defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/kodiPackages.defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/kodiPackages.defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/kodiPackages.defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/kodiPackages.defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/kodiPackages.defusedxml/codemeta","maintainers":[{"uuid":"peterhoeg","login":null,"name":"Peter Hoeg","email":"peter@hoeg.com","url":"https://github.com/peterhoeg","packages_count":342,"html_url":null,"role":null,"created_at":"2026-03-07T22:21:59.870Z","updated_at":"2026-03-07T22:21:59.870Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/maintainers/peterhoeg/packages"},{"uuid":"edwtjo","login":null,"name":"Edward Tjörnhammar","email":"ed@cflags.cc","url":"https://github.com/edwtjo","packages_count":457,"html_url":null,"role":null,"created_at":"2026-03-07T22:21:59.713Z","updated_at":"2026-03-07T22:21:59.713Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/maintainers/edwtjo/packages"},{"uuid":"minijackson","login":null,"name":"Rémi Nicole","email":"minijackson@riseup.net","url":"https://github.com/minijackson","packages_count":169,"html_url":null,"role":null,"created_at":"2026-03-07T22:21:59.813Z","updated_at":"2026-03-07T22:21:59.813Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/maintainers/minijackson/packages"},{"uuid":"aanderse","login":null,"name":"Aaron Andersen","email":"aaron@fosslib.net","url":"https://github.com/aanderse","packages_count":691,"html_url":null,"role":null,"created_at":"2026-03-07T22:21:59.564Z","updated_at":"2026-03-07T22:21:59.564Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/maintainers/aanderse/packages"},{"uuid":"sephalon","login":null,"name":"Stefan Wiehler","email":"me@sephalon.net","url":"https://github.com/sephalon","packages_count":96,"html_url":null,"role":null,"created_at":"2026-03-07T22:21:59.919Z","updated_at":"2026-03-07T22:21:59.919Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/maintainers/sephalon/packages"},{"uuid":"dschrempf","login":null,"name":"Dominik Schrempf","email":"dominik.schrempf@gmail.com","url":"https://github.com/dschrempf","packages_count":107,"html_url":null,"role":null,"created_at":"2026-03-07T22:21:59.664Z","updated_at":"2026-03-07T22:21:59.664Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/maintainers/dschrempf/packages"},{"uuid":"cpages","login":null,"name":"Carles Pagès","email":"page@ruiec.cat","url":"https://github.com/cpages","packages_count":84,"html_url":null,"role":null,"created_at":"2026-03-07T22:21:59.614Z","updated_at":"2026-03-07T22:21:59.614Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/maintainers/cpages/packages"},{"uuid":"nvmd","login":null,"name":"Sergey Kazenyuk","email":"kazenyuk@pm.me","url":"https://github.com/nvmd","packages_count":85,"html_url":null,"role":null,"created_at":"2026-03-07T22:21:59.765Z","updated_at":"2026-03-07T22:21:59.765Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/maintainers/nvmd/packages"}],"registry":{"name":"nixpkgs-24.11","url":"https://channels.nixos.org/nixos-24.11","ecosystem":"nixpkgs","default":false,"packages_count":121983,"maintainers_count":3777,"namespaces_count":0,"keywords_count":739,"github":"NixOS","metadata":{"funded_packages_count":3170},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.059Z","updated_at":"2026-08-22T05:04:27.355Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/namespaces"}},{"id":6073839,"name":"py2-defusedxml","ecosystem":"alpine","description":"XML bomb protection for Python stdlib modules (for python2)","homepage":"https://github.com/tiran/defusedxml","licenses":"GPL","normalized_licenses":["GPL-2.0+"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2019-05-08T15:47:47.000Z","latest_release_published_at":"2019-05-08T15:47:47.000Z","latest_release_number":"0.5.0-r1","last_synced_at":"2026-04-03T01:25:56.763Z","created_at":"2023-01-31T19:38:09.789Z","updated_at":"2026-08-19T22:49:42.944Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.10/community/x86_64/py2-defusedxml","install_command":"apk add py2-defusedxml","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T22:49:42.944Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":29.555125725338492,"stargazers_count":6.5473887814313345,"forks_count":8.868471953578338,"average":11.242746615087041},"purl":"pkg:apk/alpine/py2-defusedxml?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.10","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py2-defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py2-defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py2-defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/packages/py2-defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/packages/py2-defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/packages/py2-defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/packages/py2-defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/packages/py2-defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/packages/py2-defusedxml/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":50,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2023-02-01T03:28:52.849Z","updated_at":"2023-02-01T03:28:52.849Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-v3.10","url":"https://pkgs.alpinelinux.org/packages?branch=v3.10","ecosystem":"alpine","default":false,"packages_count":10340,"maintainers_count":177,"namespaces_count":2,"keywords_count":925,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":401},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.780Z","updated_at":"2026-08-18T05:04:45.736Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/namespaces"}},{"id":13467907,"name":"defusedxml","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/tiran/defusedxml","licenses":"other","normalized_licenses":[],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-09T18:04:31.724Z","latest_release_published_at":"2026-02-09T18:04:31.724Z","latest_release_number":"0.7.1-2","last_synced_at":"2026-07-26T23:03:32.151Z","created_at":"2026-02-09T18:04:31.196Z","updated_at":"2026-08-19T23:02:09.541Z","registry_url":"https://launchpad.net/ubuntu/+source/defusedxml","install_command":"apt-get install defusedxml","documentation_url":null,"metadata":{"component":"main","architecture":"all","priority":"optional","binary":"python3-defusedxml","standards_version":"4.6.1","maintainer":"Debian Python Team \u003cteam+python@tracker.debian.org\u003e","build_depends":"dh-python, python3-all, debhelper-compat (= 13), python3-setuptools","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T23:02:09.540Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/defusedxml?arch=source\u0026distro=ubuntu-23.10\u0026repository_url=https://launchpad.net/ubuntu/mantic","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/defusedxml/codemeta","maintainers":[],"registry":{"name":"ubuntu-23.10","url":"https://launchpad.net/ubuntu/mantic","ecosystem":"ubuntu","default":false,"packages_count":36642,"maintainers_count":0,"namespaces_count":4,"keywords_count":2213,"github":"ubuntu","metadata":{"codename":"mantic","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":1308},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.636Z","updated_at":"2026-08-22T05:05:44.018Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/namespaces"}},{"id":6074100,"name":"py3-defusedxml","ecosystem":"alpine","description":"XML bomb protection for Python stdlib modules (for python3)","homepage":"https://github.com/tiran/defusedxml","licenses":"GPL","normalized_licenses":["GPL-2.0+"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2019-05-08T15:47:48.000Z","latest_release_published_at":"2019-05-08T15:47:48.000Z","latest_release_number":"0.5.0-r1","last_synced_at":"2026-04-03T01:25:57.555Z","created_at":"2023-01-31T19:38:42.719Z","updated_at":"2026-08-19T23:35:29.899Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.10/community/x86_64/py3-defusedxml","install_command":"apk add py3-defusedxml","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T23:35:29.899Z","dependent_packages_count":10,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":5.154738878143133,"stargazers_count":6.5473887814313345,"forks_count":8.868471953578338,"average":5.142649903288201},"purl":"pkg:apk/alpine/py3-defusedxml?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.10","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/packages/py3-defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/packages/py3-defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/packages/py3-defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/packages/py3-defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/packages/py3-defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/packages/py3-defusedxml/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":50,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2023-02-01T03:31:46.342Z","updated_at":"2023-02-01T03:31:46.342Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-v3.10","url":"https://pkgs.alpinelinux.org/packages?branch=v3.10","ecosystem":"alpine","default":false,"packages_count":10340,"maintainers_count":177,"namespaces_count":2,"keywords_count":925,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":401},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.780Z","updated_at":"2026-08-18T05:04:45.736Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.10/namespaces"}},{"id":12783288,"name":"kodiPackages.defusedxml","ecosystem":"nixpkgs","description":"defusing XML bombs and other exploits","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-01-26T11:22:12.612Z","latest_release_published_at":"2026-01-26T11:22:12.612Z","latest_release_number":"0.6.0+matrix.1","last_synced_at":"2026-04-08T03:04:09.165Z","created_at":"2026-01-26T11:22:12.175Z","updated_at":"2026-08-19T23:40:03.789Z","registry_url":"https://search.nixos.org/packages?channel=23.05\u0026query=kodiPackages.defusedxml","install_command":"nix-env -iA nixpkgs.kodiPackages.defusedxml","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-23.05/pkgs/applications/video/kodi/addons/defusedxml/default.nix#L22","metadata":{"nix_attribute":"kodi-defusedxml-0.6.0+matrix.1","position":"pkgs/applications/video/kodi/addons/defusedxml/default.nix:22","broken":false,"insecure":false,"unfree":false,"outputs":["out"]},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T23:40:03.789Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/kodiPackages.defusedxml?channel=23.05\u0026repository_url=https://channels.nixos.org/nixos-23.05","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/kodiPackages.defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/kodiPackages.defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/kodiPackages.defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/kodiPackages.defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/kodiPackages.defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/kodiPackages.defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/kodiPackages.defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/kodiPackages.defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/kodiPackages.defusedxml/codemeta","maintainers":[{"uuid":"peterhoeg","login":null,"name":"Peter Hoeg","email":"peter@hoeg.com","url":"https://github.com/peterhoeg","packages_count":323,"html_url":null,"role":null,"created_at":"2026-03-03T12:24:12.408Z","updated_at":"2026-03-03T12:24:12.408Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/maintainers/peterhoeg/packages"},{"uuid":"edwtjo","login":null,"name":"Edward Tjörnhammar","email":"ed@cflags.cc","url":"https://github.com/edwtjo","packages_count":212,"html_url":null,"role":null,"created_at":"2026-03-03T12:24:12.336Z","updated_at":"2026-03-03T12:24:12.336Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/maintainers/edwtjo/packages"},{"uuid":"minijackson","login":null,"name":"Rémi Nicole","email":"minijackson@riseup.net","url":"https://github.com/minijackson","packages_count":135,"html_url":null,"role":null,"created_at":"2026-03-03T12:24:12.373Z","updated_at":"2026-03-03T12:24:12.373Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/maintainers/minijackson/packages"},{"uuid":"aanderse","login":null,"name":"Aaron Andersen","email":"aaron@fosslib.net","url":"https://github.com/aanderse","packages_count":526,"html_url":null,"role":null,"created_at":"2026-03-03T12:24:12.206Z","updated_at":"2026-03-03T12:24:12.206Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/maintainers/aanderse/packages"},{"uuid":"cpages","login":null,"name":"Carles Pagès","email":"page@ruiec.cat","url":"https://github.com/cpages","packages_count":74,"html_url":null,"role":null,"created_at":"2026-03-03T12:24:12.242Z","updated_at":"2026-03-03T12:24:12.242Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/maintainers/cpages/packages"},{"uuid":"sephalon","login":null,"name":"Stefan Wiehler","email":"me@sephalon.net","url":"https://github.com/sephalon","packages_count":72,"html_url":null,"role":null,"created_at":"2026-03-03T12:24:12.448Z","updated_at":"2026-03-03T12:24:12.448Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/maintainers/sephalon/packages"}],"registry":{"name":"nixpkgs-23.05","url":"https://channels.nixos.org/nixos-23.05","ecosystem":"nixpkgs","default":false,"packages_count":101092,"maintainers_count":2622,"namespaces_count":0,"keywords_count":613,"github":"NixOS","metadata":{"funded_packages_count":2086},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.882Z","updated_at":"2026-08-22T05:04:25.014Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/namespaces"}},{"id":13202530,"name":"python312Packages.defusedxml","ecosystem":"nixpkgs","description":"Python module to defuse XML issues","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":["python"],"namespace":null,"versions_count":1,"first_release_published_at":"2026-02-02T00:53:10.634Z","latest_release_published_at":"2026-02-02T00:53:10.634Z","latest_release_number":"0.7.1","last_synced_at":"2026-05-13T02:04:37.229Z","created_at":"2026-02-02T00:52:55.203Z","updated_at":"2026-08-19T23:45:35.099Z","registry_url":"https://search.nixos.org/packages?channel=24.05\u0026query=python312Packages.defusedxml","install_command":"nix-env -iA nixpkgs.python312Packages.defusedxml","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-24.05/pkgs/development/python-modules/defusedxml/default.nix#L25","metadata":{"nix_attribute":"python3.12-defusedxml-0.7.1","position":"pkgs/development/python-modules/defusedxml/default.nix:25","platforms":["aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux","x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin","i686-cygwin","x86_64-cygwin","x86_64-windows","i686-windows"],"broken":false,"insecure":false,"unfree":false,"outputs":["dist","out"],"upstream_ecosystem":"pypi","upstream_name":"defusedxml","upstream_purl":"pkg:pypi/defusedxml"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T23:45:35.099Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/python312Packages.defusedxml?channel=24.05\u0026repository_url=https://channels.nixos.org/nixos-24.05","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/python312Packages.defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/python312Packages.defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/python312Packages.defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/python312Packages.defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/python312Packages.defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/python312Packages.defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/python312Packages.defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/python312Packages.defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/python312Packages.defusedxml/codemeta","maintainers":[{"uuid":"fabaff","login":null,"name":"Fabian Affolter","email":"mail@fabian-affolter.ch","url":"https://github.com/fabaff","packages_count":4856,"html_url":null,"role":null,"created_at":"2026-03-07T11:03:57.993Z","updated_at":"2026-03-07T11:03:57.993Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/maintainers/fabaff/packages"}],"registry":{"name":"nixpkgs-24.05","url":"https://channels.nixos.org/nixos-24.05","ecosystem":"nixpkgs","default":false,"packages_count":116156,"maintainers_count":3383,"namespaces_count":0,"keywords_count":654,"github":"NixOS","metadata":{"funded_packages_count":2831},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.309Z","updated_at":"2026-08-22T05:00:20.407Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/namespaces"}},{"id":11138505,"name":"py3-defusedxml","ecosystem":"alpine","description":"XML bomb protection for Python stdlib modules","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_number":"0.7.1-r5","last_synced_at":"2026-04-03T01:26:21.594Z","created_at":"2024-12-07T12:29:45.296Z","updated_at":"2026-08-20T00:34:04.467Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.21/community/x86_64/py3-defusedxml","install_command":"apk add py3-defusedxml","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-20T00:34:04.467Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/py3-defusedxml?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.21","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/py3-defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/py3-defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/py3-defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/py3-defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/py3-defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/py3-defusedxml/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":34,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2024-12-11T20:26:43.267Z","updated_at":"2024-12-11T20:26:43.267Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-v3.21","url":"https://pkgs.alpinelinux.org/packages?branch=v3.21","ecosystem":"alpine","default":false,"packages_count":25394,"maintainers_count":413,"namespaces_count":2,"keywords_count":3607,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1386},"icon_url":"https://github.com/alpinelinux.png","created_at":"2024-12-06T12:06:36.014Z","updated_at":"2026-08-22T05:05:55.167Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/namespaces"}},{"id":11138509,"name":"py3-defusedxml-pyc","ecosystem":"alpine","description":"Precompiled Python bytecode for py3-defusedxml","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_number":"0.7.1-r5","last_synced_at":"2026-04-03T01:26:26.760Z","created_at":"2024-12-07T12:29:48.003Z","updated_at":"2026-08-20T00:37:34.058Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.21/community/x86_64/py3-defusedxml-pyc","install_command":"apk add py3-defusedxml-pyc","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-20T00:37:34.058Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/py3-defusedxml-pyc?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.21","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-defusedxml-pyc","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-defusedxml-pyc","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-defusedxml-pyc/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/py3-defusedxml-pyc/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/py3-defusedxml-pyc/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/py3-defusedxml-pyc/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/py3-defusedxml-pyc/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/py3-defusedxml-pyc/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/py3-defusedxml-pyc/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":34,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2024-12-11T20:26:55.131Z","updated_at":"2024-12-11T20:26:55.131Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-v3.21","url":"https://pkgs.alpinelinux.org/packages?branch=v3.21","ecosystem":"alpine","default":false,"packages_count":25394,"maintainers_count":413,"namespaces_count":2,"keywords_count":3607,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1386},"icon_url":"https://github.com/alpinelinux.png","created_at":"2024-12-06T12:06:36.014Z","updated_at":"2026-08-22T05:05:55.167Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/namespaces"}},{"id":8676559,"name":"py3-defusedxml-pyc","ecosystem":"alpine","description":"Precompiled Python bytecode for py3-defusedxml","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2023-05-29T02:57:33.000Z","latest_release_published_at":"2023-05-29T02:57:33.000Z","latest_release_number":"0.7.1-r4","last_synced_at":"2026-04-03T01:26:59.064Z","created_at":"2023-12-20T10:26:56.772Z","updated_at":"2026-08-20T01:00:07.986Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.19/community/x86_64/py3-defusedxml-pyc","install_command":"apk add py3-defusedxml-pyc","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-20T01:00:07.985Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/py3-defusedxml-pyc?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.19","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-defusedxml-pyc","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-defusedxml-pyc","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-defusedxml-pyc/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/py3-defusedxml-pyc/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/py3-defusedxml-pyc/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/py3-defusedxml-pyc/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/py3-defusedxml-pyc/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/py3-defusedxml-pyc/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/py3-defusedxml-pyc/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":42,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2026-03-03T00:26:19.832Z","updated_at":"2026-03-03T00:26:19.832Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-v3.19","url":"https://pkgs.alpinelinux.org/packages?branch=v3.19","ecosystem":"alpine","default":false,"packages_count":23031,"maintainers_count":392,"namespaces_count":2,"keywords_count":3176,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":928},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-12-20T09:51:56.346Z","updated_at":"2026-08-22T05:06:10.818Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/namespaces"}},{"id":13679727,"name":"defusedxml","ecosystem":"debian","description":null,"homepage":"https://github.com/tiran/defusedxml","licenses":"other","normalized_licenses":[],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T16:49:03.714Z","latest_release_published_at":"2026-02-12T16:49:03.714Z","latest_release_number":"0.7.1-2","last_synced_at":"2026-03-12T19:15:20.989Z","created_at":"2026-02-12T16:49:03.495Z","updated_at":"2026-08-20T01:04:34.808Z","registry_url":"https://tracker.debian.org/pkg/defusedxml","install_command":"apt-get install defusedxml","documentation_url":"https://packages.debian.org/bookworm/defusedxml","metadata":{"component":"main","architecture":"all","priority":"source","binary":"python3-defusedxml","standards_version":"4.6.1","maintainer":"Debian Python Team \u003cteam+python@tracker.debian.org\u003e","build_depends":"dh-python, python3-all, debhelper-compat (= 13), python3-setuptools","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-20T01:04:34.808Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/defusedxml?arch=source\u0026distro=debian-12","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/defusedxml/codemeta","maintainers":[],"registry":{"name":"debian-12","url":"https://packages.debian.org/bookworm","ecosystem":"debian","default":true,"packages_count":34734,"maintainers_count":0,"namespaces_count":4,"keywords_count":2650,"github":"debian","metadata":{"codename":"bookworm","funded_packages_count":1211},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:49.459Z","updated_at":"2026-08-22T05:05:48.195Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/namespaces"}},{"id":12813461,"name":"python310Packages.defusedxml","ecosystem":"nixpkgs","description":"Python module to defuse XML issues","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":["python"],"namespace":null,"versions_count":1,"first_release_published_at":"2026-01-26T16:48:15.031Z","latest_release_published_at":"2026-01-26T16:48:15.031Z","latest_release_number":"0.7.1","last_synced_at":"2026-07-30T16:02:58.001Z","created_at":"2026-01-26T16:48:14.877Z","updated_at":"2026-08-20T01:10:06.198Z","registry_url":"https://search.nixos.org/packages?channel=23.05\u0026query=python310Packages.defusedxml","install_command":"nix-env -iA nixpkgs.python310Packages.defusedxml","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-23.05/pkgs/development/python-modules/defusedxml/default.nix#L23","metadata":{"nix_attribute":"python3.10-defusedxml-0.7.1","position":"pkgs/development/python-modules/defusedxml/default.nix:23","platforms":["aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mipsel-linux","mips64el-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux","x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin"],"broken":false,"insecure":false,"unfree":false,"outputs":["dist","out"],"upstream_ecosystem":"pypi","upstream_name":"defusedxml","upstream_purl":"pkg:pypi/defusedxml"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-20T01:10:06.198Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/python310Packages.defusedxml?channel=23.05\u0026repository_url=https://channels.nixos.org/nixos-23.05","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/python310Packages.defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/python310Packages.defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/python310Packages.defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/python310Packages.defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/python310Packages.defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/python310Packages.defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/python310Packages.defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/python310Packages.defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/python310Packages.defusedxml/codemeta","maintainers":[{"uuid":"fabaff","login":null,"name":"Fabian Affolter","email":"mail@fabian-affolter.ch","url":"https://github.com/fabaff","packages_count":3335,"html_url":null,"role":null,"created_at":"2026-03-05T18:24:10.353Z","updated_at":"2026-03-05T18:24:10.353Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/maintainers/fabaff/packages"}],"registry":{"name":"nixpkgs-23.05","url":"https://channels.nixos.org/nixos-23.05","ecosystem":"nixpkgs","default":false,"packages_count":101092,"maintainers_count":2622,"namespaces_count":0,"keywords_count":613,"github":"NixOS","metadata":{"funded_packages_count":2086},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.882Z","updated_at":"2026-08-22T05:04:25.014Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/namespaces"}},{"id":6113029,"name":"py-defusedxml","ecosystem":"alpine","description":"XML bomb protection for Python stdlib modules","homepage":"https://github.com/tiran/defusedxml","licenses":"GPL","normalized_licenses":["GPL-2.0+"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2018-05-21T14:48:34.000Z","latest_release_published_at":"2018-05-21T14:48:34.000Z","latest_release_number":"0.5.0-r0","last_synced_at":"2026-04-03T01:09:31.569Z","created_at":"2023-01-31T21:23:03.684Z","updated_at":"2026-08-20T01:11:46.660Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.8/community/x86_64/py-defusedxml","install_command":"apk add py-defusedxml","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-20T01:11:46.659Z","dependent_packages_count":2,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":11.763472426085134,"stargazers_count":5.776892430278884,"forks_count":7.821346194170687,"average":6.340427762633676},"purl":"pkg:apk/alpine/py-defusedxml?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.8","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py-defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py-defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py-defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/packages/py-defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/packages/py-defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/packages/py-defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/packages/py-defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/packages/py-defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/packages/py-defusedxml/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":25,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2023-02-01T09:17:37.722Z","updated_at":"2023-02-01T09:17:37.722Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-v3.8","url":"https://pkgs.alpinelinux.org/packages?branch=v3.8","ecosystem":"alpine","default":false,"packages_count":9538,"maintainers_count":148,"namespaces_count":2,"keywords_count":770,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":337},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.817Z","updated_at":"2026-08-12T05:03:16.204Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.8/namespaces"}},{"id":8676558,"name":"py3-defusedxml","ecosystem":"alpine","description":"XML bomb protection for Python stdlib modules","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2023-05-29T02:57:33.000Z","latest_release_published_at":"2023-05-29T02:57:33.000Z","latest_release_number":"0.7.1-r4","last_synced_at":"2026-04-03T01:26:59.799Z","created_at":"2023-12-20T10:26:56.664Z","updated_at":"2026-08-20T04:13:06.114Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.19/community/x86_64/py3-defusedxml","install_command":"apk add py3-defusedxml","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-20T04:13:06.113Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/py3-defusedxml?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.19","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/py3-defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/py3-defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/py3-defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/py3-defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/py3-defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/py3-defusedxml/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":42,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2026-03-03T00:26:20.627Z","updated_at":"2026-03-03T00:26:20.627Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-v3.19","url":"https://pkgs.alpinelinux.org/packages?branch=v3.19","ecosystem":"alpine","default":false,"packages_count":23031,"maintainers_count":392,"namespaces_count":2,"keywords_count":3176,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":928},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-12-20T09:51:56.346Z","updated_at":"2026-08-22T05:06:10.818Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/namespaces"}},{"id":11765043,"name":"py3-defusedxml","ecosystem":"alpine","description":"XML bomb protection for Python stdlib modules","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_number":"0.7.1-r5","last_synced_at":"2026-04-03T01:26:39.970Z","created_at":"2025-06-07T18:09:47.663Z","updated_at":"2026-08-19T23:07:35.720Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.22/community/x86_64/py3-defusedxml","install_command":"apk add py3-defusedxml","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T23:07:35.719Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/py3-defusedxml?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.22","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/py3-defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/py3-defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/py3-defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/py3-defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/py3-defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/py3-defusedxml/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":34,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2025-06-08T14:47:28.539Z","updated_at":"2025-06-08T14:47:28.539Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-v3.22","url":"https://pkgs.alpinelinux.org/packages?branch=v3.22","ecosystem":"alpine","default":false,"packages_count":26323,"maintainers_count":422,"namespaces_count":2,"keywords_count":4638,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1795},"icon_url":"https://github.com/alpinelinux.png","created_at":"2025-06-05T10:49:56.987Z","updated_at":"2026-08-22T05:05:58.012Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/namespaces"}},{"id":10344088,"name":"py3-defusedxml-pyc","ecosystem":"alpine","description":"Precompiled Python bytecode for py3-defusedxml","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_number":"0.7.1-r5","last_synced_at":"2026-04-03T01:27:02.676Z","created_at":"2024-06-11T09:43:34.949Z","updated_at":"2026-08-19T22:30:47.646Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.20/community/x86_64/py3-defusedxml-pyc","install_command":"apk add py3-defusedxml-pyc","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T22:30:47.646Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/py3-defusedxml-pyc?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.20","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-defusedxml-pyc","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-defusedxml-pyc","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-defusedxml-pyc/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/py3-defusedxml-pyc/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/py3-defusedxml-pyc/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/py3-defusedxml-pyc/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/py3-defusedxml-pyc/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/py3-defusedxml-pyc/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/py3-defusedxml-pyc/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":42,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2024-06-12T01:04:00.843Z","updated_at":"2024-06-12T01:04:00.843Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-v3.20","url":"https://pkgs.alpinelinux.org/packages?branch=v3.20","ecosystem":"alpine","default":false,"packages_count":24162,"maintainers_count":405,"namespaces_count":2,"keywords_count":4251,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1535},"icon_url":"https://github.com/alpinelinux.png","created_at":"2024-06-07T11:51:39.915Z","updated_at":"2026-08-22T05:06:09.013Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/namespaces"}},{"id":13176103,"name":"kodiPackages.defusedxml","ecosystem":"nixpkgs","description":"defusing XML bombs and other exploits","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-02-01T23:18:58.181Z","latest_release_published_at":"2026-02-01T23:18:58.181Z","latest_release_number":"0.6.0+matrix.1","last_synced_at":"2026-03-06T16:25:07.201Z","created_at":"2026-02-01T23:18:26.106Z","updated_at":"2026-08-19T21:10:16.443Z","registry_url":"https://search.nixos.org/packages?channel=24.05\u0026query=kodiPackages.defusedxml","install_command":"nix-env -iA nixpkgs.kodiPackages.defusedxml","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-24.05/pkgs/applications/video/kodi/addons/defusedxml/default.nix#L28","metadata":{"nix_attribute":"kodi-defusedxml-0.6.0+matrix.1","position":"pkgs/applications/video/kodi/addons/defusedxml/default.nix:28","broken":false,"insecure":false,"unfree":false,"outputs":["out"]},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T21:10:16.443Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/kodiPackages.defusedxml?channel=24.05\u0026repository_url=https://channels.nixos.org/nixos-24.05","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/kodiPackages.defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/kodiPackages.defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/kodiPackages.defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/kodiPackages.defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/kodiPackages.defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/kodiPackages.defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/kodiPackages.defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/kodiPackages.defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/kodiPackages.defusedxml/codemeta","maintainers":[{"uuid":"cpages","login":null,"name":"Carles Pagès","email":"page@ruiec.cat","url":"https://github.com/cpages","packages_count":89,"html_url":null,"role":null,"created_at":"2026-03-06T16:25:08.146Z","updated_at":"2026-03-06T16:25:08.146Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/maintainers/cpages/packages"},{"uuid":"aanderse","login":null,"name":"Aaron Andersen","email":"aaron@fosslib.net","url":"https://github.com/aanderse","packages_count":567,"html_url":null,"role":null,"created_at":"2026-03-06T16:25:08.092Z","updated_at":"2026-03-06T16:25:08.092Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/maintainers/aanderse/packages"},{"uuid":"sephalon","login":null,"name":"Stefan Wiehler","email":"me@sephalon.net","url":"https://github.com/sephalon","packages_count":86,"html_url":null,"role":null,"created_at":"2026-03-06T16:25:08.449Z","updated_at":"2026-03-06T16:25:08.449Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/maintainers/sephalon/packages"},{"uuid":"edwtjo","login":null,"name":"Edward Tjörnhammar","email":"ed@cflags.cc","url":"https://github.com/edwtjo","packages_count":423,"html_url":null,"role":null,"created_at":"2026-03-06T16:25:08.258Z","updated_at":"2026-03-06T16:25:08.258Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/maintainers/edwtjo/packages"},{"uuid":"minijackson","login":null,"name":"Rémi Nicole","email":"minijackson@riseup.net","url":"https://github.com/minijackson","packages_count":155,"html_url":null,"role":null,"created_at":"2026-03-06T16:25:08.355Z","updated_at":"2026-03-06T16:25:08.355Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/maintainers/minijackson/packages"},{"uuid":"peterhoeg","login":null,"name":"Peter Hoeg","email":"peter@hoeg.com","url":"https://github.com/peterhoeg","packages_count":336,"html_url":null,"role":null,"created_at":"2026-03-06T16:25:08.402Z","updated_at":"2026-03-06T16:25:08.402Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/maintainers/peterhoeg/packages"},{"uuid":"dschrempf","login":null,"name":"Dominik Schrempf","email":"dominik.schrempf@gmail.com","url":"https://github.com/dschrempf","packages_count":100,"html_url":null,"role":null,"created_at":"2026-03-06T16:25:08.191Z","updated_at":"2026-03-06T16:25:08.191Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/maintainers/dschrempf/packages"},{"uuid":"nvmd","login":null,"name":"Sergey Kazenyuk","email":"kazenyuk@pm.me","url":"https://github.com/nvmd","packages_count":80,"html_url":null,"role":null,"created_at":"2026-03-06T16:25:08.299Z","updated_at":"2026-03-06T16:25:08.299Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/maintainers/nvmd/packages"}],"registry":{"name":"nixpkgs-24.05","url":"https://channels.nixos.org/nixos-24.05","ecosystem":"nixpkgs","default":false,"packages_count":116156,"maintainers_count":3383,"namespaces_count":0,"keywords_count":654,"github":"NixOS","metadata":{"funded_packages_count":2831},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.309Z","updated_at":"2026-08-22T05:00:20.407Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/namespaces"}},{"id":13409544,"name":"defusedxml","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/tiran/defusedxml","licenses":"other","normalized_licenses":[],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-06T18:39:00.059Z","latest_release_published_at":"2026-02-06T18:39:00.059Z","latest_release_number":"0.7.1-1","last_synced_at":"2026-03-06T18:58:06.498Z","created_at":"2026-02-06T18:38:59.712Z","updated_at":"2026-08-19T23:35:29.606Z","registry_url":"https://launchpad.net/ubuntu/+source/defusedxml","install_command":"apt-get install defusedxml","documentation_url":null,"metadata":{"component":"main","architecture":"all","priority":"optional","binary":"python3-defusedxml","standards_version":"4.6.0","maintainer":"Debian Python Team \u003cteam+python@tracker.debian.org\u003e","build_depends":"dh-python, python3-all, debhelper-compat (= 13), python3-setuptools","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T23:35:29.605Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/defusedxml?arch=source\u0026distro=ubuntu-22.04\u0026repository_url=https://launchpad.net/ubuntu/jammy","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/defusedxml/codemeta","maintainers":[],"registry":{"name":"ubuntu-22.04","url":"https://launchpad.net/ubuntu/jammy","ecosystem":"ubuntu","default":false,"packages_count":34289,"maintainers_count":0,"namespaces_count":4,"keywords_count":1498,"github":"ubuntu","metadata":{"codename":"jammy","funded_packages_count":945},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:46.486Z","updated_at":"2026-08-22T05:05:40.818Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/namespaces"}},{"id":6093376,"name":"py3-defusedxml","ecosystem":"alpine","description":"XML bomb protection for Python stdlib modules (for python3)","homepage":"https://github.com/tiran/defusedxml","licenses":"GPL","normalized_licenses":["GPL-2.0+"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2018-12-24T16:41:32.000Z","latest_release_published_at":"2018-12-24T16:41:32.000Z","latest_release_number":"0.5.0-r0","last_synced_at":"2026-04-01T01:07:00.527Z","created_at":"2023-01-31T20:27:25.815Z","updated_at":"2026-08-19T22:36:54.239Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.9/community/x86_64/py3-defusedxml","install_command":"apk add py3-defusedxml","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T22:36:54.239Z","dependent_packages_count":5,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":4.328649092214587,"stargazers_count":6.185249769207099,"forks_count":8.22648476766848,"average":4.685095907272541},"purl":"pkg:apk/alpine/py3-defusedxml?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.9","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/packages/py3-defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/packages/py3-defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/packages/py3-defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/packages/py3-defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/packages/py3-defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/packages/py3-defusedxml/codemeta","maintainers":[{"uuid":"robertoguimaraes8@gmail.com","login":null,"name":"Roberto Oliveira","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","packages_count":48,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Roberto Oliveira","role":null,"created_at":"2023-02-01T06:35:14.924Z","updated_at":"2023-02-01T06:35:14.924Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/maintainers/robertoguimaraes8@gmail.com/packages"}],"registry":{"name":"alpine-v3.9","url":"https://pkgs.alpinelinux.org/packages?branch=v3.9","ecosystem":"alpine","default":false,"packages_count":9749,"maintainers_count":154,"namespaces_count":2,"keywords_count":832,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":361},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.805Z","updated_at":"2026-08-18T05:03:05.558Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.9/namespaces"}},{"id":12862153,"name":"python313Packages.defusedxml","ecosystem":"nixpkgs","description":"Python module to defuse XML issues","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":["python"],"namespace":null,"versions_count":1,"first_release_published_at":"2026-01-27T01:34:03.834Z","latest_release_published_at":"2026-01-27T01:34:03.834Z","latest_release_number":"0.8.0rc2","last_synced_at":"2026-04-03T10:01:50.183Z","created_at":"2026-01-27T01:34:03.274Z","updated_at":"2026-08-19T22:42:25.181Z","registry_url":"https://search.nixos.org/packages?channel=unstable\u0026query=python313Packages.defusedxml","install_command":"nix-env -iA nixpkgs.python313Packages.defusedxml","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-unstable/pkgs/development/python-modules/defusedxml/default.nix#L36","metadata":{"nix_attribute":"python3.13-defusedxml-0.8.0rc2","position":"pkgs/development/python-modules/defusedxml/default.nix:36","platforms":["aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux","x86_64-darwin","aarch64-darwin","aarch64-windows","x86_64-windows","i686-windows","i686-freebsd","x86_64-freebsd","aarch64-freebsd"],"broken":false,"insecure":false,"unfree":false,"outputs":["dist","out"],"upstream_ecosystem":"pypi","upstream_name":"defusedxml","upstream_purl":"pkg:pypi/defusedxml"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":551,"open_issues_count":8,"forks_count":60,"subscribers_count":14,"default_branch":"main","last_synced_at":"2026-08-19T20:07:13.674Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-17T14:25:12.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784007,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T22:42:25.181Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/python313Packages.defusedxml?channel=unstable","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/python313Packages.defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/python313Packages.defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/python313Packages.defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/python313Packages.defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/python313Packages.defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/python313Packages.defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/python313Packages.defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/python313Packages.defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/python313Packages.defusedxml/codemeta","maintainers":[{"uuid":"fabaff","login":null,"name":"Fabian Affolter","email":"mail@fabian-affolter.ch","url":"https://github.com/fabaff","packages_count":5658,"html_url":null,"role":null,"created_at":"2026-03-03T09:06:34.315Z","updated_at":"2026-03-03T09:06:34.315Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/maintainers/fabaff/packages"}],"registry":{"name":"nixpkgs-unstable","url":"https://channels.nixos.org/nixos-unstable","ecosystem":"nixpkgs","default":true,"packages_count":153756,"maintainers_count":4901,"namespaces_count":0,"keywords_count":3257,"github":"NixOS","metadata":{"funded_packages_count":5674},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:52.762Z","updated_at":"2026-08-22T05:03:04.456Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/namespaces"}},{"id":13302487,"name":"python311Packages.defusedxml","ecosystem":"nixpkgs","description":"Python module to defuse XML issues","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":["python"],"namespace":null,"versions_count":1,"first_release_published_at":"2026-02-02T06:50:21.854Z","latest_release_published_at":"2026-02-02T06:50:21.854Z","latest_release_number":"0.7.1","last_synced_at":"2026-03-07T09:41:43.042Z","created_at":"2026-02-02T06:50:20.697Z","updated_at":"2026-08-19T20:52:49.560Z","registry_url":"https://search.nixos.org/packages?channel=23.11\u0026query=python311Packages.defusedxml","install_command":"nix-env -iA nixpkgs.python311Packages.defusedxml","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-23.11/pkgs/development/python-modules/defusedxml/default.nix#L23","metadata":{"nix_attribute":"python3.11-defusedxml-0.7.1","position":"pkgs/development/python-modules/defusedxml/default.nix:23","platforms":["aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux","x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin","i686-cygwin","x86_64-cygwin","x86_64-windows","i686-windows"],"broken":false,"insecure":false,"unfree":false,"outputs":["dist","out"],"upstream_ecosystem":"pypi","upstream_name":"defusedxml","upstream_purl":"pkg:pypi/defusedxml"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":550,"open_issues_count":8,"forks_count":59,"subscribers_count":15,"default_branch":"main","last_synced_at":"2026-08-12T16:46:42.124Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-11T14:02:53.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36616505,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-13T02:00:06.325Z","response_time":111,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T20:52:49.559Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{},"purl":"pkg:nix/python311Packages.defusedxml?channel=23.11\u0026repository_url=https://channels.nixos.org/nixos-23.11","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/python311Packages.defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/python311Packages.defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/python311Packages.defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/python311Packages.defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/python311Packages.defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/python311Packages.defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/python311Packages.defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/python311Packages.defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/python311Packages.defusedxml/codemeta","maintainers":[{"uuid":"fabaff","login":null,"name":"Fabian Affolter","email":"mail@fabian-affolter.ch","url":"https://github.com/fabaff","packages_count":4331,"html_url":null,"role":null,"created_at":"2026-03-07T09:41:43.350Z","updated_at":"2026-03-07T09:41:43.350Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/maintainers/fabaff/packages"}],"registry":{"name":"nixpkgs-23.11","url":"https://channels.nixos.org/nixos-23.11","ecosystem":"nixpkgs","default":false,"packages_count":108178,"maintainers_count":2997,"namespaces_count":0,"keywords_count":569,"github":"NixOS","metadata":{"funded_packages_count":2963},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.577Z","updated_at":"2026-08-22T05:04:32.698Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/namespaces"}},{"id":12826058,"name":"python311Packages.defusedxml","ecosystem":"nixpkgs","description":"Python module to defuse XML issues","homepage":"https://github.com/tiran/defusedxml","licenses":"Python-2.0","normalized_licenses":["Python-2.0"],"repository_url":"https://github.com/tiran/defusedxml","keywords_array":["python"],"namespace":null,"versions_count":1,"first_release_published_at":"2026-01-26T18:58:06.572Z","latest_release_published_at":"2026-01-26T18:58:06.572Z","latest_release_number":"0.7.1","last_synced_at":"2026-04-18T00:03:33.635Z","created_at":"2026-01-26T18:58:06.382Z","updated_at":"2026-08-19T20:52:49.326Z","registry_url":"https://search.nixos.org/packages?channel=23.05\u0026query=python311Packages.defusedxml","install_command":"nix-env -iA nixpkgs.python311Packages.defusedxml","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-23.05/pkgs/development/python-modules/defusedxml/default.nix#L23","metadata":{"nix_attribute":"python3.11-defusedxml-0.7.1","position":"pkgs/development/python-modules/defusedxml/default.nix:23","platforms":["aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mipsel-linux","mips64el-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux","x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin"],"broken":false,"insecure":false,"unfree":false,"outputs":["dist","out"],"upstream_ecosystem":"pypi","upstream_name":"defusedxml","upstream_purl":"pkg:pypi/defusedxml"},"repo_metadata":{"id":41086477,"uuid":"51649838","full_name":"tiran/defusedxml","owner":"tiran","description":null,"archived":false,"fork":false,"pushed_at":"2024-09-03T22:29:39.000Z","size":275,"stargazers_count":550,"open_issues_count":8,"forks_count":59,"subscribers_count":15,"default_branch":"main","last_synced_at":"2026-08-12T16:46:42.124Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tiran.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-02-13T14:44:57.000Z","updated_at":"2026-08-11T14:02:53.000Z","dependencies_parsed_at":"2024-02-26T01:49:34.901Z","dependency_job_id":"cf85f661-fa0e-4642-930b-b6a8c1573cd9","html_url":"https://github.com/tiran/defusedxml","commit_stats":{"total_commits":201,"total_committers":6,"mean_commits":33.5,"dds":0.06965174129353235,"last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"purl":"pkg:github/tiran/defusedxml","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/sbom","scorecard":{"id":887670,"data":{"date":"2025-08-11","repo":{"name":"github.com/tiran/defusedxml","commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.9,"checks":[{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":0,"reason":"Found 2/24 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/main.yml:5","Info: topLevel 'contents' permission set to 'read': .github/workflows/pypi.yml:5","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/main.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pypi.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/pypi.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/tiran/defusedxml/pypi.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:52","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:54","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:66","Warn: pipCommand not pinned by hash: .github/workflows/main.yml:68","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:48","Warn: pipCommand not pinned by hash: .github/workflows/pypi.yml:50","Info:   0 out of   9 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   2 third-party GitHubAction dependencies pinned","Info:   0 out of   6 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: OSSFuzz integration found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/pypi.yml:80"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-24T10:36:53.901Z","repository_id":41086477,"created_at":"2025-08-24T10:36:53.901Z","updated_at":"2025-08-24T10:36:53.901Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36616505,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-13T02:00:06.325Z","response_time":111,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"tiran","name":"Christian Heimes","uuid":"444071","kind":"user","description":"@python core developer, Python security team, PSF fellow, security-monger, Open Source advocate, Red Hat SecEng / IdM dev (he/him)\r\nViews are my own.","email":"christian@python.org","website":null,"location":"Hamburg, Germany","twitter":"ChristianHeimes","company":"Red Hat","icon_url":"https://avatars.githubusercontent.com/u/444071?v=4","repositories_count":233,"last_synced_at":"2026-08-14T04:43:22.073Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/tiran","funding_links":[],"total_stars":862,"followers":585,"following":0,"created_at":"2022-11-02T16:22:48.103Z","updated_at":"2026-08-14T04:43:22.154Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tiran/repositories"},"tags":[{"name":"v0.8.0rc2","sha":"55dbde29c06834bf2015db88310aaa05f3b7c8c7","kind":"tag","published_at":"2023-09-29T07:59:35.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc2/manifests"},{"name":"v0.8.0rc1","sha":"8be621061cc8146ad3f5c0b4299bc5d472ac0349","kind":"tag","published_at":"2023-09-26T19:15:11.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.8.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.8.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.8.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.8.0rc1/manifests"},{"name":"v0.7.1","sha":"ebff1b493751e2f0775314bdd4188d64f07ea184","kind":"tag","published_at":"2021-03-08T10:58:43.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.1/manifests"},{"name":"v0.7.0","sha":"6653936f117fba5348a271b7d314951275088162","kind":"tag","published_at":"2021-03-04T09:41:51.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0/manifests"},{"name":"v0.7.0rc2","sha":"bdb55aa99d8a0a9e5765c05184b697c1c37fa28a","kind":"tag","published_at":"2021-01-12T18:44:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0rc2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0rc2/manifests"},{"name":"v0.7.0.rc1","sha":"eb38a2d710b67df48614cb5098ddb8472289ce6d","kind":"tag","published_at":"2020-05-04T21:50:03.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.7.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.7.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.7.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.7.0.rc1/manifests"},{"name":"v0.6.0","sha":"0250d10930e4d5acf24ccc7144184989e65c2f3c","kind":"tag","published_at":"2019-04-17T21:10:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0/manifests"},{"name":"v0.6.0.rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-17T21:07:02.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.6.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.6.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.6.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.6.0.rc1/manifests"},{"name":"0.6.0rc1","sha":"49fe241089cac233ea59dd3c2a056a4de7f51257","kind":"tag","published_at":"2019-04-14T12:03:45.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/0.6.0rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/0.6.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@0.6.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/0.6.0rc1/manifests"},{"name":"v0.5.0","sha":"d0f5633183e7f9f6614814b0d43fb9a18c5ba893","kind":"tag","published_at":"2017-02-09T14:18:06.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0/manifests"},{"name":"v0.5.0.rc1","sha":"1998cd075ab1f748a7569e020bc94de71676c0db","kind":"tag","published_at":"2017-01-28T13:54:01.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.5.0.rc1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.5.0.rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.5.0.rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.5.0.rc1/manifests"},{"name":"v0.4.1","sha":"5cf3f0f3daaeb726a0f26e418b37e7b9e42edc53","kind":"commit","published_at":"2013-03-28T11:22:24.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4.1/manifests"},{"name":"v0.4","sha":"7785f9b766af8c38a78e740c095e8362cd6e756c","kind":"commit","published_at":"2013-02-25T11:08:29.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.4","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.4/manifests"},{"name":"v0.3","sha":"077be217555b1914979cccc972e57d231642989e","kind":"commit","published_at":"2013-02-19T12:27:07.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.3","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.3/manifests"},{"name":"v0.2","sha":"73e465c098031a0c9afb7371154274b02368f5ce","kind":"commit","published_at":"2013-02-15T14:31:59.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.2","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.2/manifests"},{"name":"v0.1","sha":"e962006b4ad1359482595772fc9b9707b212617e","kind":"commit","published_at":"2013-02-08T21:38:40.000Z","download_url":"https://codeload.github.com/tiran/defusedxml/tar.gz/v0.1","html_url":"https://github.com/tiran/defusedxml/releases/tag/v0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/tiran/defusedxml@v0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/tags/v0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-19T20:52:49.326Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/python311Packages.defusedxml?channel=23.05\u0026repository_url=https://channels.nixos.org/nixos-23.05","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/python311Packages.defusedxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/python311Packages.defusedxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/python311Packages.defusedxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:03:48.559Z","issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","maintainers":[{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/python311Packages.defusedxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/python311Packages.defusedxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/python311Packages.defusedxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/python311Packages.defusedxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/python311Packages.defusedxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/python311Packages.defusedxml/codemeta","maintainers":[{"uuid":"fabaff","login":null,"name":"Fabian Affolter","email":"mail@fabian-affolter.ch","url":"https://github.com/fabaff","packages_count":3335,"html_url":null,"role":null,"created_at":"2026-03-04T19:33:55.212Z","updated_at":"2026-03-04T19:33:55.212Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/maintainers/fabaff/packages"}],"registry":{"name":"nixpkgs-23.05","url":"https://channels.nixos.org/nixos-23.05","ecosystem":"nixpkgs","default":false,"packages_count":101092,"maintainers_count":2622,"namespaces_count":0,"keywords_count":613,"github":"NixOS","metadata":{"funded_packages_count":2086},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.882Z","updated_at":"2026-08-22T05:04:25.014Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/namespaces"}}],"commits":{"id":3042,"full_name":"tiran/defusedxml","default_branch":"main","total_commits":201,"total_committers":6,"total_bot_commits":0,"total_bot_committers":0,"mean_commits":33.5,"dds":0.06965174129353235,"past_year_total_commits":0,"past_year_total_committers":0,"past_year_total_bot_commits":0,"past_year_total_bot_committers":0,"past_year_mean_commits":0.0,"past_year_dds":0.0,"last_synced_at":"2026-08-19T20:13:20.696Z","last_synced_commit":"c7445887f5e1bcea470a16f61369d29870cfcfe1","created_at":"2023-03-07T09:15:56.646Z","updated_at":"2026-08-19T20:13:19.435Z","committers":[{"name":"Christian Heimes","email":"christian@python.org","login":"tiran","count":187},{"name":"Brett Cannon","email":"brett@python.org","login":"brettcannon","count":8},{"name":"Jon Dufresne","email":"jon.dufresne@gmail.com","login":"jdufresne","count":3},{"name":"Kian-Meng Ang","email":"kianmeng@cpan.org","login":"kianmeng","count":1},{"name":"Jakub Wilk","email":"jwilk@jwilk.net","login":"jwilk","count":1},{"name":"Fred Drake","email":"fred@fdrake.net","login":"freddrake","count":1}],"past_year_committers":[],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-08-20T00:00:10.776Z","repositories_count":6740034,"commits_count":975859012,"contributors_count":41146129,"owners_count":1356232,"committers_count":3349823,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"tiran/defusedxml","html_url":"https://github.com/tiran/defusedxml","last_synced_at":"2026-08-22T21:33:18.177Z","status":null,"issues_count":56,"pull_requests_count":58,"avg_time_to_close_issue":39990091.307692304,"avg_time_to_close_pull_request":12247573.80392157,"issues_closed_count":52,"pull_requests_closed_count":51,"pull_request_authors_count":23,"issue_authors_count":51,"avg_comments_per_issue":2.267857142857143,"avg_comments_per_pull_request":1.3793103448275863,"merged_pull_requests_count":26,"bot_issues_count":0,"bot_pull_requests_count":2,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"created_at":"2023-05-10T14:52:27.420Z","updated_at":"2026-08-22T21:33:18.177Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/tiran%2Fdefusedxml/issues","issue_labels_count":{"table":{"bug":1,"wontfix":1}},"pull_request_labels_count":{"table":{"duplicate":2,"dependencies":2,"bug":1}},"issue_author_associations_count":{"table":{"NONE":52,"CONTRIBUTOR":3,"OWNER":1}},"pull_request_author_associations_count":{"table":{"NONE":23,"OWNER":22,"CONTRIBUTOR":13}},"issue_authors":{"table":{"ecederstrand":3,"JonZeolla":2,"dga-nagra":2,"zuber7":2,"d1p":1,"tiff1127":1,"endlisnis":1,"Hritik14":1,"mschwager":1,"oca159":1,"Jon-Work":1,"papadeltasierra":1,"mcswell2001":1,"tiran":1,"drigz":1,"NicoHood":1,"sudharsan78":1,"timhemel":1,"jbethune":1,"yauhen-sobaleu":1,"jmelahman":1,"dgtlmoon":1,"charleswhchan":1,"alvaro-crespo":1,"martinbergpetersen":1,"brunato":1,"fingermark":1,"kloczek":1,"italomaia":1,"sshishov":1,"abo-abo":1,"oar-spease":1,"Gittenburg":1,"cemakpolat":1,"c00kiemon5ter":1,"spaceone":1,"wwwzhangshenzecn":1,"ankitgupta8888":1,"romaingz":1,"xgodon":1,"swamper123":1,"sagaragarwal94":1,"turicas":1,"brocef":1,"AdamWill":1,"pmezard":1,"pitbulk":1,"dimaqq":1,"lewismc":1,"angelarosario":1,"walkinrain369":1}},"pull_request_authors":{"table":{"tiran":22,"jdufresne":7,"cclauss":5,"Viicos":2,"brunato":2,"ecederstrand":2,"dependabot[bot]":2,"AntoineSebert":1,"d1p":1,"radarhere":1,"jelmer":1,"icemac":1,"amadev":1,"marienz":1,"khatkar":1,"hroncok":1,"kianmeng":1,"AdamWill":1,"jwilk":1,"jmelahman":1,"ticosax":1,"frenzymadness":1,"liZe":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-08-23T00:00:07.901Z","repositories_count":16293956,"issues_count":42264781,"pull_requests_count":134582680,"authors_count":11513320,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{}},"past_year_pull_request_labels_count":{"table":{}},"past_year_issue_author_associations_count":{"table":{}},"past_year_pull_request_author_associations_count":{"table":{}},"past_year_issue_authors":{"table":{}},"past_year_pull_request_authors":{"table":{}},"maintainers":[{"table":{"login":"tiran","count":23,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tiran"}}],"active_maintainers":[]}},"events":{"total":{"ForkEvent":3,"IssueCommentEvent":2,"IssuesEvent":1,"PullRequestEvent":2,"PullRequestReviewEvent":3,"WatchEvent":41},"last_year":{"WatchEvent":6}},"keywords":[],"dependencies":[{"ecosystem":"actions","filepath":".github/workflows/main.yml","sha":null,"kind":"manifest","created_at":"2023-01-23T04:46:27.996Z","updated_at":"2023-01-23T04:46:27.996Z","repository_link":"https://github.com/tiran/defusedxml/blob/main/.github/workflows/main.yml","dependencies":[{"id":7109321714,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7109321715,"package_name":"actions/setup-python","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/pypi.yml","sha":null,"kind":"manifest","created_at":"2023-01-23T04:46:28.020Z","updated_at":"2023-01-23T04:46:28.020Z","repository_link":"https://github.com/tiran/defusedxml/blob/main/.github/workflows/pypi.yml","dependencies":[{"id":7109321723,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7109321724,"package_name":"actions/setup-python","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false},{"id":7109321725,"package_name":"pypa/gh-action-pypi-publish","ecosystem":"actions","requirements":"master","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"pypi","filepath":"pyproject.toml","sha":null,"kind":"manifest","created_at":"2023-09-29T08:14:33.234Z","updated_at":"2023-09-29T08:14:33.234Z","repository_link":"https://github.com/tiran/defusedxml/blob/main/pyproject.toml","dependencies":[]},{"ecosystem":"pypi","filepath":"setup.py","sha":null,"kind":"manifest","created_at":"2023-09-29T08:14:33.247Z","updated_at":"2023-09-29T08:14:33.247Z","repository_link":"https://github.com/tiran/defusedxml/blob/main/setup.py","dependencies":[]}],"score":29.621202442604524,"created_at":"2025-10-09T10:55:32.970Z","updated_at":"2026-08-23T22:06:53.079Z","avatar_url":"https://github.com/tiran.png","language":"Python","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/366725","html_url":"https://summary.ecosyste.ms/projects/366725"}