{"id":369143,"url":"https://github.com/npm/ci-detect","last_synced_at":"2026-06-19T02:30:32.708Z","repository":{"id":36541482,"uuid":"228320359","full_name":"npm/ci-detect","owner":"npm","description":"Detect what kind of CI environment the program is in","archived":true,"fork":false,"pushed_at":"2023-04-19T19:21:04.000Z","size":179,"stargazers_count":52,"open_issues_count":0,"forks_count":10,"subscribers_count":0,"default_branch":"main","last_synced_at":"2026-06-07T21:04:17.171Z","etag":null,"topics":["npm-cli"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/npm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2019-12-16T06:42:43.000Z","updated_at":"2026-04-02T21:43:48.000Z","dependencies_parsed_at":"2024-01-16T22:21:04.300Z","dependency_job_id":"a1a3e877-a694-4907-b3af-098c6ea702ca","html_url":"https://github.com/npm/ci-detect","commit_stats":{"total_commits":73,"total_committers":13,"mean_commits":5.615384615384615,"dds":0.7397260273972603,"last_synced_commit":"9ac683486f4add131432c9989b54c38e1e904022"},"previous_names":[],"tags_count":10,"template":false,"template_full_name":null,"purl":"pkg:github/npm/ci-detect","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fci-detect","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fci-detect/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fci-detect/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fci-detect/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","download_url":"https://codeload.github.com/npm/ci-detect/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fci-detect/sbom","scorecard":{"id":696292,"data":{"date":"2025-08-11","repo":{"name":"github.com/npm/ci-detect","commit":"9ac683486f4add131432c9989b54c38e1e904022"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.1,"checks":[{"name":"Code-Review","score":5,"reason":"Found 3/6 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":0,"reason":"dangerous workflow patterns detected","details":["Warn: script injection with untrusted input ' github.event.pull_request.title ': .github/workflows/pull-request.yml:47"],"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:175: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:211: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/post-dependabot.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:185: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:228: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:266: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:283: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:325: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:380: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/release.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/audit.yml:32","Warn: npmCommand not pinned by hash: .github/workflows/audit.yml:36","Warn: npmCommand not pinned by hash: .github/workflows/ci-release.yml:87","Warn: npmCommand not pinned by hash: .github/workflows/ci-release.yml:91","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:37","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:41","Warn: npmCommand not pinned by hash: .github/workflows/post-dependabot.yml:33","Warn: npmCommand not pinned by hash: .github/workflows/post-dependabot.yml:37","Warn: npmCommand not pinned by hash: .github/workflows/pull-request.yml:36","Warn: npmCommand not pinned by hash: .github/workflows/pull-request.yml:40","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:330","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:51","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:55","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:164","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:168","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   9 third-party GitHubAction dependencies pinned","Info:   0 out of  15 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Warn: no topLevel permission defined: .github/workflows/audit.yml:1","Warn: no topLevel permission defined: .github/workflows/ci-release.yml:1","Warn: no topLevel permission defined: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/post-dependabot.yml:8","Warn: no topLevel permission defined: .github/workflows/pull-request.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:18","Warn: topLevel 'checks' permission set to 'write': .github/workflows/release.yml:20","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-22T03:47:45.373Z","repository_id":36541482,"created_at":"2025-08-22T03:47:45.373Z","updated_at":"2025-08-22T03:47:45.373Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":34221150,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-11T02:00:06.485Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"npm","name":"npm","uuid":"6078720","kind":"organization","description":"JavaScript Package Manager, Registry \u0026 Website","email":null,"website":"https://npmjs.com","location":"United States of America","twitter":"npmjs","company":null,"icon_url":"https://avatars.githubusercontent.com/u/6078720?v=4","repositories_count":343,"last_synced_at":"2024-04-14T06:35:40.452Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/npm","funding_links":[],"total_stars":50155,"followers":2401,"following":0,"created_at":"2022-11-02T16:18:59.756Z","updated_at":"2024-04-14T06:36:45.292Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm/repositories"},"packages":[{"id":14132367,"name":"github.com/npm/ci-detect","ecosystem":"go","description":null,"homepage":null,"licenses":null,"normalized_licenses":[],"repository_url":"https://github.com/npm/ci-detect","keywords_array":[],"namespace":null,"versions_count":10,"first_release_published_at":"2019-12-16T06:48:51.000Z","latest_release_published_at":"2022-11-10T21:21:27.000Z","latest_release_number":"v3.0.2+incompatible","last_synced_at":"2026-06-16T01:02:43.469Z","created_at":"2026-03-27T11:13:32.600Z","updated_at":"2026-06-16T01:02:43.469Z","registry_url":"https://pkg.go.dev/github.com/npm/ci-detect","install_command":"go get github.com/npm/ci-detect","documentation_url":"https://pkg.go.dev/github.com/npm/ci-detect#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-03-27T11:57:01.114Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.208711634545036,"dependent_packages_count":4.880608738860206,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":5.044660186702622},"purl":"pkg:golang/github.com/npm/ci-detect","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/npm/ci-detect","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/npm/ci-detect","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/npm/ci-detect/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fnpm%2Fci-detect/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fnpm%2Fci-detect/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fnpm%2Fci-detect/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fnpm%2Fci-detect/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fnpm%2Fci-detect/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fnpm%2Fci-detect/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2179716,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":5003419,"name":"org.webjars.npm:npmcli__ci-detect","ecosystem":"maven","description":"WebJar for @npmcli/ci-detect","homepage":"https://www.webjars.org","licenses":"ISC","normalized_licenses":["ISC"],"repository_url":"https://github.com/npm/ci-detect","keywords_array":[],"namespace":"org.webjars.npm","versions_count":3,"first_release_published_at":"2020-02-19T16:33:23.000Z","latest_release_published_at":"2023-04-14T07:52:57.000Z","latest_release_number":"1.4.0","last_synced_at":"2026-06-16T01:02:41.108Z","created_at":"2022-07-27T11:04:50.760Z","updated_at":"2026-06-16T01:02:41.108Z","registry_url":"https://central.sonatype.com/artifact/org.webjars.npm/npmcli__ci-detect/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.webjars.npm/npmcli__ci-detect/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"uuid":"228320359","full_name":"npm/ci-detect","owner":"npm","description":"Detect what kind of CI environment the program is in","archived":false,"fork":false,"pushed_at":"2023-03-08T00:49:12.000Z","size":174,"stargazers_count":48,"open_issues_count":1,"forks_count":18,"subscribers_count":4,"default_branch":"main","last_synced_at":"2023-03-21T03:31:13.771Z","etag":null,"topics":["npm-cli"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"logo_url":null,"metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null}},"created_at":"2019-12-16T06:42:43.000Z","updated_at":"2023-03-13T01:52:02.000Z","dependencies_parsed_at":"2023-02-14T11:01:18.095Z","dependency_job_id":null,"html_url":"https://github.com/npm/ci-detect","commit_stats":null,"repository_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fci-detect","tags_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fci-detect/tags","manifests_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fci-detect/manifests","owner_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":108921946,"host_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"http://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names"}},"repo_metadata_updated_at":"2023-03-22T03:29:08.827Z","dependent_packages_count":3,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":16.90359006667295,"stargazers_count":22.633290730593515,"forks_count":23.044403825819668,"average":23.64030714100838},"purl":"pkg:maven/org.webjars.npm/npmcli__ci-detect","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.webjars.npm:npmcli__ci-detect","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.webjars.npm:npmcli__ci-detect","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.webjars.npm:npmcli__ci-detect/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2023-05-18T15:58:24.188Z","issues_count":4,"pull_requests_count":53,"avg_time_to_close_issue":11580405.75,"avg_time_to_close_pull_request":5235392.150943397,"issues_closed_count":4,"pull_requests_closed_count":53,"pull_request_authors_count":12,"issue_authors_count":4,"avg_comments_per_issue":2.0,"avg_comments_per_pull_request":0.8301886792452831,"merged_pull_requests_count":32,"bot_issues_count":0,"bot_pull_requests_count":41,"past_year_issues_count":3,"past_year_pull_requests_count":25,"past_year_avg_time_to_close_issue":3629656.6666666665,"past_year_avg_time_to_close_pull_request":396911.44,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":25,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":2.6666666666666665,"past_year_avg_comments_per_pull_request":0.92,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":20,"past_year_merged_pull_requests_count":18},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:npmcli__ci-detect/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:npmcli__ci-detect/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:npmcli__ci-detect/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:npmcli__ci-detect/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:npmcli__ci-detect/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:npmcli__ci-detect/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":608482,"maintainers_count":0,"namespaces_count":80807,"keywords_count":34879,"github":"maven-central","metadata":{"funded_packages_count":37828},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-06-10T05:05:55.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":1094295,"name":"@npmcli/ci-detect","ecosystem":"npm","description":"Detect what kind of CI environment the program is in","homepage":"https://github.com/npm/ci-detect#readme","licenses":"ISC","normalized_licenses":["ISC"],"repository_url":"https://github.com/npm/ci-detect","keywords_array":[],"namespace":"npmcli","versions_count":10,"first_release_published_at":"2019-12-16T06:49:15.515Z","latest_release_published_at":"2022-11-10T21:15:05.334Z","latest_release_number":"3.0.2","last_synced_at":"2026-06-14T00:02:26.597Z","created_at":"2022-04-08T10:35:30.785Z","updated_at":"2026-06-14T00:02:26.597Z","registry_url":"https://www.npmjs.com/package/@npmcli/ci-detect","install_command":"npm install @npmcli/ci-detect","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"3.0.2"}},"repo_metadata":{"id":36541482,"uuid":"228320359","full_name":"npm/ci-detect","owner":"npm","description":"Detect what kind of CI environment the program is in","archived":true,"fork":false,"pushed_at":"2023-04-19T19:21:04.000Z","size":179,"stargazers_count":52,"open_issues_count":0,"forks_count":10,"subscribers_count":2,"default_branch":"main","last_synced_at":"2026-04-23T23:02:32.482Z","etag":null,"topics":["npm-cli"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/npm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2019-12-16T06:42:43.000Z","updated_at":"2026-04-02T21:43:48.000Z","dependencies_parsed_at":"2024-01-16T22:21:04.300Z","dependency_job_id":"a1a3e877-a694-4907-b3af-098c6ea702ca","html_url":"https://github.com/npm/ci-detect","commit_stats":{"total_commits":73,"total_committers":13,"mean_commits":5.615384615384615,"dds":0.7397260273972603,"last_synced_commit":"9ac683486f4add131432c9989b54c38e1e904022"},"previous_names":[],"tags_count":10,"template":false,"template_full_name":null,"purl":"pkg:github/npm/ci-detect","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fci-detect","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fci-detect/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fci-detect/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fci-detect/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","download_url":"https://codeload.github.com/npm/ci-detect/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fci-detect/sbom","scorecard":{"id":696292,"data":{"date":"2025-08-11","repo":{"name":"github.com/npm/ci-detect","commit":"9ac683486f4add131432c9989b54c38e1e904022"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4.1,"checks":[{"name":"Code-Review","score":5,"reason":"Found 3/6 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"project is archived","details":["Warn: Repository is archived."],"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":0,"reason":"dangerous workflow patterns detected","details":["Warn: script injection with untrusted input ' github.event.pull_request.title ': .github/workflows/pull-request.yml:47"],"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:175: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:211: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/post-dependabot.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:185: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:228: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:266: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:283: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:325: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:380: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/ci-detect/release.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/audit.yml:32","Warn: npmCommand not pinned by hash: .github/workflows/audit.yml:36","Warn: npmCommand not pinned by hash: .github/workflows/ci-release.yml:87","Warn: npmCommand not pinned by hash: .github/workflows/ci-release.yml:91","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:37","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:41","Warn: npmCommand not pinned by hash: .github/workflows/post-dependabot.yml:33","Warn: npmCommand not pinned by hash: .github/workflows/post-dependabot.yml:37","Warn: npmCommand not pinned by hash: .github/workflows/pull-request.yml:36","Warn: npmCommand not pinned by hash: .github/workflows/pull-request.yml:40","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:330","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:51","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:55","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:164","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:168","Info:   0 out of  29 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   9 third-party GitHubAction dependencies pinned","Info:   0 out of  15 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Warn: no topLevel permission defined: .github/workflows/audit.yml:1","Warn: no topLevel permission defined: .github/workflows/ci-release.yml:1","Warn: no topLevel permission defined: .github/workflows/ci.yml:1","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/post-dependabot.yml:8","Warn: no topLevel permission defined: .github/workflows/pull-request.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:18","Warn: topLevel 'checks' permission set to 'write': .github/workflows/release.yml:20","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":7,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 0 commits out of 27 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-22T03:47:45.373Z","repository_id":36541482,"created_at":"2025-08-22T03:47:45.373Z","updated_at":"2025-08-22T03:47:45.373Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":32451481,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-29T22:27:22.272Z","status":"online","status_checked_at":"2026-04-30T02:00:05.929Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"tags":[]},"repo_metadata_updated_at":"2026-05-14T13:53:16.632Z","dependent_packages_count":44,"downloads":2130859,"downloads_period":"last-month","dependent_repos_count":85363,"rankings":{"downloads":0.15185922403189042,"dependent_repos_count":0.10548271802215137,"dependent_packages_count":0.6544975039184876,"stargazers_count":5.939470418743559,"forks_count":5.534216981192921,"docker_downloads_count":0.020216119004245386,"average":2.0676238274855425},"purl":"pkg:npm/%40npmcli/ci-detect","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/@npmcli/ci-detect","docker_dependents_count":21159,"docker_downloads_count":3672202090,"usage_url":"https://repos.ecosyste.ms/usage/npm/@npmcli/ci-detect","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/@npmcli/ci-detect/dependencies","status":"deprecated","funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-05-10T07:07:12.473Z","issues_count":4,"pull_requests_count":53,"avg_time_to_close_issue":11580405.75,"avg_time_to_close_pull_request":5235392.150943397,"issues_closed_count":4,"pull_requests_closed_count":53,"pull_request_authors_count":12,"issue_authors_count":4,"avg_comments_per_issue":2.0,"avg_comments_per_pull_request":0.8301886792452831,"merged_pull_requests_count":32,"bot_issues_count":0,"bot_pull_requests_count":41,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fci-detect/issues","maintainers":[],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@npmcli%2Fci-detect/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@npmcli%2Fci-detect/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@npmcli%2Fci-detect/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@npmcli%2Fci-detect/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@npmcli%2Fci-detect/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@npmcli%2Fci-detect/codemeta","maintainers":[{"uuid":"saquibkhan","login":"saquibkhan","name":null,"email":"saquibkhan@github.com","url":null,"packages_count":274,"html_url":"https://www.npmjs.com/~saquibkhan","role":null,"created_at":"2022-12-05T07:11:11.792Z","updated_at":"2022-12-05T07:11:11.792Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/saquibkhan/packages"},{"uuid":"reggi","login":"reggi","name":null,"email":"reggi@github.com","url":null,"packages_count":452,"html_url":"https://www.npmjs.com/~reggi","role":null,"created_at":"2024-05-31T13:43:18.546Z","updated_at":"2024-05-31T13:43:18.546Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/reggi/packages"},{"uuid":"npm-cli-ops","login":"npm-cli-ops","name":null,"email":"npm-cli+bot@github.com","url":null,"packages_count":127,"html_url":"https://www.npmjs.com/~npm-cli-ops","role":null,"created_at":"2023-03-08T00:12:01.418Z","updated_at":"2023-03-08T00:12:01.418Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/npm-cli-ops/packages"},{"uuid":"owlstronaut","login":"owlstronaut","name":null,"email":"owlstronaut@github.com","url":null,"packages_count":280,"html_url":"https://www.npmjs.com/~owlstronaut","role":null,"created_at":"2025-05-14T20:57:19.533Z","updated_at":"2025-05-14T20:57:19.533Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/owlstronaut/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5647536,"maintainers_count":1201666,"namespaces_count":399623,"keywords_count":847874,"github":"npm","metadata":{"funded_packages_count":171745},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-06-10T05:11:46.456Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}}],"commits":{"id":83166,"full_name":"npm/ci-detect","default_branch":"main","total_commits":73,"total_committers":13,"total_bot_commits":23,"total_bot_committers":2,"mean_commits":5.615384615384615,"dds":0.7397260273972603,"past_year_total_commits":0,"past_year_total_committers":0,"past_year_total_bot_commits":0,"past_year_total_bot_committers":0,"past_year_mean_commits":0.0,"past_year_dds":0.0,"last_synced_at":"2026-06-16T01:01:34.647Z","last_synced_commit":"9ac683486f4add131432c9989b54c38e1e904022","created_at":"2023-03-07T20:15:58.621Z","updated_at":"2026-06-16T01:01:34.310Z","committers":[{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":19},{"name":"isaacs","email":"i@izs.me","login":"isaacs","count":17},{"name":"Gar","email":"gar+gh@danger.computer","login":"wraithgar","count":13},{"name":"Luke Karrys","email":"luke@lukekarrys.com","login":"lukekarrys","count":12},{"name":"github-actions[bot]","email":"41898282+github-actions[bot]","login":"github-actions[bot]","count":4},{"name":"ulrichb","email":"ulrich.b@gmx.at","login":"ulrichb","count":1},{"name":"nlf","email":"nlf@github.com","login":"nlf","count":1},{"name":"anotherjsguy","email":"kuldeepkeshwar@gmail.com","login":"kuldeepkeshwar","count":1},{"name":"Suneil Nyamathi","email":"suneil.nyamathi@verizonmedia.com","login":"snyamathi","count":1},{"name":"Sukka","email":"isukkaw@gmail.com","login":"SukkaW","count":1},{"name":"Fredrik Skogman","email":"kommendorkapten@github.com","login":"kommendorkapten","count":1},{"name":"Bohdan Ganicky","email":"bohdan.ganicky@gmail.com","login":"bganicky","count":1},{"name":"6543","email":"6543@obermui.de","login":"6543","count":1}],"past_year_committers":[],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fci-detect/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-06-18T00:00:09.052Z","repositories_count":6261794,"commits_count":876597824,"contributors_count":35060576,"owners_count":1167803,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"npm/ci-detect","html_url":"https://github.com/npm/ci-detect","last_synced_at":"2026-05-16T10:01:41.502Z","status":"error","issues_count":4,"pull_requests_count":53,"avg_time_to_close_issue":11580405.75,"avg_time_to_close_pull_request":5235392.150943397,"issues_closed_count":4,"pull_requests_closed_count":53,"pull_request_authors_count":12,"issue_authors_count":4,"avg_comments_per_issue":2.0,"avg_comments_per_pull_request":0.8301886792452831,"merged_pull_requests_count":32,"bot_issues_count":0,"bot_pull_requests_count":41,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"created_at":"2023-05-16T15:30:11.098Z","updated_at":"2026-05-16T10:01:41.502Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fci-detect","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fci-detect/issues","issue_labels_count":{"table":{"Needs Triage":1,"Bug":1}},"pull_request_labels_count":{"table":{"Dependencies":29,"autorelease: tagged":4}},"issue_author_associations_count":{"table":{"NONE":3,"CONTRIBUTOR":1}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":51,"NONE":2}},"issue_authors":{"table":{"nickmccurdy":1,"igibek":1,"ulrichb":1,"kanadgupta":1}},"pull_request_authors":{"table":{"dependabot[bot]":37,"github-actions[bot]":4,"wraithgar":3,"SukkaW":1,"kommendorkapten":1,"6543":1,"aminya":1,"kuldeepkeshwar":1,"ulrichb":1,"snyamathi":1,"bganicky":1,"kanadgupta":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-05-30T00:00:22.129Z","repositories_count":14731114,"issues_count":33594570,"pull_requests_count":110571260,"authors_count":11283613,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{}},"past_year_pull_request_labels_count":{"table":{}},"past_year_issue_author_associations_count":{"table":{}},"past_year_pull_request_author_associations_count":{"table":{}},"past_year_issue_authors":{"table":{}},"past_year_pull_request_authors":{"table":{}},"maintainers":[],"active_maintainers":[]}},"events":{"total":{},"last_year":{}},"keywords":["npm-cli"],"dependencies":[{"ecosystem":"npm","filepath":"package.json","sha":null,"kind":"manifest","created_at":"2022-08-08T15:30:22.942Z","updated_at":"2022-08-08T15:30:22.942Z","repository_link":"https://github.com/npm/ci-detect/blob/main/package.json","dependencies":[{"id":671429808,"package_name":"@npmcli/eslint-config","ecosystem":"npm","requirements":"^3.0.1","direct":true,"kind":"development","optional":false},{"id":671429809,"package_name":"@npmcli/template-oss","ecosystem":"npm","requirements":"3.5.0","direct":true,"kind":"development","optional":false},{"id":671429810,"package_name":"tap","ecosystem":"npm","requirements":"^16.0.1","direct":true,"kind":"development","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/audit.yml","sha":null,"kind":"manifest","created_at":"2023-01-17T02:26:29.862Z","updated_at":"2023-01-17T02:26:29.862Z","repository_link":"https://github.com/npm/ci-detect/blob/main/.github/workflows/audit.yml","dependencies":[{"id":6965333758,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6965333759,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/ci-release.yml","sha":null,"kind":"manifest","created_at":"2023-01-17T02:26:29.887Z","updated_at":"2023-01-17T02:26:29.887Z","repository_link":"https://github.com/npm/ci-detect/blob/main/.github/workflows/ci-release.yml","dependencies":[{"id":6965333760,"package_name":"actions/github-script","ecosystem":"actions","requirements":"v6","direct":true,"kind":"composite","optional":false},{"id":6965333761,"package_name":"LouisBrunner/checks-action","ecosystem":"actions","requirements":"v1.3.1","direct":true,"kind":"composite","optional":false},{"id":6965333762,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6965333763,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/ci.yml","sha":null,"kind":"manifest","created_at":"2023-01-17T02:26:29.913Z","updated_at":"2023-01-17T02:26:29.913Z","repository_link":"https://github.com/npm/ci-detect/blob/main/.github/workflows/ci.yml","dependencies":[{"id":6965333764,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6965333765,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/codeql-analysis.yml","sha":null,"kind":"manifest","created_at":"2023-01-17T02:26:29.938Z","updated_at":"2023-01-17T02:26:29.938Z","repository_link":"https://github.com/npm/ci-detect/blob/main/.github/workflows/codeql-analysis.yml","dependencies":[{"id":6965333766,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6965333767,"package_name":"github/codeql-action/init","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6965333768,"package_name":"github/codeql-action/analyze","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/post-dependabot.yml","sha":null,"kind":"manifest","created_at":"2023-01-17T02:26:29.962Z","updated_at":"2023-01-17T02:26:29.962Z","repository_link":"https://github.com/npm/ci-detect/blob/main/.github/workflows/post-dependabot.yml","dependencies":[{"id":6965333769,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6965333770,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6965333771,"package_name":"dependabot/fetch-metadata","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/pull-request.yml","sha":null,"kind":"manifest","created_at":"2023-01-17T02:26:29.987Z","updated_at":"2023-01-17T02:26:29.987Z","repository_link":"https://github.com/npm/ci-detect/blob/main/.github/workflows/pull-request.yml","dependencies":[{"id":6965333772,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6965333773,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/release.yml","sha":null,"kind":"manifest","created_at":"2023-01-17T02:26:30.011Z","updated_at":"2023-01-17T02:26:30.011Z","repository_link":"https://github.com/npm/ci-detect/blob/main/.github/workflows/release.yml","dependencies":[{"id":6965333774,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6965333775,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6965333776,"package_name":"actions/github-script","ecosystem":"actions","requirements":"v6","direct":true,"kind":"composite","optional":false},{"id":6965333777,"package_name":"LouisBrunner/checks-action","ecosystem":"actions","requirements":"v1.3.1","direct":true,"kind":"composite","optional":false}]}],"score":28.540859523002776,"created_at":"2025-11-11T15:16:19.958Z","updated_at":"2026-06-19T02:30:32.708Z","avatar_url":"https://github.com/npm.png","language":"JavaScript","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/369143","html_url":"https://summary.ecosyste.ms/projects/369143"}