{"id":369155,"url":"https://github.com/npm/package-json","last_synced_at":"2026-06-19T02:31:08.763Z","repository":{"id":40507286,"uuid":"379075817","full_name":"npm/package-json","owner":"npm","description":"Programmatic API to update package.json","archived":false,"fork":false,"pushed_at":"2026-01-16T10:13:36.000Z","size":384,"stargazers_count":94,"open_issues_count":5,"forks_count":17,"subscribers_count":10,"default_branch":"main","last_synced_at":"2026-02-07T13:14:20.126Z","etag":null,"topics":["npm-cli"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/npm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2021-06-21T22:13:21.000Z","updated_at":"2026-01-09T23:49:46.000Z","dependencies_parsed_at":"2025-12-14T07:00:57.206Z","dependency_job_id":null,"html_url":"https://github.com/npm/package-json","commit_stats":{"total_commits":48,"total_committers":5,"mean_commits":9.6,"dds":0.6458333333333333,"last_synced_commit":"9dfd8dacd05d5b2519831cbd4482e1de029299f6"},"previous_names":[],"tags_count":26,"template":false,"template_full_name":null,"purl":"pkg:github/npm/package-json","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","download_url":"https://codeload.github.com/npm/package-json/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/sbom","scorecard":{"id":696414,"data":{"date":"2025-08-11","repo":{"name":"github.com/npm/package-json","commit":"a5e4ac3ab364b83afd86517d83f451e4762ed1f8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.1,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":10,"reason":"18 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/post-dependabot.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release-integration.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/audit.yml:41","Warn: npmCommand not pinned by hash: .github/workflows/ci-release.yml:62","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/post-dependabot.yml:39","Warn: npmCommand not pinned by hash: .github/workflows/pull-request.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/release-integration.yml:56","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:50","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:130","Info:   0 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  12 third-party GitHubAction dependencies pinned","Info:   0 out of   8 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:25","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:247","Info: topLevel 'contents' permission set to 'read': .github/workflows/audit.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci-release.yml:22","Warn: topLevel 'checks' permission set to 'write': .github/workflows/ci-release.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Warn: topLevel 'contents' permission set to 'write': .github/workflows/post-dependabot.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/pull-request.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-integration.yml:23","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:11","Warn: topLevel 'checks' permission set to 'write': .github/workflows/release.yml:13","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 25 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-22T03:49:49.322Z","repository_id":40507286,"created_at":"2025-08-22T03:49:49.322Z","updated_at":"2025-08-22T03:49:49.322Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29297101,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-10T09:11:24.369Z","status":"ssl_error","status_checked_at":"2026-02-10T09:10:47.789Z","response_time":65,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"npm","name":"npm","uuid":"6078720","kind":"organization","description":"JavaScript Package Manager, Registry \u0026 Website","email":null,"website":"https://npmjs.com","location":"United States of America","twitter":"npmjs","company":null,"icon_url":"https://avatars.githubusercontent.com/u/6078720?v=4","repositories_count":343,"last_synced_at":"2024-04-14T06:35:40.452Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/npm","funding_links":[],"total_stars":50155,"followers":2401,"following":0,"created_at":"2022-11-02T16:18:59.756Z","updated_at":"2024-04-14T06:36:45.292Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm/repositories"},"packages":[{"id":11669375,"name":"org.mvnpm.at.npmcli:package-json","ecosystem":"maven","description":"Programmatic API to update package.json","homepage":"https://github.com/npm/package-json#readme","licenses":"ISC","normalized_licenses":["ISC"],"repository_url":"https://github.com/npm/package-json","keywords_array":[],"namespace":"org.mvnpm.at.npmcli","versions_count":7,"first_release_published_at":"2025-03-19T03:25:56.000Z","latest_release_published_at":"2025-11-21T20:07:13.000Z","latest_release_number":"7.0.4","last_synced_at":"2026-01-06T21:02:35.322Z","created_at":"2025-05-21T20:45:52.876Z","updated_at":"2026-01-06T21:02:35.323Z","registry_url":"https://central.sonatype.com/artifact/org.mvnpm.at.npmcli/package-json/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.mvnpm.at.npmcli/package-json/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":40507286,"uuid":"379075817","full_name":"npm/package-json","owner":"npm","description":"Programmatic API to update package.json","archived":false,"fork":false,"pushed_at":"2025-10-30T10:06:15.000Z","size":360,"stargazers_count":89,"open_issues_count":6,"forks_count":17,"subscribers_count":10,"default_branch":"main","last_synced_at":"2025-10-30T12:10:51.867Z","etag":null,"topics":["npm-cli"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/npm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2021-06-21T22:13:21.000Z","updated_at":"2025-10-29T04:59:59.000Z","dependencies_parsed_at":"2024-11-21T09:02:22.979Z","dependency_job_id":"96b7189f-f4d8-4d90-a5f5-7a5eefddc92f","html_url":"https://github.com/npm/package-json","commit_stats":{"total_commits":48,"total_committers":5,"mean_commits":9.6,"dds":0.6458333333333333,"last_synced_commit":"9dfd8dacd05d5b2519831cbd4482e1de029299f6"},"previous_names":[],"tags_count":23,"template":false,"template_full_name":null,"purl":"pkg:github/npm/package-json","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","download_url":"https://codeload.github.com/npm/package-json/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/sbom","scorecard":{"id":696414,"data":{"date":"2025-08-11","repo":{"name":"github.com/npm/package-json","commit":"a5e4ac3ab364b83afd86517d83f451e4762ed1f8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.1,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":10,"reason":"18 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/post-dependabot.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release-integration.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/audit.yml:41","Warn: npmCommand not pinned by hash: .github/workflows/ci-release.yml:62","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/post-dependabot.yml:39","Warn: npmCommand not pinned by hash: .github/workflows/pull-request.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/release-integration.yml:56","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:50","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:130","Info:   0 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  12 third-party GitHubAction dependencies pinned","Info:   0 out of   8 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:25","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:247","Info: topLevel 'contents' permission set to 'read': .github/workflows/audit.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci-release.yml:22","Warn: topLevel 'checks' permission set to 'write': .github/workflows/ci-release.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Warn: topLevel 'contents' permission set to 'write': .github/workflows/post-dependabot.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/pull-request.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-integration.yml:23","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:11","Warn: topLevel 'checks' permission set to 'write': .github/workflows/release.yml:13","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 25 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-22T03:49:49.322Z","repository_id":40507286,"created_at":"2025-08-22T03:49:49.322Z","updated_at":"2025-08-22T03:49:49.322Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":281835582,"owners_count":26569857,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-30T02:00:06.501Z","response_time":61,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"npm","name":"npm","uuid":"6078720","kind":"organization","description":"JavaScript Package Manager, Registry \u0026 Website","email":null,"website":"https://npmjs.com","location":"United States of America","twitter":"npmjs","company":null,"icon_url":"https://avatars.githubusercontent.com/u/6078720?v=4","repositories_count":343,"last_synced_at":"2024-04-14T06:35:40.452Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/npm","funding_links":[],"total_stars":50155,"followers":2401,"following":0,"created_at":"2022-11-02T16:18:59.756Z","updated_at":"2024-04-14T06:36:45.292Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm/repositories"},"tags":[{"name":"v7.0.1","sha":"5aa1707d4302bcf030c6d19efd812e62609c6b53","kind":"commit","published_at":"2025-09-17T21:50:47.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v7.0.1","html_url":"https://github.com/npm/package-json/releases/tag/v7.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v7.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.1/manifests"},{"name":"v7.0.0","sha":"f5db81bdfbba5e9d3bfc0732f8bfe511825a20aa","kind":"commit","published_at":"2025-08-28T20:46:05.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v7.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v7.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v7.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.0/manifests"},{"name":"v6.2.0","sha":"a4116dc37d50b6606ab03fec2f8b4a8a30e2abb8","kind":"commit","published_at":"2025-05-21T16:26:47.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v6.2.0","html_url":"https://github.com/npm/package-json/releases/tag/v6.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v6.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.2.0/manifests"},{"name":"v6.1.1","sha":"b6465f44c727d6513db6898c7cbe41dd355cebe8","kind":"commit","published_at":"2025-01-21T17:22:45.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v6.1.1","html_url":"https://github.com/npm/package-json/releases/tag/v6.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v6.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.1.1/manifests"},{"name":"v6.1.0","sha":"79cb556342b83b4b298a413677758b39c4d9c839","kind":"commit","published_at":"2024-11-27T17:38:17.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v6.1.0","html_url":"https://github.com/npm/package-json/releases/tag/v6.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v6.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.1.0/manifests"},{"name":"v6.0.1","sha":"914737eb849d82aa65e4662f43dd5d726bb07428","kind":"commit","published_at":"2024-10-02T16:38:27.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v6.0.1","html_url":"https://github.com/npm/package-json/releases/tag/v6.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v6.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.0.1/manifests"},{"name":"v6.0.0","sha":"25761f127c0b1ae04f5cad710b9fc7852bc999ee","kind":"commit","published_at":"2024-09-26T18:48:20.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v6.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v6.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v6.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.0.0/manifests"},{"name":"v5.2.1","sha":"3426666cc292489d6d7a6d5e89a5029175a86f06","kind":"commit","published_at":"2024-09-17T20:33:09.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.2.1","html_url":"https://github.com/npm/package-json/releases/tag/v5.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.2.1/manifests"},{"name":"v5.2.0","sha":"fa6ed87cb7dbb824d5e74dd3ff03b711e201a5a4","kind":"commit","published_at":"2024-06-03T15:56:28.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.2.0","html_url":"https://github.com/npm/package-json/releases/tag/v5.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.2.0/manifests"},{"name":"v5.1.1","sha":"e6c2bdda262e57f1da26687a8cbc1b9805d28ce4","kind":"commit","published_at":"2024-05-29T15:51:58.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.1.1","html_url":"https://github.com/npm/package-json/releases/tag/v5.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.1.1/manifests"},{"name":"v5.1.0","sha":"57f7f255a38c1cfdfe7374920e651abef2ac3418","kind":"commit","published_at":"2024-04-22T20:49:45.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.1.0","html_url":"https://github.com/npm/package-json/releases/tag/v5.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.1.0/manifests"},{"name":"v5.0.3","sha":"ee18cb547e64479d9c4f21432812642a2e39b6ff","kind":"commit","published_at":"2024-04-12T22:04:20.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.0.3","html_url":"https://github.com/npm/package-json/releases/tag/v5.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.3/manifests"},{"name":"v5.0.2","sha":"b1e741b63e817405a52a495e0b52693491a5a0d0","kind":"commit","published_at":"2024-04-10T15:57:17.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.0.2","html_url":"https://github.com/npm/package-json/releases/tag/v5.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.2/manifests"},{"name":"v5.0.1","sha":"d4814d44e222a128e4df6b417056c39ee86db48a","kind":"commit","published_at":"2024-04-09T17:51:47.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.0.1","html_url":"https://github.com/npm/package-json/releases/tag/v5.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.1/manifests"},{"name":"v5.0.0","sha":"37f32be1557601e79750b335e43405af194315a1","kind":"commit","published_at":"2023-08-15T17:47:23.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v5.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.0/manifests"},{"name":"v4.0.1","sha":"e8b8dcb0bd9ff8078946b4397e8bf989aaf4a748","kind":"commit","published_at":"2023-07-17T20:39:41.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v4.0.1","html_url":"https://github.com/npm/package-json/releases/tag/v4.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v4.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v4.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v4.0.1/manifests"},{"name":"v4.0.0","sha":"94d98ba9e381e7a033e9ad74dd14413b23f2b3e1","kind":"commit","published_at":"2023-07-05T17:14:24.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v4.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v4.0.0/manifests"},{"name":"v3.1.1","sha":"1d474efa57d9c4f740eea9fe1f0f0d44acef56fe","kind":"commit","published_at":"2023-06-06T17:32:53.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v3.1.1","html_url":"https://github.com/npm/package-json/releases/tag/v3.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v3.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.1.1/manifests"},{"name":"v3.1.0","sha":"adb0c176d5e9741b653483bb2f12790c8a7e1370","kind":"commit","published_at":"2023-05-16T15:51:45.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v3.1.0","html_url":"https://github.com/npm/package-json/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v3.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.1.0/manifests"},{"name":"v3.0.0","sha":"496d0cd78db183252464597d32c2eb4f322bf98e","kind":"commit","published_at":"2022-10-14T02:00:04.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v3.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.0.0/manifests"},{"name":"v2.0.0","sha":"9d7f8d4306239f258c85755685923d8bda70ee68","kind":"commit","published_at":"2022-04-05T14:01:22.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v2.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v2.0.0/manifests"},{"name":"v1.0.1","sha":"51fc9c583b6af6eb2c775efb2101a15ad24e651a","kind":"tag","published_at":"2021-06-23T16:25:50.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v1.0.1","html_url":"https://github.com/npm/package-json/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"f62d8c63acec185f577a3525352d139b4eab0f28","kind":"tag","published_at":"2021-06-22T23:23:08.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v1.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2025-10-30T15:55:09.497Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":34.702303132771725,"dependent_packages_count":49.61624962647249,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":42.159276379622106},"purl":"pkg:maven/org.mvnpm.at.npmcli/package-json","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.mvnpm.at.npmcli:package-json","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.mvnpm.at.npmcli:package-json","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.mvnpm.at.npmcli:package-json/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-10-30T13:03:05.413Z","issues_count":12,"pull_requests_count":189,"avg_time_to_close_issue":3609372.5,"avg_time_to_close_pull_request":918279.6590909091,"issues_closed_count":8,"pull_requests_closed_count":176,"pull_request_authors_count":14,"issue_authors_count":11,"avg_comments_per_issue":0.8333333333333334,"avg_comments_per_pull_request":0.9947089947089947,"merged_pull_requests_count":119,"bot_issues_count":1,"bot_pull_requests_count":129,"past_year_issues_count":2,"past_year_pull_requests_count":34,"past_year_avg_time_to_close_issue":104349.5,"past_year_avg_time_to_close_pull_request":747518.3333333334,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":24,"past_year_pull_request_authors_count":9,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":1.5,"past_year_avg_comments_per_pull_request":0.6176470588235294,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":18,"past_year_merged_pull_requests_count":21,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/issues","maintainers":[{"login":"wraithgar","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wraithgar"},{"login":"lukekarrys","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lukekarrys"}],"active_maintainers":[{"login":"wraithgar","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wraithgar"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.npmcli:package-json/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.npmcli:package-json/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.npmcli:package-json/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.npmcli:package-json/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.npmcli:package-json/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://repo.maven.apache.org/maven2","ecosystem":"maven","default":true,"packages_count":577667,"maintainers_count":0,"namespaces_count":76649,"keywords_count":35297,"github":"maven-central","metadata":{"funded_packages_count":38920},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-01-08T06:46:08.347Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":1094314,"name":"@npmcli/package-json","ecosystem":"npm","description":"Programmatic API to update package.json","homepage":"https://github.com/npm/package-json#readme","licenses":"ISC","normalized_licenses":["ISC"],"repository_url":"https://github.com/npm/package-json","keywords_array":["npm","oss"],"namespace":"npmcli","versions_count":26,"first_release_published_at":"2021-06-22T23:24:10.542Z","latest_release_published_at":"2025-11-21T16:40:59.989Z","latest_release_number":"7.0.4","last_synced_at":"2026-01-06T21:02:12.573Z","created_at":"2022-04-08T10:35:32.208Z","updated_at":"2026-01-06T21:02:12.574Z","registry_url":"https://www.npmjs.com/package/@npmcli/package-json","install_command":"npm install @npmcli/package-json","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"7.0.4"}},"repo_metadata":{"id":40507286,"uuid":"379075817","full_name":"npm/package-json","owner":"npm","description":"Programmatic API to update package.json","archived":false,"fork":false,"pushed_at":"2025-11-24T17:26:10.000Z","size":381,"stargazers_count":90,"open_issues_count":4,"forks_count":16,"subscribers_count":10,"default_branch":"main","last_synced_at":"2025-12-16T06:50:57.288Z","etag":null,"topics":["npm-cli"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/npm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2021-06-21T22:13:21.000Z","updated_at":"2025-11-24T17:26:13.000Z","dependencies_parsed_at":"2025-12-14T07:00:57.206Z","dependency_job_id":null,"html_url":"https://github.com/npm/package-json","commit_stats":{"total_commits":48,"total_committers":5,"mean_commits":9.6,"dds":0.6458333333333333,"last_synced_commit":"9dfd8dacd05d5b2519831cbd4482e1de029299f6"},"previous_names":[],"tags_count":26,"template":false,"template_full_name":null,"purl":"pkg:github/npm/package-json","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","download_url":"https://codeload.github.com/npm/package-json/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/sbom","scorecard":{"id":696414,"data":{"date":"2025-08-11","repo":{"name":"github.com/npm/package-json","commit":"a5e4ac3ab364b83afd86517d83f451e4762ed1f8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.1,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":10,"reason":"18 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/post-dependabot.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release-integration.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/audit.yml:41","Warn: npmCommand not pinned by hash: .github/workflows/ci-release.yml:62","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/post-dependabot.yml:39","Warn: npmCommand not pinned by hash: .github/workflows/pull-request.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/release-integration.yml:56","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:50","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:130","Info:   0 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  12 third-party GitHubAction dependencies pinned","Info:   0 out of   8 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:25","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:247","Info: topLevel 'contents' permission set to 'read': .github/workflows/audit.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci-release.yml:22","Warn: topLevel 'checks' permission set to 'write': .github/workflows/ci-release.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Warn: topLevel 'contents' permission set to 'write': .github/workflows/post-dependabot.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/pull-request.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-integration.yml:23","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:11","Warn: topLevel 'checks' permission set to 'write': .github/workflows/release.yml:13","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 25 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-22T03:49:49.322Z","repository_id":40507286,"created_at":"2025-08-22T03:49:49.322Z","updated_at":"2025-08-22T03:49:49.322Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":27761216,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-12-16T02:00:10.477Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"npm","name":"npm","uuid":"6078720","kind":"organization","description":"JavaScript Package Manager, Registry \u0026 Website","email":null,"website":"https://npmjs.com","location":"United States of America","twitter":"npmjs","company":null,"icon_url":"https://avatars.githubusercontent.com/u/6078720?v=4","repositories_count":343,"last_synced_at":"2024-04-14T06:35:40.452Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/npm","funding_links":[],"total_stars":50155,"followers":2401,"following":0,"created_at":"2022-11-02T16:18:59.756Z","updated_at":"2024-04-14T06:36:45.292Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm/repositories"},"tags":[{"name":"v7.0.4","sha":"87a59959a2850fbdef13440d9a0ca41b63721dda","kind":"commit","published_at":"2025-11-21T16:38:37.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v7.0.4","html_url":"https://github.com/npm/package-json/releases/tag/v7.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v7.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.4/manifests"},{"name":"v7.0.3","sha":"6204a3894ad9ab41050a430a8d84cff1465e9a09","kind":"commit","published_at":"2025-11-18T22:39:17.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v7.0.3","html_url":"https://github.com/npm/package-json/releases/tag/v7.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v7.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.3/manifests"},{"name":"v7.0.2","sha":"8e979b3c5f215a57156789912f0305bf539daf3d","kind":"commit","published_at":"2025-11-04T18:30:04.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v7.0.2","html_url":"https://github.com/npm/package-json/releases/tag/v7.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v7.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.2/manifests"},{"name":"v7.0.1","sha":"5aa1707d4302bcf030c6d19efd812e62609c6b53","kind":"commit","published_at":"2025-09-17T21:50:47.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v7.0.1","html_url":"https://github.com/npm/package-json/releases/tag/v7.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v7.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.1/manifests"},{"name":"v7.0.0","sha":"f5db81bdfbba5e9d3bfc0732f8bfe511825a20aa","kind":"commit","published_at":"2025-08-28T20:46:05.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v7.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v7.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v7.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.0/manifests"},{"name":"v6.2.0","sha":"a4116dc37d50b6606ab03fec2f8b4a8a30e2abb8","kind":"commit","published_at":"2025-05-21T16:26:47.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v6.2.0","html_url":"https://github.com/npm/package-json/releases/tag/v6.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v6.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.2.0/manifests"},{"name":"v6.1.1","sha":"b6465f44c727d6513db6898c7cbe41dd355cebe8","kind":"commit","published_at":"2025-01-21T17:22:45.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v6.1.1","html_url":"https://github.com/npm/package-json/releases/tag/v6.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v6.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.1.1/manifests"},{"name":"v6.1.0","sha":"79cb556342b83b4b298a413677758b39c4d9c839","kind":"commit","published_at":"2024-11-27T17:38:17.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v6.1.0","html_url":"https://github.com/npm/package-json/releases/tag/v6.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v6.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.1.0/manifests"},{"name":"v6.0.1","sha":"914737eb849d82aa65e4662f43dd5d726bb07428","kind":"commit","published_at":"2024-10-02T16:38:27.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v6.0.1","html_url":"https://github.com/npm/package-json/releases/tag/v6.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v6.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.0.1/manifests"},{"name":"v6.0.0","sha":"25761f127c0b1ae04f5cad710b9fc7852bc999ee","kind":"commit","published_at":"2024-09-26T18:48:20.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v6.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v6.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v6.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.0.0/manifests"},{"name":"v5.2.1","sha":"3426666cc292489d6d7a6d5e89a5029175a86f06","kind":"commit","published_at":"2024-09-17T20:33:09.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.2.1","html_url":"https://github.com/npm/package-json/releases/tag/v5.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.2.1/manifests"},{"name":"v5.2.0","sha":"fa6ed87cb7dbb824d5e74dd3ff03b711e201a5a4","kind":"commit","published_at":"2024-06-03T15:56:28.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.2.0","html_url":"https://github.com/npm/package-json/releases/tag/v5.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.2.0/manifests"},{"name":"v5.1.1","sha":"e6c2bdda262e57f1da26687a8cbc1b9805d28ce4","kind":"commit","published_at":"2024-05-29T15:51:58.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.1.1","html_url":"https://github.com/npm/package-json/releases/tag/v5.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.1.1/manifests"},{"name":"v5.1.0","sha":"57f7f255a38c1cfdfe7374920e651abef2ac3418","kind":"commit","published_at":"2024-04-22T20:49:45.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.1.0","html_url":"https://github.com/npm/package-json/releases/tag/v5.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.1.0/manifests"},{"name":"v5.0.3","sha":"ee18cb547e64479d9c4f21432812642a2e39b6ff","kind":"commit","published_at":"2024-04-12T22:04:20.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.0.3","html_url":"https://github.com/npm/package-json/releases/tag/v5.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.3/manifests"},{"name":"v5.0.2","sha":"b1e741b63e817405a52a495e0b52693491a5a0d0","kind":"commit","published_at":"2024-04-10T15:57:17.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.0.2","html_url":"https://github.com/npm/package-json/releases/tag/v5.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.2/manifests"},{"name":"v5.0.1","sha":"d4814d44e222a128e4df6b417056c39ee86db48a","kind":"commit","published_at":"2024-04-09T17:51:47.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.0.1","html_url":"https://github.com/npm/package-json/releases/tag/v5.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.1/manifests"},{"name":"v5.0.0","sha":"37f32be1557601e79750b335e43405af194315a1","kind":"commit","published_at":"2023-08-15T17:47:23.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v5.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.0/manifests"},{"name":"v4.0.1","sha":"e8b8dcb0bd9ff8078946b4397e8bf989aaf4a748","kind":"commit","published_at":"2023-07-17T20:39:41.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v4.0.1","html_url":"https://github.com/npm/package-json/releases/tag/v4.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v4.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v4.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v4.0.1/manifests"},{"name":"v4.0.0","sha":"94d98ba9e381e7a033e9ad74dd14413b23f2b3e1","kind":"commit","published_at":"2023-07-05T17:14:24.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v4.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v4.0.0/manifests"},{"name":"v3.1.1","sha":"1d474efa57d9c4f740eea9fe1f0f0d44acef56fe","kind":"commit","published_at":"2023-06-06T17:32:53.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v3.1.1","html_url":"https://github.com/npm/package-json/releases/tag/v3.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v3.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.1.1/manifests"},{"name":"v3.1.0","sha":"adb0c176d5e9741b653483bb2f12790c8a7e1370","kind":"commit","published_at":"2023-05-16T15:51:45.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v3.1.0","html_url":"https://github.com/npm/package-json/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v3.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.1.0/manifests"},{"name":"v3.0.0","sha":"496d0cd78db183252464597d32c2eb4f322bf98e","kind":"commit","published_at":"2022-10-14T02:00:04.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v3.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.0.0/manifests"},{"name":"v2.0.0","sha":"9d7f8d4306239f258c85755685923d8bda70ee68","kind":"commit","published_at":"2022-04-05T14:01:22.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v2.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v2.0.0/manifests"},{"name":"v1.0.1","sha":"51fc9c583b6af6eb2c775efb2101a15ad24e651a","kind":"tag","published_at":"2021-06-23T16:25:50.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v1.0.1","html_url":"https://github.com/npm/package-json/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"f62d8c63acec185f577a3525352d139b4eab0f28","kind":"tag","published_at":"2021-06-22T23:23:08.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v1.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2025-12-31T16:03:26.190Z","dependent_packages_count":86,"downloads":26040666,"downloads_period":"last-month","dependent_repos_count":45951,"rankings":{"downloads":0.09805761221299705,"dependent_repos_count":0.13956941601026127,"dependent_packages_count":0.40552672184037036,"stargazers_count":6.056693476157711,"forks_count":8.204140401013515,"docker_downloads_count":0.0064511586982234905,"average":2.4850731309888463},"purl":"pkg:npm/%40npmcli/package-json","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/@npmcli/package-json","docker_dependents_count":40446,"docker_downloads_count":9840865130,"usage_url":"https://repos.ecosyste.ms/usage/npm/@npmcli/package-json","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/@npmcli/package-json/dependencies","status":null,"funding_links":[],"critical":false,"issue_metadata":{"last_synced_at":"2025-11-25T22:01:30.054Z","issues_count":12,"pull_requests_count":195,"avg_time_to_close_issue":3609372.5,"avg_time_to_close_pull_request":895584.0773480663,"issues_closed_count":8,"pull_requests_closed_count":181,"pull_request_authors_count":15,"issue_authors_count":11,"avg_comments_per_issue":0.8333333333333334,"avg_comments_per_pull_request":1.0,"merged_pull_requests_count":124,"bot_issues_count":1,"bot_pull_requests_count":134,"past_year_issues_count":2,"past_year_pull_requests_count":40,"past_year_avg_time_to_close_issue":104349.5,"past_year_avg_time_to_close_pull_request":635308.2068965518,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":29,"past_year_pull_request_authors_count":10,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":1.5,"past_year_avg_comments_per_pull_request":0.7,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":23,"past_year_merged_pull_requests_count":26,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/issues","maintainers":[{"login":"wraithgar","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wraithgar"},{"login":"lukekarrys","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lukekarrys"}],"active_maintainers":[{"login":"wraithgar","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wraithgar"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@npmcli%2Fpackage-json/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@npmcli%2Fpackage-json/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@npmcli%2Fpackage-json/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@npmcli%2Fpackage-json/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@npmcli%2Fpackage-json/codemeta","maintainers":[{"uuid":"gar","login":"gar","name":null,"email":"gar+npm@danger.computer","url":null,"packages_count":302,"html_url":"https://www.npmjs.com/~gar","role":null,"created_at":"2022-11-20T20:58:14.475Z","updated_at":"2022-11-20T20:58:14.475Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/gar/packages"},{"uuid":"saquibkhan","login":"saquibkhan","name":null,"email":"saquibkhan@github.com","url":null,"packages_count":272,"html_url":"https://www.npmjs.com/~saquibkhan","role":null,"created_at":"2022-12-12T17:34:12.145Z","updated_at":"2022-12-12T17:34:12.145Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/saquibkhan/packages"},{"uuid":"reggi","login":"reggi","name":null,"email":"reggi@github.com","url":null,"packages_count":449,"html_url":"https://www.npmjs.com/~reggi","role":null,"created_at":"2024-05-31T13:40:00.082Z","updated_at":"2024-05-31T13:40:00.082Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/reggi/packages"},{"uuid":"hashtagchris","login":"hashtagchris","name":null,"email":"hashtagchris@github.com","url":null,"packages_count":322,"html_url":"https://www.npmjs.com/~hashtagchris","role":null,"created_at":"2024-08-08T14:33:17.841Z","updated_at":"2024-08-08T14:33:17.841Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/hashtagchris/packages"},{"uuid":"npm-cli-ops","login":"npm-cli-ops","name":null,"email":"npm-cli+bot@github.com","url":null,"packages_count":127,"html_url":"https://www.npmjs.com/~npm-cli-ops","role":null,"created_at":"2023-03-08T00:12:02.521Z","updated_at":"2023-03-08T00:12:02.521Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/npm-cli-ops/packages"},{"uuid":"owlstronaut","login":"owlstronaut","name":null,"email":"owlstronaut@github.com","url":null,"packages_count":151,"html_url":"https://www.npmjs.com/~owlstronaut","role":null,"created_at":"2025-05-08T00:53:47.675Z","updated_at":"2025-05-08T00:53:47.675Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/owlstronaut/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5295483,"maintainers_count":1098739,"namespaces_count":338357,"keywords_count":768147,"github":"npm","metadata":{"funded_packages_count":159659},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-01-08T06:39:08.447Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}}],"commits":{"id":83177,"full_name":"npm/package-json","default_branch":"main","total_commits":180,"total_committers":16,"total_bot_commits":70,"total_bot_committers":2,"mean_commits":11.25,"dds":0.7444444444444445,"past_year_total_commits":45,"past_year_total_committers":8,"past_year_total_bot_commits":19,"past_year_total_bot_committers":2,"past_year_mean_commits":5.625,"past_year_dds":0.6222222222222222,"last_synced_at":"2026-01-08T14:32:13.794Z","last_synced_commit":"bd3b7eafa70c17ae96778386572ff98a5c01baff","created_at":"2023-03-07T20:16:00.812Z","updated_at":"2026-01-08T14:31:48.825Z","committers":[{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":46},{"name":"Gar","email":"gar+gh@danger.computer","login":"wraithgar","count":41},{"name":"github-actions[bot]","email":"41898282+github-actions[bot]","login":"github-actions[bot]","count":24},{"name":"Luke Karrys","email":"luke@lukekarrys.com","login":"lukekarrys","count":24},{"name":"Ruy Adorno","email":"ruyadorno@hotmail.com","login":"ruyadorno","count":16},{"name":"reggi","email":"reggi@github.com","login":"reggi","count":8},{"name":"Michael Smith","email":"owlstronaut@github.com","login":"owlstronaut","count":5},{"name":"Vinicius Lourenço","email":"12551007+H4ad","login":"H4ad","count":4},{"name":"Anton Golub","email":"antongolub@antongolub.com","login":"antongolub","count":3},{"name":"milaninfy","email":"111582375+milaninfy","login":"milaninfy","count":2},{"name":"Chris Sidi","email":"hashtagchris@github.com","login":"hashtagchris","count":2},{"name":"Superchupu","email":"53496941+SuperchupuDev","login":"SuperchupuDev","count":1},{"name":"Max Black","email":"husivm@gmail.com","login":"MaxBlack-dev","count":1},{"name":"Jamie King","email":"hello@jamieking.me","login":"10xLaCroixDrinker","count":1},{"name":"Ivan horomanski","email":"idhard@gmail.com","login":"idhard","count":1},{"name":"Clozent","email":"45975432+Clozent","login":"Clozent","count":1}],"past_year_committers":[{"name":"Gar","email":"gar+gh@danger.computer","login":"wraithgar","count":17},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":12},{"name":"github-actions[bot]","email":"41898282+github-actions[bot]","login":"github-actions[bot]","count":7},{"name":"Michael Smith","email":"owlstronaut@github.com","login":"owlstronaut","count":5},{"name":"Superchupu","email":"53496941+SuperchupuDev","login":"SuperchupuDev","count":1},{"name":"Max Black","email":"husivm@gmail.com","login":"MaxBlack-dev","count":1},{"name":"Ivan horomanski","email":"idhard@gmail.com","login":"idhard","count":1},{"name":"Clozent","email":"45975432+Clozent","login":"Clozent","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-01-08T01:00:21.143Z","repositories_count":6162452,"commits_count":932507766,"contributors_count":36262541,"owners_count":1136386,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"npm/package-json","html_url":"https://github.com/npm/package-json","last_synced_at":"2025-11-25T22:01:30.054Z","status":"active","issues_count":12,"pull_requests_count":195,"avg_time_to_close_issue":3609372.5,"avg_time_to_close_pull_request":895584.0773480663,"issues_closed_count":8,"pull_requests_closed_count":181,"pull_request_authors_count":15,"issue_authors_count":11,"avg_comments_per_issue":0.8333333333333334,"avg_comments_per_pull_request":1.0,"merged_pull_requests_count":124,"bot_issues_count":1,"bot_pull_requests_count":134,"past_year_issues_count":2,"past_year_pull_requests_count":40,"past_year_avg_time_to_close_issue":104349.5,"past_year_avg_time_to_close_pull_request":635308.2068965518,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":29,"past_year_pull_request_authors_count":10,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":1.5,"past_year_avg_comments_per_pull_request":0.7,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":23,"past_year_merged_pull_requests_count":26,"created_at":"2023-05-18T15:31:29.640Z","updated_at":"2025-11-25T22:01:30.054Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/issues","issue_labels_count":{"table":{"invalid":1,"autorelease: pending":1}},"pull_request_labels_count":{"table":{"Dependencies":104,"autorelease: tagged":18,"autorelease: pending":15}},"issue_author_associations_count":{"table":{"NONE":8,"CONTRIBUTOR":3,"MEMBER":1}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":169,"MEMBER":15,"NONE":11}},"issue_authors":{"table":{"wraithgar":2,"byCedric":1,"legodude17":1,"vlzivan":1,"mpsenn":1,"remiposo":1,"github-actions[bot]":1,"milaninfy":1,"ganeshkbhat":1,"gabrielschulhof":1,"LoveofRedMoon":1}},"pull_request_authors":{"table":{"dependabot[bot]":101,"github-actions[bot]":33,"wraithgar":19,"lukekarrys":7,"H4ad":7,"reggi":6,"milaninfy":5,"antongolub":5,"owlstronaut":3,"10xLaCroixDrinker":2,"benmccann":2,"G-Rath":2,"Clozent":1,"idhard":1,"MaxBlack-dev":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2025-12-31T00:00:36.777Z","repositories_count":12502800,"issues_count":35674015,"pull_requests_count":117132194,"authors_count":11079204,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{"autorelease: pending":1}},"past_year_pull_request_labels_count":{"table":{"Dependencies":9,"autorelease: pending":5,"autorelease: tagged":3}},"past_year_issue_author_associations_count":{"table":{"CONTRIBUTOR":1,"NONE":1}},"past_year_pull_request_author_associations_count":{"table":{"CONTRIBUTOR":21,"MEMBER":5,"NONE":4}},"past_year_issue_authors":{"table":{"github-actions[bot]":1,"LoveofRedMoon":1}},"past_year_pull_request_authors":{"table":{"dependabot[bot]":9,"github-actions[bot]":8,"wraithgar":5,"owlstronaut":3,"benmccann":2,"Clozent":1,"MaxBlack-dev":1,"idhard":1}},"maintainers":[{"table":{"login":"wraithgar","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wraithgar"}},{"table":{"login":"lukekarrys","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lukekarrys"}}],"active_maintainers":[{"table":{"login":"wraithgar","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wraithgar"}}]}},"events":{"total":{"CreateEvent":25,"IssuesEvent":2,"ReleaseEvent":4,"WatchEvent":14,"DeleteEvent":19,"IssueCommentEvent":28,"PushEvent":62,"PullRequestReviewEvent":31,"PullRequestReviewCommentEvent":11,"PullRequestEvent":45,"ForkEvent":6},"last_year":{"CreateEvent":21,"ReleaseEvent":3,"IssuesEvent":2,"WatchEvent":7,"DeleteEvent":17,"IssueCommentEvent":24,"PushEvent":53,"PullRequestReviewCommentEvent":9,"PullRequestReviewEvent":26,"PullRequestEvent":37,"ForkEvent":4}},"keywords":["npm-cli"],"dependencies":[{"ecosystem":"actions","filepath":".github/workflows/audit.yml","sha":null,"kind":"manifest","created_at":"2023-01-26T11:31:57.031Z","updated_at":"2023-01-26T11:31:57.031Z","repository_link":"https://github.com/npm/package-json/blob/main/.github/workflows/audit.yml","dependencies":[{"id":7168743684,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7168743685,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/ci-release.yml","sha":null,"kind":"manifest","created_at":"2023-01-26T11:31:57.040Z","updated_at":"2023-01-26T11:31:57.040Z","repository_link":"https://github.com/npm/package-json/blob/main/.github/workflows/ci-release.yml","dependencies":[{"id":7168743690,"package_name":"actions/github-script","ecosystem":"actions","requirements":"v6","direct":true,"kind":"composite","optional":false},{"id":7168743691,"package_name":"LouisBrunner/checks-action","ecosystem":"actions","requirements":"v1.3.1","direct":true,"kind":"composite","optional":false},{"id":7168743692,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7168743693,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/ci.yml","sha":null,"kind":"manifest","created_at":"2023-01-26T11:31:57.048Z","updated_at":"2023-01-26T11:31:57.048Z","repository_link":"https://github.com/npm/package-json/blob/main/.github/workflows/ci.yml","dependencies":[{"id":7168743696,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7168743697,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/codeql-analysis.yml","sha":null,"kind":"manifest","created_at":"2023-01-26T11:31:57.129Z","updated_at":"2023-01-26T11:31:57.129Z","repository_link":"https://github.com/npm/package-json/blob/main/.github/workflows/codeql-analysis.yml","dependencies":[{"id":7168743748,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7168743749,"package_name":"github/codeql-action/init","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7168743750,"package_name":"github/codeql-action/analyze","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/post-dependabot.yml","sha":null,"kind":"manifest","created_at":"2023-01-26T11:31:57.134Z","updated_at":"2023-01-26T11:31:57.134Z","repository_link":"https://github.com/npm/package-json/blob/main/.github/workflows/post-dependabot.yml","dependencies":[{"id":7168743751,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7168743752,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7168743753,"package_name":"dependabot/fetch-metadata","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/pull-request.yml","sha":null,"kind":"manifest","created_at":"2023-01-26T11:31:57.140Z","updated_at":"2023-01-26T11:31:57.140Z","repository_link":"https://github.com/npm/package-json/blob/main/.github/workflows/pull-request.yml","dependencies":[{"id":7168743754,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7168743755,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/release.yml","sha":null,"kind":"manifest","created_at":"2023-01-26T11:31:57.146Z","updated_at":"2023-01-26T11:31:57.146Z","repository_link":"https://github.com/npm/package-json/blob/main/.github/workflows/release.yml","dependencies":[{"id":7168743756,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7168743757,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7168743758,"package_name":"actions/github-script","ecosystem":"actions","requirements":"v6","direct":true,"kind":"composite","optional":false},{"id":7168743759,"package_name":"LouisBrunner/checks-action","ecosystem":"actions","requirements":"v1.3.1","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"npm","filepath":"package.json","sha":null,"kind":"manifest","created_at":"2022-08-09T22:22:19.475Z","updated_at":"2022-08-09T22:22:19.475Z","repository_link":"https://github.com/npm/package-json/blob/main/package.json","dependencies":[{"id":963478847,"package_name":"json-parse-even-better-errors","ecosystem":"npm","requirements":"^2.3.1","direct":true,"kind":"runtime","optional":false},{"id":963478848,"package_name":"@npmcli/eslint-config","ecosystem":"npm","requirements":"^3.0.1","direct":true,"kind":"development","optional":false},{"id":963478849,"package_name":"@npmcli/template-oss","ecosystem":"npm","requirements":"3.5.0","direct":true,"kind":"development","optional":false},{"id":963478850,"package_name":"tap","ecosystem":"npm","requirements":"^16.0.1","direct":true,"kind":"development","optional":false}]},{"ecosystem":"actions","filepath":".github/actions/create-check/action.yml","sha":null,"kind":"manifest","created_at":"2024-03-20T16:04:57.692Z","updated_at":"2024-03-20T16:04:57.692Z","repository_link":"https://github.com/npm/package-json/blob/main/.github/actions/create-check/action.yml","dependencies":[{"id":16938596228,"package_name":"actions/github-script","ecosystem":"actions","requirements":"v6","direct":true,"kind":"composite","optional":false},{"id":16938596229,"package_name":"LouisBrunner/checks-action","ecosystem":"actions","requirements":"v1.6.0","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/actions/install-latest-npm/action.yml","sha":null,"kind":"manifest","created_at":"2024-03-20T16:04:58.911Z","updated_at":"2024-03-20T16:04:58.911Z","repository_link":"https://github.com/npm/package-json/blob/main/.github/actions/install-latest-npm/action.yml","dependencies":[]},{"ecosystem":"actions","filepath":".github/workflows/release-integration.yml","sha":null,"kind":"manifest","created_at":"2024-03-20T16:04:59.082Z","updated_at":"2024-03-20T16:04:59.082Z","repository_link":"https://github.com/npm/package-json/blob/main/.github/workflows/release-integration.yml","dependencies":[{"id":16938598395,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":16938598396,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":16938598397,"package_name":"./.github/actions/install-latest-npm","ecosystem":"actions","requirements":"*","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"npm","filepath":"test/fixtures/all-fields-populated/package.json","sha":null,"kind":"manifest","created_at":"2025-12-14T07:00:51.554Z","updated_at":"2025-12-14T07:00:51.554Z","repository_link":"https://github.com/npm/package-json/blob/main/test/fixtures/all-fields-populated/package.json","dependencies":[{"id":25768231680,"package_name":"some-dependency","ecosystem":"npm","requirements":"^1.0.0","direct":true,"kind":"runtime","optional":false},{"id":25768231681,"package_name":"some-dev-dependency","ecosystem":"npm","requirements":"^1.0.0","direct":true,"kind":"development","optional":false}]},{"ecosystem":"npm","filepath":"test/fixtures/empty/package.json","sha":null,"kind":"manifest","created_at":"2025-12-14T07:00:51.891Z","updated_at":"2025-12-14T07:00:51.891Z","repository_link":"https://github.com/npm/package-json/blob/main/test/fixtures/empty/package.json","dependencies":[]},{"ecosystem":"npm","filepath":"test/fixtures/normalize-data/package.json","sha":null,"kind":"manifest","created_at":"2025-12-14T07:00:51.950Z","updated_at":"2025-12-14T07:00:51.950Z","repository_link":"https://github.com/npm/package-json/blob/main/test/fixtures/normalize-data/package.json","dependencies":[{"id":25768231682,"package_name":"@npmcli/arborist","ecosystem":"npm","requirements":"^2.6.3","direct":true,"kind":"runtime","optional":false},{"id":25768231683,"package_name":"@npmcli/ci-detect","ecosystem":"npm","requirements":"^1.2.0","direct":true,"kind":"runtime","optional":false},{"id":25768231694,"package_name":"@npmcli/config","ecosystem":"npm","requirements":"^2.2.0","direct":true,"kind":"runtime","optional":false},{"id":25768231695,"package_name":"@npmcli/run-script","ecosystem":"npm","requirements":"^1.8.5","direct":true,"kind":"runtime","optional":false},{"id":25768231696,"package_name":"abbrev","ecosystem":"npm","requirements":"~1.1.1","direct":true,"kind":"runtime","optional":false},{"id":25768231697,"package_name":"ansicolors","ecosystem":"npm","requirements":"~0.3.2","direct":true,"kind":"runtime","optional":false},{"id":25768231698,"package_name":"ansistyles","ecosystem":"npm","requirements":"~0.1.3","direct":true,"kind":"runtime","optional":false},{"id":25768231814,"package_name":"archy","ecosystem":"npm","requirements":"~1.0.0","direct":true,"kind":"runtime","optional":false},{"id":25768231815,"package_name":"byte-size","ecosystem":"npm","requirements":"^7.0.1","direct":true,"kind":"runtime","optional":false},{"id":25768231820,"package_name":"cacache","ecosystem":"npm","requirements":"^15.2.0","direct":true,"kind":"runtime","optional":false},{"id":25768231821,"package_name":"chalk","ecosystem":"npm","requirements":"^4.1.0","direct":true,"kind":"runtime","optional":false},{"id":25768231822,"package_name":"chownr","ecosystem":"npm","requirements":"^2.0.0","direct":true,"kind":"runtime","optional":false},{"id":25768231823,"package_name":"cli-columns","ecosystem":"npm","requirements":"^3.1.2","direct":true,"kind":"runtime","optional":false},{"id":25768231824,"package_name":"cli-table3","ecosystem":"npm","requirements":"^0.6.0","direct":true,"kind":"runtime","optional":false},{"id":25768231825,"package_name":"columnify","ecosystem":"npm","requirements":"~1.5.4","direct":true,"kind":"runtime","optional":false},{"id":25768231835,"package_name":"glob","ecosystem":"npm","requirements":"^7.1.7","direct":true,"kind":"runtime","optional":false},{"id":25768231836,"package_name":"graceful-fs","ecosystem":"npm","requirements":"^4.2.6","direct":true,"kind":"runtime","optional":false},{"id":25768231837,"package_name":"hosted-git-info","ecosystem":"npm","requirements":"^4.0.2","direct":true,"kind":"runtime","optional":false},{"id":25768231838,"package_name":"ini","ecosystem":"npm","requirements":"^2.0.0","direct":true,"kind":"runtime","optional":false},{"id":25768231839,"package_name":"init-package-json","ecosystem":"npm","requirements":"^2.0.3","direct":true,"kind":"runtime","optional":false},{"id":25768231840,"package_name":"is-cidr","ecosystem":"npm","requirements":"^4.0.2","direct":true,"kind":"runtime","optional":false},{"id":25768231841,"package_name":"json-parse-even-better-errors","ecosystem":"npm","requirements":"^2.3.1","direct":true,"kind":"runtime","optional":false},{"id":25768231842,"package_name":"leven","ecosystem":"npm","requirements":"^3.1.0","direct":true,"kind":"runtime","optional":false},{"id":25768231843,"package_name":"libnpmaccess","ecosystem":"npm","requirements":"^4.0.2","direct":true,"kind":"runtime","optional":false},{"id":25768231844,"package_name":"libnpmdiff","ecosystem":"npm","requirements":"^2.0.4","direct":true,"kind":"runtime","optional":false},{"id":25768231845,"package_name":"libnpmexec","ecosystem":"npm","requirements":"^2.0.0","direct":true,"kind":"runtime","optional":false},{"id":25768231846,"package_name":"libnpmfund","ecosystem":"npm","requirements":"^1.1.0","direct":true,"kind":"runtime","optional":false},{"id":25768231847,"package_name":"libnpmhook","ecosystem":"npm","requirements":"^6.0.2","direct":true,"kind":"runtime","optional":false},{"id":25768231851,"package_name":"libnpmorg","ecosystem":"npm","requirements":"^2.0.2","direct":true,"kind":"runtime","optional":false},{"id":25768231852,"package_name":"libnpmpack","ecosystem":"npm","requirements":"^2.0.1","direct":true,"kind":"runtime","optional":false},{"id":25768231853,"package_name":"libnpmpublish","ecosystem":"npm","requirements":"^4.0.1","direct":true,"kind":"runtime","optional":false},{"id":25768231854,"package_name":"libnpmsearch","ecosystem":"npm","requirements":"^3.1.1","direct":true,"kind":"runtime","optional":false},{"id":25768231855,"package_name":"libnpmteam","ecosystem":"npm","requirements":"^2.0.3","direct":true,"kind":"runtime","optional":false},{"id":25768231856,"package_name":"libnpmversion","ecosystem":"npm","requirements":"^1.2.1","direct":true,"kind":"runtime","optional":false},{"id":25768231857,"package_name":"make-fetch-happen","ecosystem":"npm","requirements":"^9.0.3","direct":true,"kind":"runtime","optional":false},{"id":25768231858,"package_name":"minipass","ecosystem":"npm","requirements":"^3.1.3","direct":true,"kind":"runtime","optional":false},{"id":25768231859,"package_name":"minipass-pipeline","ecosystem":"npm","requirements":"^1.2.4","direct":true,"kind":"runtime","optional":false},{"id":25768231860,"package_name":"mkdirp","ecosystem":"npm","requirements":"^1.0.4","direct":true,"kind":"runtime","optional":false},{"id":25768231861,"package_name":"mkdirp-infer-owner","ecosystem":"npm","requirements":"^2.0.0","direct":true,"kind":"runtime","optional":false},{"id":25768231865,"package_name":"ms","ecosystem":"npm","requirements":"^2.1.2","direct":true,"kind":"runtime","optional":false},{"id":25768231866,"package_name":"node-gyp","ecosystem":"npm","requirements":"^7.1.2","direct":true,"kind":"runtime","optional":false},{"id":25768231867,"package_name":"nopt","ecosystem":"npm","requirements":"^5.0.0","direct":true,"kind":"runtime","optional":false},{"id":25768231868,"package_name":"npm-audit-report","ecosystem":"npm","requirements":"^2.1.5","direct":true,"kind":"runtime","optional":false},{"id":25768231869,"package_name":"npm-package-arg","ecosystem":"npm","requirements":"^8.1.5","direct":true,"kind":"runtime","optional":false},{"id":25768231870,"package_name":"npm-pick-manifest","ecosystem":"npm","requirements":"^6.1.1","direct":true,"kind":"runtime","optional":false},{"id":25768231871,"package_name":"npm-profile","ecosystem":"npm","requirements":"^5.0.3","direct":true,"kind":"runtime","optional":false},{"id":25768231872,"package_name":"npm-registry-fetch","ecosystem":"npm","requirements":"^11.0.0","direct":true,"kind":"runtime","optional":false},{"id":25768231873,"package_name":"npm-user-validate","ecosystem":"npm","requirements":"^1.0.1","direct":true,"kind":"runtime","optional":false},{"id":25768231874,"package_name":"npmlog","ecosystem":"npm","requirements":"~4.1.2","direct":true,"kind":"runtime","optional":false},{"id":25768231875,"package_name":"opener","ecosystem":"npm","requirements":"^1.5.2","direct":true,"kind":"runtime","optional":false},{"id":25768231876,"package_name":"pacote","ecosystem":"npm","requirements":"^11.3.3","direct":true,"kind":"runtime","optional":false},{"id":25768231877,"package_name":"parse-conflict-json","ecosystem":"npm","requirements":"^1.1.1","direct":true,"kind":"runtime","optional":false},{"id":25768231878,"package_name":"qrcode-terminal","ecosystem":"npm","requirements":"^0.12.0","direct":true,"kind":"runtime","optional":false},{"id":25768231880,"package_name":"read","ecosystem":"npm","requirements":"~1.0.7","direct":true,"kind":"runtime","optional":false},{"id":25768231881,"package_name":"read-package-json","ecosystem":"npm","requirements":"^3.0.1","direct":true,"kind":"runtime","optional":false},{"id":25768231883,"package_name":"read-package-json-fast","ecosystem":"npm","requirements":"^2.0.2","direct":true,"kind":"runtime","optional":false},{"id":25768231909,"package_name":"readdir-scoped-modules","ecosystem":"npm","requirements":"^1.1.0","direct":true,"kind":"runtime","optional":false},{"id":25768231942,"package_name":"rimraf","ecosystem":"npm","requirements":"^3.0.2","direct":true,"kind":"runtime","optional":false},{"id":25768231943,"package_name":"semver","ecosystem":"npm","requirements":"^7.3.5","direct":true,"kind":"runtime","optional":false},{"id":25768231944,"package_name":"ssri","ecosystem":"npm","requirements":"^8.0.1","direct":true,"kind":"runtime","optional":false},{"id":25768231947,"package_name":"tar","ecosystem":"npm","requirements":"^6.1.0","direct":true,"kind":"runtime","optional":false},{"id":25768231948,"package_name":"text-table","ecosystem":"npm","requirements":"~0.2.0","direct":true,"kind":"runtime","optional":false},{"id":25768231949,"package_name":"tiny-relative-date","ecosystem":"npm","requirements":"^1.3.0","direct":true,"kind":"runtime","optional":false},{"id":25768231950,"package_name":"treeverse","ecosystem":"npm","requirements":"^1.0.4","direct":true,"kind":"runtime","optional":false},{"id":25768231951,"package_name":"validate-npm-package-name","ecosystem":"npm","requirements":"~3.0.0","direct":true,"kind":"runtime","optional":false},{"id":25768231952,"package_name":"which","ecosystem":"npm","requirements":"^2.0.2","direct":true,"kind":"runtime","optional":false},{"id":25768231953,"package_name":"write-file-atomic","ecosystem":"npm","requirements":"^3.0.3","direct":true,"kind":"runtime","optional":false},{"id":25768231954,"package_name":"eslint","ecosystem":"npm","requirements":"^7.26.0","direct":true,"kind":"development","optional":false},{"id":25768231955,"package_name":"eslint-plugin-import","ecosystem":"npm","requirements":"^2.23.4","direct":true,"kind":"development","optional":false},{"id":25768231956,"package_name":"eslint-plugin-node","ecosystem":"npm","requirements":"^11.1.0","direct":true,"kind":"development","optional":false},{"id":25768231957,"package_name":"eslint-plugin-promise","ecosystem":"npm","requirements":"^5.1.0","direct":true,"kind":"development","optional":false},{"id":25768231958,"package_name":"eslint-plugin-standard","ecosystem":"npm","requirements":"^5.0.0","direct":true,"kind":"development","optional":false},{"id":25768231959,"package_name":"licensee","ecosystem":"npm","requirements":"^8.2.0","direct":true,"kind":"development","optional":false},{"id":25768231965,"package_name":"tap","ecosystem":"npm","requirements":"^15.0.9","direct":true,"kind":"development","optional":false}]}],"score":30.380169483296246,"created_at":"2025-11-11T15:16:20.618Z","updated_at":"2026-06-19T02:31:08.763Z","avatar_url":"https://github.com/npm.png","language":"JavaScript","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/369155","html_url":"https://summary.ecosyste.ms/projects/369155"}