{"id":369155,"url":"https://github.com/npm/package-json","last_synced_at":"2026-08-24T12:07:48.703Z","repository":{"id":40507286,"uuid":"379075817","full_name":"npm/package-json","owner":"npm","description":"Programmatic API to update package.json","archived":false,"fork":false,"pushed_at":"2026-07-16T10:13:00.000Z","size":409,"stargazers_count":103,"open_issues_count":6,"forks_count":15,"subscribers_count":9,"default_branch":"main","last_synced_at":"2026-08-23T22:21:08.121Z","etag":null,"topics":["npm-cli"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/npm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2021-06-21T22:13:21.000Z","updated_at":"2026-08-17T10:13:53.000Z","dependencies_parsed_at":"2025-12-14T07:00:57.206Z","dependency_job_id":null,"html_url":"https://github.com/npm/package-json","commit_stats":{"total_commits":48,"total_committers":5,"mean_commits":9.6,"dds":0.6458333333333333,"last_synced_commit":"9dfd8dacd05d5b2519831cbd4482e1de029299f6"},"previous_names":[],"tags_count":28,"template":false,"template_full_name":null,"purl":"pkg:github/npm/package-json","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","download_url":"https://codeload.github.com/npm/package-json/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/sbom","scorecard":{"id":696414,"data":{"date":"2025-08-11","repo":{"name":"github.com/npm/package-json","commit":"a5e4ac3ab364b83afd86517d83f451e4762ed1f8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.1,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":10,"reason":"18 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/post-dependabot.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release-integration.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/audit.yml:41","Warn: npmCommand not pinned by hash: .github/workflows/ci-release.yml:62","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/post-dependabot.yml:39","Warn: npmCommand not pinned by hash: .github/workflows/pull-request.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/release-integration.yml:56","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:50","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:130","Info:   0 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  12 third-party GitHubAction dependencies pinned","Info:   0 out of   8 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:25","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:247","Info: topLevel 'contents' permission set to 'read': .github/workflows/audit.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci-release.yml:22","Warn: topLevel 'checks' permission set to 'write': .github/workflows/ci-release.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Warn: topLevel 'contents' permission set to 'write': .github/workflows/post-dependabot.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/pull-request.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-integration.yml:23","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:11","Warn: topLevel 'checks' permission set to 'write': .github/workflows/release.yml:13","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 25 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-22T03:49:49.322Z","repository_id":40507286,"created_at":"2025-08-22T03:49:49.322Z","updated_at":"2025-08-22T03:49:49.322Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36879412,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-24T02:00:14.037Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"npm","name":"npm","uuid":"6078720","kind":"organization","description":"JavaScript Package Manager, Registry \u0026 Website","email":null,"website":"https://npmjs.com","location":"United States of America","twitter":"npmjs","company":null,"icon_url":"https://avatars.githubusercontent.com/u/6078720?v=4","repositories_count":343,"last_synced_at":"2024-04-14T06:35:40.452Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/npm","funding_links":[],"total_stars":50155,"followers":2401,"following":0,"created_at":"2022-11-02T16:18:59.756Z","updated_at":"2024-04-14T06:36:45.292Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm/repositories"},"packages":[{"id":14413137,"name":"github.com/npm/package-json","ecosystem":"go","description":null,"homepage":null,"licenses":"other","normalized_licenses":["Other"],"repository_url":"https://github.com/npm/package-json","keywords_array":[],"namespace":null,"versions_count":28,"first_release_published_at":"2021-06-22T23:23:08.000Z","latest_release_published_at":"2026-05-22T16:38:53.000Z","latest_release_number":"v8.0.0+incompatible","last_synced_at":"2026-08-23T11:36:27.619Z","created_at":"2026-05-09T12:49:03.154Z","updated_at":"2026-08-23T11:36:27.619Z","registry_url":"https://pkg.go.dev/github.com/npm/package-json","install_command":"go get github.com/npm/package-json","documentation_url":"https://pkg.go.dev/github.com/npm/package-json#section-documentation","metadata":{},"repo_metadata":{"id":40507286,"uuid":"379075817","full_name":"npm/package-json","owner":"npm","description":"Programmatic API to update package.json","archived":false,"fork":false,"pushed_at":"2026-07-16T10:13:00.000Z","size":409,"stargazers_count":101,"open_issues_count":6,"forks_count":15,"subscribers_count":9,"default_branch":"main","last_synced_at":"2026-08-09T20:51:36.678Z","etag":null,"topics":["npm-cli"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/npm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2021-06-21T22:13:21.000Z","updated_at":"2026-08-06T15:17:26.000Z","dependencies_parsed_at":"2025-12-14T07:00:57.206Z","dependency_job_id":null,"html_url":"https://github.com/npm/package-json","commit_stats":{"total_commits":48,"total_committers":5,"mean_commits":9.6,"dds":0.6458333333333333,"last_synced_commit":"9dfd8dacd05d5b2519831cbd4482e1de029299f6"},"previous_names":[],"tags_count":28,"template":false,"template_full_name":null,"purl":"pkg:github/npm/package-json","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","download_url":"https://codeload.github.com/npm/package-json/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/sbom","scorecard":{"id":696414,"data":{"date":"2025-08-11","repo":{"name":"github.com/npm/package-json","commit":"a5e4ac3ab364b83afd86517d83f451e4762ed1f8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.1,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":10,"reason":"18 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/post-dependabot.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release-integration.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/audit.yml:41","Warn: npmCommand not pinned by hash: .github/workflows/ci-release.yml:62","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/post-dependabot.yml:39","Warn: npmCommand not pinned by hash: .github/workflows/pull-request.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/release-integration.yml:56","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:50","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:130","Info:   0 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  12 third-party GitHubAction dependencies pinned","Info:   0 out of   8 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:25","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:247","Info: topLevel 'contents' permission set to 'read': .github/workflows/audit.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci-release.yml:22","Warn: topLevel 'checks' permission set to 'write': .github/workflows/ci-release.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Warn: topLevel 'contents' permission set to 'write': .github/workflows/post-dependabot.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/pull-request.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-integration.yml:23","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:11","Warn: topLevel 'checks' permission set to 'write': .github/workflows/release.yml:13","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 25 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-22T03:49:49.322Z","repository_id":40507286,"created_at":"2025-08-22T03:49:49.322Z","updated_at":"2025-08-22T03:49:49.322Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36470243,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-09T21:34:35.171Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.080071416441731,"dependent_packages_count":4.759766986501993,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.919919201471862},"purl":"pkg:golang/github.com/npm/package-json","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/npm/package-json","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/npm/package-json","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/npm/package-json/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-06T02:02:58.054Z","issues_count":13,"pull_requests_count":208,"avg_time_to_close_issue":3209936.0,"avg_time_to_close_pull_request":912462.3072916666,"issues_closed_count":9,"pull_requests_closed_count":192,"pull_request_authors_count":15,"issue_authors_count":12,"avg_comments_per_issue":0.8461538461538461,"avg_comments_per_pull_request":1.0,"merged_pull_requests_count":127,"bot_issues_count":1,"bot_pull_requests_count":146,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":7301.5,"past_year_avg_time_to_close_pull_request":715758.3157894737,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":19,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9090909090909091,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":18,"past_year_merged_pull_requests_count":11,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/issues","maintainers":[{"login":"wraithgar","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wraithgar"},{"login":"lukekarrys","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lukekarrys"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fnpm%2Fpackage-json/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fnpm%2Fpackage-json/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fnpm%2Fpackage-json/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fnpm%2Fpackage-json/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fnpm%2Fpackage-json/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fnpm%2Fpackage-json/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2281895,"maintainers_count":0,"namespaces_count":839487,"keywords_count":124977,"github":"golang","metadata":{"funded_packages_count":67925,"sync_missing_packages_cursor":{"timestamp":"2026-08-17T00:00:58.969562Z","path":"github.com/Tektoncd/operator","version":"v0.78.0"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-08-24T05:01:22.286Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":1094314,"name":"@npmcli/package-json","ecosystem":"npm","description":"Programmatic API to update package.json","homepage":"https://github.com/npm/package-json#readme","licenses":"ISC","normalized_licenses":["ISC"],"repository_url":"https://github.com/npm/package-json","keywords_array":["npm","oss"],"namespace":"npmcli","versions_count":28,"first_release_published_at":"2021-06-22T23:24:10.542Z","latest_release_published_at":"2026-05-22T16:41:16.114Z","latest_release_number":"8.0.0","last_synced_at":"2026-08-23T11:37:17.206Z","created_at":"2022-04-08T10:35:32.208Z","updated_at":"2026-08-23T20:46:18.814Z","registry_url":"https://www.npmjs.com/package/@npmcli/package-json","install_command":"npm install @npmcli/package-json","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"8.0.0"},"contentPolicy":null},"repo_metadata":{"id":40507286,"uuid":"379075817","full_name":"npm/package-json","owner":"npm","description":"Programmatic API to update package.json","archived":false,"fork":false,"pushed_at":"2026-07-16T10:13:00.000Z","size":409,"stargazers_count":101,"open_issues_count":6,"forks_count":15,"subscribers_count":9,"default_branch":"main","last_synced_at":"2026-08-09T20:51:36.678Z","etag":null,"topics":["npm-cli"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/npm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2021-06-21T22:13:21.000Z","updated_at":"2026-08-06T15:17:26.000Z","dependencies_parsed_at":"2025-12-14T07:00:57.206Z","dependency_job_id":null,"html_url":"https://github.com/npm/package-json","commit_stats":{"total_commits":48,"total_committers":5,"mean_commits":9.6,"dds":0.6458333333333333,"last_synced_commit":"9dfd8dacd05d5b2519831cbd4482e1de029299f6"},"previous_names":[],"tags_count":28,"template":false,"template_full_name":null,"purl":"pkg:github/npm/package-json","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","download_url":"https://codeload.github.com/npm/package-json/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/sbom","scorecard":{"id":696414,"data":{"date":"2025-08-11","repo":{"name":"github.com/npm/package-json","commit":"a5e4ac3ab364b83afd86517d83f451e4762ed1f8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.1,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":10,"reason":"18 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/post-dependabot.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release-integration.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/audit.yml:41","Warn: npmCommand not pinned by hash: .github/workflows/ci-release.yml:62","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/post-dependabot.yml:39","Warn: npmCommand not pinned by hash: .github/workflows/pull-request.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/release-integration.yml:56","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:50","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:130","Info:   0 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  12 third-party GitHubAction dependencies pinned","Info:   0 out of   8 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:25","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:247","Info: topLevel 'contents' permission set to 'read': .github/workflows/audit.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci-release.yml:22","Warn: topLevel 'checks' permission set to 'write': .github/workflows/ci-release.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Warn: topLevel 'contents' permission set to 'write': .github/workflows/post-dependabot.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/pull-request.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-integration.yml:23","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:11","Warn: topLevel 'checks' permission set to 'write': .github/workflows/release.yml:13","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 25 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-22T03:49:49.322Z","repository_id":40507286,"created_at":"2025-08-22T03:49:49.322Z","updated_at":"2025-08-22T03:49:49.322Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36470243,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"npm","name":"npm","uuid":"6078720","kind":"organization","description":"JavaScript Package Manager, Registry \u0026 Website","email":null,"website":"https://npmjs.com","location":"United States of America","twitter":"npmjs","company":null,"icon_url":"https://avatars.githubusercontent.com/u/6078720?v=4","repositories_count":343,"last_synced_at":"2024-04-14T06:35:40.452Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/npm","funding_links":[],"total_stars":50155,"followers":2401,"following":0,"created_at":"2022-11-02T16:18:59.756Z","updated_at":"2024-04-14T06:36:45.292Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm/repositories"},"tags":[{"name":"v8.0.0","sha":"ebc5daff41dfcdf43299799d4b5e7bd85e2bb132","kind":"commit","published_at":"2026-05-22T16:38:53.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v8.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v8.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v8.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v8.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v8.0.0/manifests"},{"name":"v7.0.5","sha":"78c442dbe8ff4221e529ffdc2093383723da73e6","kind":"commit","published_at":"2026-02-19T17:07:40.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v7.0.5","html_url":"https://github.com/npm/package-json/releases/tag/v7.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v7.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.5/manifests"},{"name":"v7.0.4","sha":"87a59959a2850fbdef13440d9a0ca41b63721dda","kind":"commit","published_at":"2025-11-21T16:38:37.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v7.0.4","html_url":"https://github.com/npm/package-json/releases/tag/v7.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v7.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.4/manifests"},{"name":"v7.0.3","sha":"6204a3894ad9ab41050a430a8d84cff1465e9a09","kind":"commit","published_at":"2025-11-18T22:39:17.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v7.0.3","html_url":"https://github.com/npm/package-json/releases/tag/v7.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v7.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.3/manifests"},{"name":"v7.0.2","sha":"8e979b3c5f215a57156789912f0305bf539daf3d","kind":"commit","published_at":"2025-11-04T18:30:04.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v7.0.2","html_url":"https://github.com/npm/package-json/releases/tag/v7.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v7.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.2/manifests"},{"name":"v7.0.1","sha":"5aa1707d4302bcf030c6d19efd812e62609c6b53","kind":"commit","published_at":"2025-09-17T21:50:47.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v7.0.1","html_url":"https://github.com/npm/package-json/releases/tag/v7.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v7.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.1/manifests"},{"name":"v7.0.0","sha":"f5db81bdfbba5e9d3bfc0732f8bfe511825a20aa","kind":"commit","published_at":"2025-08-28T20:46:05.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v7.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v7.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v7.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.0/manifests"},{"name":"v6.2.0","sha":"a4116dc37d50b6606ab03fec2f8b4a8a30e2abb8","kind":"commit","published_at":"2025-05-21T16:26:47.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v6.2.0","html_url":"https://github.com/npm/package-json/releases/tag/v6.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v6.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.2.0/manifests"},{"name":"v6.1.1","sha":"b6465f44c727d6513db6898c7cbe41dd355cebe8","kind":"commit","published_at":"2025-01-21T17:22:45.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v6.1.1","html_url":"https://github.com/npm/package-json/releases/tag/v6.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v6.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.1.1/manifests"},{"name":"v6.1.0","sha":"79cb556342b83b4b298a413677758b39c4d9c839","kind":"commit","published_at":"2024-11-27T17:38:17.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v6.1.0","html_url":"https://github.com/npm/package-json/releases/tag/v6.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v6.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.1.0/manifests"},{"name":"v6.0.1","sha":"914737eb849d82aa65e4662f43dd5d726bb07428","kind":"commit","published_at":"2024-10-02T16:38:27.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v6.0.1","html_url":"https://github.com/npm/package-json/releases/tag/v6.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v6.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.0.1/manifests"},{"name":"v6.0.0","sha":"25761f127c0b1ae04f5cad710b9fc7852bc999ee","kind":"commit","published_at":"2024-09-26T18:48:20.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v6.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v6.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v6.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.0.0/manifests"},{"name":"v5.2.1","sha":"3426666cc292489d6d7a6d5e89a5029175a86f06","kind":"commit","published_at":"2024-09-17T20:33:09.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.2.1","html_url":"https://github.com/npm/package-json/releases/tag/v5.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.2.1/manifests"},{"name":"v5.2.0","sha":"fa6ed87cb7dbb824d5e74dd3ff03b711e201a5a4","kind":"commit","published_at":"2024-06-03T15:56:28.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.2.0","html_url":"https://github.com/npm/package-json/releases/tag/v5.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.2.0/manifests"},{"name":"v5.1.1","sha":"e6c2bdda262e57f1da26687a8cbc1b9805d28ce4","kind":"commit","published_at":"2024-05-29T15:51:58.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.1.1","html_url":"https://github.com/npm/package-json/releases/tag/v5.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.1.1/manifests"},{"name":"v5.1.0","sha":"57f7f255a38c1cfdfe7374920e651abef2ac3418","kind":"commit","published_at":"2024-04-22T20:49:45.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.1.0","html_url":"https://github.com/npm/package-json/releases/tag/v5.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.1.0/manifests"},{"name":"v5.0.3","sha":"ee18cb547e64479d9c4f21432812642a2e39b6ff","kind":"commit","published_at":"2024-04-12T22:04:20.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.0.3","html_url":"https://github.com/npm/package-json/releases/tag/v5.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.3/manifests"},{"name":"v5.0.2","sha":"b1e741b63e817405a52a495e0b52693491a5a0d0","kind":"commit","published_at":"2024-04-10T15:57:17.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.0.2","html_url":"https://github.com/npm/package-json/releases/tag/v5.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.2/manifests"},{"name":"v5.0.1","sha":"d4814d44e222a128e4df6b417056c39ee86db48a","kind":"commit","published_at":"2024-04-09T17:51:47.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.0.1","html_url":"https://github.com/npm/package-json/releases/tag/v5.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.1/manifests"},{"name":"v5.0.0","sha":"37f32be1557601e79750b335e43405af194315a1","kind":"commit","published_at":"2023-08-15T17:47:23.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v5.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.0/manifests"},{"name":"v4.0.1","sha":"e8b8dcb0bd9ff8078946b4397e8bf989aaf4a748","kind":"commit","published_at":"2023-07-17T20:39:41.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v4.0.1","html_url":"https://github.com/npm/package-json/releases/tag/v4.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v4.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v4.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v4.0.1/manifests"},{"name":"v4.0.0","sha":"94d98ba9e381e7a033e9ad74dd14413b23f2b3e1","kind":"commit","published_at":"2023-07-05T17:14:24.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v4.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v4.0.0/manifests"},{"name":"v3.1.1","sha":"1d474efa57d9c4f740eea9fe1f0f0d44acef56fe","kind":"commit","published_at":"2023-06-06T17:32:53.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v3.1.1","html_url":"https://github.com/npm/package-json/releases/tag/v3.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v3.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.1.1/manifests"},{"name":"v3.1.0","sha":"adb0c176d5e9741b653483bb2f12790c8a7e1370","kind":"commit","published_at":"2023-05-16T15:51:45.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v3.1.0","html_url":"https://github.com/npm/package-json/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v3.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.1.0/manifests"},{"name":"v3.0.0","sha":"496d0cd78db183252464597d32c2eb4f322bf98e","kind":"commit","published_at":"2022-10-14T02:00:04.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v3.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.0.0/manifests"},{"name":"v2.0.0","sha":"9d7f8d4306239f258c85755685923d8bda70ee68","kind":"commit","published_at":"2022-04-05T14:01:22.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v2.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v2.0.0/manifests"},{"name":"v1.0.1","sha":"51fc9c583b6af6eb2c775efb2101a15ad24e651a","kind":"tag","published_at":"2021-06-23T16:25:50.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v1.0.1","html_url":"https://github.com/npm/package-json/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"f62d8c63acec185f577a3525352d139b4eab0f28","kind":"tag","published_at":"2021-06-22T23:23:08.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v1.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-08-23T20:46:18.814Z","dependent_packages_count":86,"downloads":53849157,"downloads_period":"last-month","dependent_repos_count":45951,"rankings":{"downloads":0.09805761221299705,"dependent_repos_count":0.13956941601026127,"dependent_packages_count":0.40552672184037036,"stargazers_count":6.056693476157711,"forks_count":8.204140401013515,"docker_downloads_count":0.0064511586982234905,"average":2.4850731309888463},"purl":"pkg:npm/%40npmcli/package-json","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/@npmcli/package-json","docker_dependents_count":40446,"docker_downloads_count":9840865130,"usage_url":"https://repos.ecosyste.ms/usage/npm/@npmcli/package-json","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/@npmcli/package-json/dependencies","status":null,"funding_links":[],"critical":false,"issue_metadata":{"last_synced_at":"2026-08-23T11:33:17.339Z","issues_count":13,"pull_requests_count":208,"avg_time_to_close_issue":3209936.0,"avg_time_to_close_pull_request":912462.3072916666,"issues_closed_count":9,"pull_requests_closed_count":192,"pull_request_authors_count":15,"issue_authors_count":12,"avg_comments_per_issue":0.8461538461538461,"avg_comments_per_pull_request":1.0,"merged_pull_requests_count":127,"bot_issues_count":1,"bot_pull_requests_count":146,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":7301.5,"past_year_avg_time_to_close_pull_request":715758.3157894737,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":19,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9090909090909091,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":18,"past_year_merged_pull_requests_count":11,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/issues","maintainers":[{"login":"wraithgar","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wraithgar"},{"login":"lukekarrys","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lukekarrys"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@npmcli%2Fpackage-json/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@npmcli%2Fpackage-json/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@npmcli%2Fpackage-json/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@npmcli%2Fpackage-json/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@npmcli%2Fpackage-json/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@npmcli%2Fpackage-json/codemeta","maintainers":[{"uuid":"saquibkhan","login":"saquibkhan","name":null,"email":"saquibkhan@github.com","url":null,"packages_count":274,"html_url":"https://www.npmjs.com/~saquibkhan","role":null,"created_at":"2022-12-12T17:34:12.145Z","updated_at":"2022-12-12T17:34:12.145Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/saquibkhan/packages"},{"uuid":"reggi","login":"reggi","name":null,"email":"reggi@github.com","url":null,"packages_count":454,"html_url":"https://www.npmjs.com/~reggi","role":null,"created_at":"2024-05-31T13:40:00.082Z","updated_at":"2024-05-31T13:40:00.082Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/reggi/packages"},{"uuid":"npm-cli-ops","login":"npm-cli-ops","name":null,"email":"npm-cli+bot@github.com","url":null,"packages_count":127,"html_url":"https://www.npmjs.com/~npm-cli-ops","role":null,"created_at":"2023-03-08T00:12:02.521Z","updated_at":"2023-03-08T00:12:02.521Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/npm-cli-ops/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5777788,"maintainers_count":1236487,"namespaces_count":421466,"keywords_count":881826,"github":"npm","metadata":{"funded_packages_count":189888,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-08-24T05:03:24.460Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":14074777,"name":"@depup/npmcli__package-json","ecosystem":"npm","description":"Programmatic API to update package.json (with updated dependencies)","homepage":"https://github.com/npm/package-json#readme","licenses":"ISC","normalized_licenses":["ISC"],"repository_url":"https://github.com/npm/package-json","keywords_array":["@npmcli/package-json","depup","updated-dependencies","security","latest","patched","npm","oss"],"namespace":"depup","versions_count":2,"first_release_published_at":"2026-03-17T16:32:30.076Z","latest_release_published_at":"2026-07-21T16:06:56.199Z","latest_release_number":"8.0.0-depup.50","last_synced_at":"2026-08-23T11:38:01.623Z","created_at":"2026-03-19T04:23:01.467Z","updated_at":"2026-08-23T15:38:35.760Z","registry_url":"https://www.npmjs.com/package/@depup/npmcli__package-json","install_command":"npm install @depup/npmcli__package-json","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"8.0.0-depup.50"},"contentPolicy":null},"repo_metadata":{"id":40507286,"uuid":"379075817","full_name":"npm/package-json","owner":"npm","description":"Programmatic API to update package.json","archived":false,"fork":false,"pushed_at":"2026-07-16T10:13:00.000Z","size":409,"stargazers_count":101,"open_issues_count":6,"forks_count":15,"subscribers_count":9,"default_branch":"main","last_synced_at":"2026-08-09T20:51:36.678Z","etag":null,"topics":["npm-cli"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/npm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2021-06-21T22:13:21.000Z","updated_at":"2026-08-06T15:17:26.000Z","dependencies_parsed_at":"2025-12-14T07:00:57.206Z","dependency_job_id":null,"html_url":"https://github.com/npm/package-json","commit_stats":{"total_commits":48,"total_committers":5,"mean_commits":9.6,"dds":0.6458333333333333,"last_synced_commit":"9dfd8dacd05d5b2519831cbd4482e1de029299f6"},"previous_names":[],"tags_count":28,"template":false,"template_full_name":null,"purl":"pkg:github/npm/package-json","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","download_url":"https://codeload.github.com/npm/package-json/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/sbom","scorecard":{"id":696414,"data":{"date":"2025-08-11","repo":{"name":"github.com/npm/package-json","commit":"a5e4ac3ab364b83afd86517d83f451e4762ed1f8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.1,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":10,"reason":"18 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/post-dependabot.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release-integration.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/audit.yml:41","Warn: npmCommand not pinned by hash: .github/workflows/ci-release.yml:62","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/post-dependabot.yml:39","Warn: npmCommand not pinned by hash: .github/workflows/pull-request.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/release-integration.yml:56","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:50","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:130","Info:   0 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  12 third-party GitHubAction dependencies pinned","Info:   0 out of   8 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:25","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:247","Info: topLevel 'contents' permission set to 'read': .github/workflows/audit.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci-release.yml:22","Warn: topLevel 'checks' permission set to 'write': .github/workflows/ci-release.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Warn: topLevel 'contents' permission set to 'write': .github/workflows/post-dependabot.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/pull-request.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-integration.yml:23","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:11","Warn: topLevel 'checks' permission set to 'write': .github/workflows/release.yml:13","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 25 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-22T03:49:49.322Z","repository_id":40507286,"created_at":"2025-08-22T03:49:49.322Z","updated_at":"2025-08-22T03:49:49.322Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36470243,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"npm","name":"npm","uuid":"6078720","kind":"organization","description":"JavaScript Package Manager, Registry \u0026 Website","email":null,"website":"https://npmjs.com","location":"United States of America","twitter":"npmjs","company":null,"icon_url":"https://avatars.githubusercontent.com/u/6078720?v=4","repositories_count":343,"last_synced_at":"2024-04-14T06:35:40.452Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/npm","funding_links":[],"total_stars":50155,"followers":2401,"following":0,"created_at":"2022-11-02T16:18:59.756Z","updated_at":"2024-04-14T06:36:45.292Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm/repositories"},"tags":[{"name":"v8.0.0","sha":"ebc5daff41dfcdf43299799d4b5e7bd85e2bb132","kind":"commit","published_at":"2026-05-22T16:38:53.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v8.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v8.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v8.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v8.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v8.0.0/manifests"},{"name":"v7.0.5","sha":"78c442dbe8ff4221e529ffdc2093383723da73e6","kind":"commit","published_at":"2026-02-19T17:07:40.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v7.0.5","html_url":"https://github.com/npm/package-json/releases/tag/v7.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v7.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.5/manifests"},{"name":"v7.0.4","sha":"87a59959a2850fbdef13440d9a0ca41b63721dda","kind":"commit","published_at":"2025-11-21T16:38:37.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v7.0.4","html_url":"https://github.com/npm/package-json/releases/tag/v7.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v7.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.4/manifests"},{"name":"v7.0.3","sha":"6204a3894ad9ab41050a430a8d84cff1465e9a09","kind":"commit","published_at":"2025-11-18T22:39:17.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v7.0.3","html_url":"https://github.com/npm/package-json/releases/tag/v7.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v7.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.3/manifests"},{"name":"v7.0.2","sha":"8e979b3c5f215a57156789912f0305bf539daf3d","kind":"commit","published_at":"2025-11-04T18:30:04.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v7.0.2","html_url":"https://github.com/npm/package-json/releases/tag/v7.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v7.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.2/manifests"},{"name":"v7.0.1","sha":"5aa1707d4302bcf030c6d19efd812e62609c6b53","kind":"commit","published_at":"2025-09-17T21:50:47.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v7.0.1","html_url":"https://github.com/npm/package-json/releases/tag/v7.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v7.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.1/manifests"},{"name":"v7.0.0","sha":"f5db81bdfbba5e9d3bfc0732f8bfe511825a20aa","kind":"commit","published_at":"2025-08-28T20:46:05.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v7.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v7.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v7.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.0/manifests"},{"name":"v6.2.0","sha":"a4116dc37d50b6606ab03fec2f8b4a8a30e2abb8","kind":"commit","published_at":"2025-05-21T16:26:47.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v6.2.0","html_url":"https://github.com/npm/package-json/releases/tag/v6.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v6.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.2.0/manifests"},{"name":"v6.1.1","sha":"b6465f44c727d6513db6898c7cbe41dd355cebe8","kind":"commit","published_at":"2025-01-21T17:22:45.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v6.1.1","html_url":"https://github.com/npm/package-json/releases/tag/v6.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v6.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.1.1/manifests"},{"name":"v6.1.0","sha":"79cb556342b83b4b298a413677758b39c4d9c839","kind":"commit","published_at":"2024-11-27T17:38:17.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v6.1.0","html_url":"https://github.com/npm/package-json/releases/tag/v6.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v6.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.1.0/manifests"},{"name":"v6.0.1","sha":"914737eb849d82aa65e4662f43dd5d726bb07428","kind":"commit","published_at":"2024-10-02T16:38:27.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v6.0.1","html_url":"https://github.com/npm/package-json/releases/tag/v6.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v6.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.0.1/manifests"},{"name":"v6.0.0","sha":"25761f127c0b1ae04f5cad710b9fc7852bc999ee","kind":"commit","published_at":"2024-09-26T18:48:20.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v6.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v6.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v6.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.0.0/manifests"},{"name":"v5.2.1","sha":"3426666cc292489d6d7a6d5e89a5029175a86f06","kind":"commit","published_at":"2024-09-17T20:33:09.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.2.1","html_url":"https://github.com/npm/package-json/releases/tag/v5.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.2.1/manifests"},{"name":"v5.2.0","sha":"fa6ed87cb7dbb824d5e74dd3ff03b711e201a5a4","kind":"commit","published_at":"2024-06-03T15:56:28.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.2.0","html_url":"https://github.com/npm/package-json/releases/tag/v5.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.2.0/manifests"},{"name":"v5.1.1","sha":"e6c2bdda262e57f1da26687a8cbc1b9805d28ce4","kind":"commit","published_at":"2024-05-29T15:51:58.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.1.1","html_url":"https://github.com/npm/package-json/releases/tag/v5.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.1.1/manifests"},{"name":"v5.1.0","sha":"57f7f255a38c1cfdfe7374920e651abef2ac3418","kind":"commit","published_at":"2024-04-22T20:49:45.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.1.0","html_url":"https://github.com/npm/package-json/releases/tag/v5.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.1.0/manifests"},{"name":"v5.0.3","sha":"ee18cb547e64479d9c4f21432812642a2e39b6ff","kind":"commit","published_at":"2024-04-12T22:04:20.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.0.3","html_url":"https://github.com/npm/package-json/releases/tag/v5.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.3/manifests"},{"name":"v5.0.2","sha":"b1e741b63e817405a52a495e0b52693491a5a0d0","kind":"commit","published_at":"2024-04-10T15:57:17.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.0.2","html_url":"https://github.com/npm/package-json/releases/tag/v5.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.2/manifests"},{"name":"v5.0.1","sha":"d4814d44e222a128e4df6b417056c39ee86db48a","kind":"commit","published_at":"2024-04-09T17:51:47.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.0.1","html_url":"https://github.com/npm/package-json/releases/tag/v5.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.1/manifests"},{"name":"v5.0.0","sha":"37f32be1557601e79750b335e43405af194315a1","kind":"commit","published_at":"2023-08-15T17:47:23.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v5.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.0/manifests"},{"name":"v4.0.1","sha":"e8b8dcb0bd9ff8078946b4397e8bf989aaf4a748","kind":"commit","published_at":"2023-07-17T20:39:41.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v4.0.1","html_url":"https://github.com/npm/package-json/releases/tag/v4.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v4.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v4.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v4.0.1/manifests"},{"name":"v4.0.0","sha":"94d98ba9e381e7a033e9ad74dd14413b23f2b3e1","kind":"commit","published_at":"2023-07-05T17:14:24.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v4.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v4.0.0/manifests"},{"name":"v3.1.1","sha":"1d474efa57d9c4f740eea9fe1f0f0d44acef56fe","kind":"commit","published_at":"2023-06-06T17:32:53.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v3.1.1","html_url":"https://github.com/npm/package-json/releases/tag/v3.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v3.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.1.1/manifests"},{"name":"v3.1.0","sha":"adb0c176d5e9741b653483bb2f12790c8a7e1370","kind":"commit","published_at":"2023-05-16T15:51:45.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v3.1.0","html_url":"https://github.com/npm/package-json/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v3.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.1.0/manifests"},{"name":"v3.0.0","sha":"496d0cd78db183252464597d32c2eb4f322bf98e","kind":"commit","published_at":"2022-10-14T02:00:04.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v3.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.0.0/manifests"},{"name":"v2.0.0","sha":"9d7f8d4306239f258c85755685923d8bda70ee68","kind":"commit","published_at":"2022-04-05T14:01:22.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v2.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v2.0.0/manifests"},{"name":"v1.0.1","sha":"51fc9c583b6af6eb2c775efb2101a15ad24e651a","kind":"tag","published_at":"2021-06-23T16:25:50.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v1.0.1","html_url":"https://github.com/npm/package-json/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"f62d8c63acec185f577a3525352d139b4eab0f28","kind":"tag","published_at":"2021-06-22T23:23:08.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v1.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-08-23T15:38:35.759Z","dependent_packages_count":0,"downloads":38,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":22.40941024303714,"dependent_packages_count":32.301555319200475,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":27.35548278111881},"purl":"pkg:npm/%40depup/npmcli__package-json","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/@depup/npmcli__package-json","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/@depup/npmcli__package-json","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/@depup/npmcli__package-json/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-23T11:33:17.339Z","issues_count":13,"pull_requests_count":208,"avg_time_to_close_issue":3209936.0,"avg_time_to_close_pull_request":912462.3072916666,"issues_closed_count":9,"pull_requests_closed_count":192,"pull_request_authors_count":15,"issue_authors_count":12,"avg_comments_per_issue":0.8461538461538461,"avg_comments_per_pull_request":1.0,"merged_pull_requests_count":127,"bot_issues_count":1,"bot_pull_requests_count":146,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":7301.5,"past_year_avg_time_to_close_pull_request":715758.3157894737,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":19,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9090909090909091,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":18,"past_year_merged_pull_requests_count":11,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/issues","maintainers":[{"login":"wraithgar","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wraithgar"},{"login":"lukekarrys","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lukekarrys"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@depup%2Fnpmcli__package-json/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@depup%2Fnpmcli__package-json/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@depup%2Fnpmcli__package-json/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@depup%2Fnpmcli__package-json/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@depup%2Fnpmcli__package-json/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@depup%2Fnpmcli__package-json/codemeta","maintainers":[{"uuid":"chiefmikey","login":"chiefmikey","name":null,"email":"wolfemikl@gmail.com","url":null,"packages_count":2132,"html_url":"https://www.npmjs.com/~chiefmikey","role":null,"created_at":"2026-03-19T04:23:03.040Z","updated_at":"2026-03-19T04:23:03.040Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/chiefmikey/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5777788,"maintainers_count":1236487,"namespaces_count":421466,"keywords_count":881826,"github":"npm","metadata":{"funded_packages_count":189888,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-08-24T05:03:24.460Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":11669375,"name":"org.mvnpm.at.npmcli:package-json","ecosystem":"maven","description":"Programmatic API to update package.json","homepage":"https://github.com/npm/package-json#readme","licenses":"ISC","normalized_licenses":["ISC"],"repository_url":"https://github.com/npm/package-json","keywords_array":[],"namespace":"org.mvnpm.at.npmcli","versions_count":9,"first_release_published_at":"2025-03-19T03:25:56.000Z","latest_release_published_at":"2026-05-22T18:28:15.000Z","latest_release_number":"8.0.0","last_synced_at":"2026-08-23T11:34:00.662Z","created_at":"2025-05-21T20:45:52.876Z","updated_at":"2026-08-23T11:34:00.662Z","registry_url":"https://central.sonatype.com/artifact/org.mvnpm.at.npmcli/package-json/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.mvnpm.at.npmcli/package-json/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":40507286,"uuid":"379075817","full_name":"npm/package-json","owner":"npm","description":"Programmatic API to update package.json","archived":false,"fork":false,"pushed_at":"2026-07-16T10:13:00.000Z","size":409,"stargazers_count":101,"open_issues_count":6,"forks_count":15,"subscribers_count":9,"default_branch":"main","last_synced_at":"2026-08-09T20:51:36.678Z","etag":null,"topics":["npm-cli"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/npm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2021-06-21T22:13:21.000Z","updated_at":"2026-08-06T15:17:26.000Z","dependencies_parsed_at":"2025-12-14T07:00:57.206Z","dependency_job_id":null,"html_url":"https://github.com/npm/package-json","commit_stats":{"total_commits":48,"total_committers":5,"mean_commits":9.6,"dds":0.6458333333333333,"last_synced_commit":"9dfd8dacd05d5b2519831cbd4482e1de029299f6"},"previous_names":[],"tags_count":28,"template":false,"template_full_name":null,"purl":"pkg:github/npm/package-json","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","download_url":"https://codeload.github.com/npm/package-json/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/sbom","scorecard":{"id":696414,"data":{"date":"2025-08-11","repo":{"name":"github.com/npm/package-json","commit":"a5e4ac3ab364b83afd86517d83f451e4762ed1f8"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.1,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Maintained","score":10,"reason":"18 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/post-dependabot.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release-integration.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/package-json/release.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/audit.yml:41","Warn: npmCommand not pinned by hash: .github/workflows/ci-release.yml:62","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/post-dependabot.yml:39","Warn: npmCommand not pinned by hash: .github/workflows/pull-request.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/release-integration.yml:56","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:50","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:130","Info:   0 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  12 third-party GitHubAction dependencies pinned","Info:   0 out of   8 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:25","Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:247","Info: topLevel 'contents' permission set to 'read': .github/workflows/audit.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci-release.yml:22","Warn: topLevel 'checks' permission set to 'write': .github/workflows/ci-release.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Warn: topLevel 'contents' permission set to 'write': .github/workflows/post-dependabot.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/pull-request.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-integration.yml:23","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:11","Warn: topLevel 'checks' permission set to 'write': .github/workflows/release.yml:13","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":9,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 25 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-22T03:49:49.322Z","repository_id":40507286,"created_at":"2025-08-22T03:49:49.322Z","updated_at":"2025-08-22T03:49:49.322Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36470243,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"npm","name":"npm","uuid":"6078720","kind":"organization","description":"JavaScript Package Manager, Registry \u0026 Website","email":null,"website":"https://npmjs.com","location":"United States of America","twitter":"npmjs","company":null,"icon_url":"https://avatars.githubusercontent.com/u/6078720?v=4","repositories_count":343,"last_synced_at":"2024-04-14T06:35:40.452Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/npm","funding_links":[],"total_stars":50155,"followers":2401,"following":0,"created_at":"2022-11-02T16:18:59.756Z","updated_at":"2024-04-14T06:36:45.292Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm/repositories"},"tags":[{"name":"v8.0.0","sha":"ebc5daff41dfcdf43299799d4b5e7bd85e2bb132","kind":"commit","published_at":"2026-05-22T16:38:53.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v8.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v8.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v8.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v8.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v8.0.0/manifests"},{"name":"v7.0.5","sha":"78c442dbe8ff4221e529ffdc2093383723da73e6","kind":"commit","published_at":"2026-02-19T17:07:40.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v7.0.5","html_url":"https://github.com/npm/package-json/releases/tag/v7.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v7.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.5/manifests"},{"name":"v7.0.4","sha":"87a59959a2850fbdef13440d9a0ca41b63721dda","kind":"commit","published_at":"2025-11-21T16:38:37.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v7.0.4","html_url":"https://github.com/npm/package-json/releases/tag/v7.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v7.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.4/manifests"},{"name":"v7.0.3","sha":"6204a3894ad9ab41050a430a8d84cff1465e9a09","kind":"commit","published_at":"2025-11-18T22:39:17.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v7.0.3","html_url":"https://github.com/npm/package-json/releases/tag/v7.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v7.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.3/manifests"},{"name":"v7.0.2","sha":"8e979b3c5f215a57156789912f0305bf539daf3d","kind":"commit","published_at":"2025-11-04T18:30:04.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v7.0.2","html_url":"https://github.com/npm/package-json/releases/tag/v7.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v7.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.2/manifests"},{"name":"v7.0.1","sha":"5aa1707d4302bcf030c6d19efd812e62609c6b53","kind":"commit","published_at":"2025-09-17T21:50:47.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v7.0.1","html_url":"https://github.com/npm/package-json/releases/tag/v7.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v7.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.1/manifests"},{"name":"v7.0.0","sha":"f5db81bdfbba5e9d3bfc0732f8bfe511825a20aa","kind":"commit","published_at":"2025-08-28T20:46:05.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v7.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v7.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v7.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v7.0.0/manifests"},{"name":"v6.2.0","sha":"a4116dc37d50b6606ab03fec2f8b4a8a30e2abb8","kind":"commit","published_at":"2025-05-21T16:26:47.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v6.2.0","html_url":"https://github.com/npm/package-json/releases/tag/v6.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v6.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.2.0/manifests"},{"name":"v6.1.1","sha":"b6465f44c727d6513db6898c7cbe41dd355cebe8","kind":"commit","published_at":"2025-01-21T17:22:45.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v6.1.1","html_url":"https://github.com/npm/package-json/releases/tag/v6.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v6.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.1.1/manifests"},{"name":"v6.1.0","sha":"79cb556342b83b4b298a413677758b39c4d9c839","kind":"commit","published_at":"2024-11-27T17:38:17.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v6.1.0","html_url":"https://github.com/npm/package-json/releases/tag/v6.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v6.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.1.0/manifests"},{"name":"v6.0.1","sha":"914737eb849d82aa65e4662f43dd5d726bb07428","kind":"commit","published_at":"2024-10-02T16:38:27.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v6.0.1","html_url":"https://github.com/npm/package-json/releases/tag/v6.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v6.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.0.1/manifests"},{"name":"v6.0.0","sha":"25761f127c0b1ae04f5cad710b9fc7852bc999ee","kind":"commit","published_at":"2024-09-26T18:48:20.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v6.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v6.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v6.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v6.0.0/manifests"},{"name":"v5.2.1","sha":"3426666cc292489d6d7a6d5e89a5029175a86f06","kind":"commit","published_at":"2024-09-17T20:33:09.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.2.1","html_url":"https://github.com/npm/package-json/releases/tag/v5.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.2.1/manifests"},{"name":"v5.2.0","sha":"fa6ed87cb7dbb824d5e74dd3ff03b711e201a5a4","kind":"commit","published_at":"2024-06-03T15:56:28.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.2.0","html_url":"https://github.com/npm/package-json/releases/tag/v5.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.2.0/manifests"},{"name":"v5.1.1","sha":"e6c2bdda262e57f1da26687a8cbc1b9805d28ce4","kind":"commit","published_at":"2024-05-29T15:51:58.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.1.1","html_url":"https://github.com/npm/package-json/releases/tag/v5.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.1.1/manifests"},{"name":"v5.1.0","sha":"57f7f255a38c1cfdfe7374920e651abef2ac3418","kind":"commit","published_at":"2024-04-22T20:49:45.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.1.0","html_url":"https://github.com/npm/package-json/releases/tag/v5.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.1.0/manifests"},{"name":"v5.0.3","sha":"ee18cb547e64479d9c4f21432812642a2e39b6ff","kind":"commit","published_at":"2024-04-12T22:04:20.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.0.3","html_url":"https://github.com/npm/package-json/releases/tag/v5.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.3/manifests"},{"name":"v5.0.2","sha":"b1e741b63e817405a52a495e0b52693491a5a0d0","kind":"commit","published_at":"2024-04-10T15:57:17.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.0.2","html_url":"https://github.com/npm/package-json/releases/tag/v5.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.2/manifests"},{"name":"v5.0.1","sha":"d4814d44e222a128e4df6b417056c39ee86db48a","kind":"commit","published_at":"2024-04-09T17:51:47.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.0.1","html_url":"https://github.com/npm/package-json/releases/tag/v5.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.1/manifests"},{"name":"v5.0.0","sha":"37f32be1557601e79750b335e43405af194315a1","kind":"commit","published_at":"2023-08-15T17:47:23.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v5.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v5.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v5.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v5.0.0/manifests"},{"name":"v4.0.1","sha":"e8b8dcb0bd9ff8078946b4397e8bf989aaf4a748","kind":"commit","published_at":"2023-07-17T20:39:41.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v4.0.1","html_url":"https://github.com/npm/package-json/releases/tag/v4.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v4.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v4.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v4.0.1/manifests"},{"name":"v4.0.0","sha":"94d98ba9e381e7a033e9ad74dd14413b23f2b3e1","kind":"commit","published_at":"2023-07-05T17:14:24.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v4.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v4.0.0/manifests"},{"name":"v3.1.1","sha":"1d474efa57d9c4f740eea9fe1f0f0d44acef56fe","kind":"commit","published_at":"2023-06-06T17:32:53.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v3.1.1","html_url":"https://github.com/npm/package-json/releases/tag/v3.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v3.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.1.1/manifests"},{"name":"v3.1.0","sha":"adb0c176d5e9741b653483bb2f12790c8a7e1370","kind":"commit","published_at":"2023-05-16T15:51:45.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v3.1.0","html_url":"https://github.com/npm/package-json/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v3.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.1.0/manifests"},{"name":"v3.0.0","sha":"496d0cd78db183252464597d32c2eb4f322bf98e","kind":"commit","published_at":"2022-10-14T02:00:04.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v3.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v3.0.0/manifests"},{"name":"v2.0.0","sha":"9d7f8d4306239f258c85755685923d8bda70ee68","kind":"commit","published_at":"2022-04-05T14:01:22.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v2.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v2.0.0/manifests"},{"name":"v1.0.1","sha":"51fc9c583b6af6eb2c775efb2101a15ad24e651a","kind":"tag","published_at":"2021-06-23T16:25:50.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v1.0.1","html_url":"https://github.com/npm/package-json/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"f62d8c63acec185f577a3525352d139b4eab0f28","kind":"tag","published_at":"2021-06-22T23:23:08.000Z","download_url":"https://codeload.github.com/npm/package-json/tar.gz/v1.0.0","html_url":"https://github.com/npm/package-json/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/package-json@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-08-09T21:34:36.499Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":34.702303132771725,"dependent_packages_count":49.61624962647249,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":42.159276379622106},"purl":"pkg:maven/org.mvnpm.at.npmcli/package-json","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.mvnpm.at.npmcli:package-json","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.mvnpm.at.npmcli:package-json","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.mvnpm.at.npmcli:package-json/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-06T02:02:58.054Z","issues_count":13,"pull_requests_count":208,"avg_time_to_close_issue":3209936.0,"avg_time_to_close_pull_request":912462.3072916666,"issues_closed_count":9,"pull_requests_closed_count":192,"pull_request_authors_count":15,"issue_authors_count":12,"avg_comments_per_issue":0.8461538461538461,"avg_comments_per_pull_request":1.0,"merged_pull_requests_count":127,"bot_issues_count":1,"bot_pull_requests_count":146,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":7301.5,"past_year_avg_time_to_close_pull_request":715758.3157894737,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":19,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9090909090909091,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":18,"past_year_merged_pull_requests_count":11,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/issues","maintainers":[{"login":"wraithgar","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wraithgar"},{"login":"lukekarrys","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lukekarrys"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.npmcli:package-json/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.npmcli:package-json/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.npmcli:package-json/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.npmcli:package-json/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.npmcli:package-json/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm.at.npmcli:package-json/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":617984,"maintainers_count":0,"namespaces_count":82109,"keywords_count":36586,"github":"maven-central","metadata":{"funded_packages_count":47727,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-24T05:04:02.273Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}}],"commits":{"id":83177,"full_name":"npm/package-json","default_branch":"main","total_commits":200,"total_committers":16,"total_bot_commits":74,"total_bot_committers":2,"mean_commits":12.5,"dds":0.76,"past_year_total_commits":38,"past_year_total_committers":6,"past_year_total_bot_commits":19,"past_year_total_bot_committers":2,"past_year_mean_commits":6.333333333333333,"past_year_dds":0.631578947368421,"last_synced_at":"2026-08-19T09:34:17.307Z","last_synced_commit":"a7dafdbdee34c96c672862fadde9ae5b594c938e","created_at":"2023-03-07T20:16:00.812Z","updated_at":"2026-08-19T09:34:16.985Z","committers":[{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":48},{"name":"Gar","email":"gar+gh@danger.computer","login":"wraithgar","count":44},{"name":"github-actions[bot]","email":"41898282+github-actions[bot]","login":"github-actions[bot]","count":26},{"name":"Luke Karrys","email":"luke@lukekarrys.com","login":"lukekarrys","count":24},{"name":"Michael Smith","email":"owlstronaut@github.com","login":"owlstronaut","count":18},{"name":"Ruy Adorno","email":"ruyadorno@hotmail.com","login":"ruyadorno","count":16},{"name":"reggi","email":"reggi@github.com","login":"reggi","count":8},{"name":"Vinicius Lourenço","email":"12551007+H4ad","login":"H4ad","count":4},{"name":"Anton Golub","email":"antongolub@antongolub.com","login":"antongolub","count":3},{"name":"milaninfy","email":"111582375+milaninfy","login":"milaninfy","count":2},{"name":"Chris Sidi","email":"hashtagchris@github.com","login":"hashtagchris","count":2},{"name":"Superchupu","email":"53496941+SuperchupuDev","login":"SuperchupuDev","count":1},{"name":"Max Black","email":"husivm@gmail.com","login":"MaxBlack-dev","count":1},{"name":"Jamie King","email":"hello@jamieking.me","login":"10xLaCroixDrinker","count":1},{"name":"Ivan horomanski","email":"idhard@gmail.com","login":"idhard","count":1},{"name":"Clozent","email":"45975432+Clozent","login":"Clozent","count":1}],"past_year_committers":[{"name":"Michael Smith","email":"owlstronaut@github.com","login":"owlstronaut","count":14},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":12},{"name":"github-actions[bot]","email":"41898282+github-actions[bot]","login":"github-actions[bot]","count":7},{"name":"Michael Garvin","email":"gar+gh@danger.computer","login":"wraithgar","count":3},{"name":"Max Black","email":"husivm@gmail.com","login":"MaxBlack-dev","count":1},{"name":"Clozent","email":"45975432+Clozent","login":"Clozent","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-08-20T00:00:10.776Z","repositories_count":6750506,"commits_count":978010206,"contributors_count":41229425,"owners_count":1358604,"committers_count":3352512,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"npm/package-json","html_url":"https://github.com/npm/package-json","last_synced_at":"2026-08-23T11:33:17.339Z","status":null,"issues_count":13,"pull_requests_count":208,"avg_time_to_close_issue":3209936.0,"avg_time_to_close_pull_request":912462.3072916666,"issues_closed_count":9,"pull_requests_closed_count":192,"pull_request_authors_count":15,"issue_authors_count":12,"avg_comments_per_issue":0.8461538461538461,"avg_comments_per_pull_request":1.0,"merged_pull_requests_count":127,"bot_issues_count":1,"bot_pull_requests_count":146,"past_year_issues_count":2,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":7301.5,"past_year_avg_time_to_close_pull_request":715758.3157894737,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":19,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":1.0,"past_year_avg_comments_per_pull_request":0.9090909090909091,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":18,"past_year_merged_pull_requests_count":11,"created_at":"2023-05-18T15:31:29.640Z","updated_at":"2026-08-23T11:33:17.339Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fpackage-json/issues","issue_labels_count":{"table":{"invalid":1,"autorelease: pending":1}},"pull_request_labels_count":{"table":{"Dependencies":115,"autorelease: tagged":19,"autorelease: pending":15}},"issue_author_associations_count":{"table":{"NONE":9,"CONTRIBUTOR":3,"MEMBER":1}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":182,"MEMBER":15,"NONE":11}},"issue_authors":{"table":{"wraithgar":2,"byCedric":1,"legodude17":1,"vlzivan":1,"mpsenn":1,"remiposo":1,"github-actions[bot]":1,"milaninfy":1,"ganeshkbhat":1,"gabrielschulhof":1,"LoveofRedMoon":1,"steffeli":1}},"pull_request_authors":{"table":{"dependabot[bot]":112,"github-actions[bot]":34,"wraithgar":19,"lukekarrys":7,"H4ad":7,"reggi":6,"milaninfy":5,"antongolub":5,"owlstronaut":4,"10xLaCroixDrinker":2,"benmccann":2,"G-Rath":2,"Clozent":1,"idhard":1,"MaxBlack-dev":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-08-24T00:00:06.384Z","repositories_count":16301769,"issues_count":42335015,"pull_requests_count":134763975,"authors_count":11516393,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{"autorelease: pending":1}},"past_year_pull_request_labels_count":{"table":{"Dependencies":15,"autorelease: tagged":2,"autorelease: pending":1}},"past_year_issue_author_associations_count":{"table":{"CONTRIBUTOR":1,"NONE":1}},"past_year_pull_request_author_associations_count":{"table":{"CONTRIBUTOR":21,"NONE":1}},"past_year_issue_authors":{"table":{"github-actions[bot]":1,"steffeli":1}},"past_year_pull_request_authors":{"table":{"dependabot[bot]":15,"github-actions[bot]":3,"owlstronaut":2,"Clozent":1,"MaxBlack-dev":1}},"maintainers":[{"table":{"login":"wraithgar","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/wraithgar"}},{"table":{"login":"lukekarrys","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lukekarrys"}}],"active_maintainers":[]}},"events":{"total":{"ReleaseEvent":4,"DeleteEvent":25,"PullRequestEvent":48,"ForkEvent":6,"IssuesEvent":2,"WatchEvent":14,"IssueCommentEvent":28,"PushEvent":71,"PullRequestReviewEvent":32,"PullRequestReviewCommentEvent":11,"CreateEvent":33},"last_year":{"ReleaseEvent":1,"DeleteEvent":15,"PullRequestEvent":19,"WatchEvent":2,"IssueCommentEvent":9,"PushEvent":30,"PullRequestReviewEvent":9,"CreateEvent":18}},"keywords":["npm-cli"],"dependencies":[{"ecosystem":"actions","filepath":".github/workflows/audit.yml","sha":null,"kind":"manifest","created_at":"2023-01-26T11:31:57.031Z","updated_at":"2023-01-26T11:31:57.031Z","repository_link":"https://github.com/npm/package-json/blob/main/.github/workflows/audit.yml","dependencies":[{"id":7168743684,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7168743685,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/ci-release.yml","sha":null,"kind":"manifest","created_at":"2023-01-26T11:31:57.040Z","updated_at":"2023-01-26T11:31:57.040Z","repository_link":"https://github.com/npm/package-json/blob/main/.github/workflows/ci-release.yml","dependencies":[{"id":7168743690,"package_name":"actions/github-script","ecosystem":"actions","requirements":"v6","direct":true,"kind":"composite","optional":false},{"id":7168743691,"package_name":"LouisBrunner/checks-action","ecosystem":"actions","requirements":"v1.3.1","direct":true,"kind":"composite","optional":false},{"id":7168743692,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7168743693,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/ci.yml","sha":null,"kind":"manifest","created_at":"2023-01-26T11:31:57.048Z","updated_at":"2023-01-26T11:31:57.048Z","repository_link":"https://github.com/npm/package-json/blob/main/.github/workflows/ci.yml","dependencies":[{"id":7168743696,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7168743697,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/codeql-analysis.yml","sha":null,"kind":"manifest","created_at":"2023-01-26T11:31:57.129Z","updated_at":"2023-01-26T11:31:57.129Z","repository_link":"https://github.com/npm/package-json/blob/main/.github/workflows/codeql-analysis.yml","dependencies":[{"id":7168743748,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7168743749,"package_name":"github/codeql-action/init","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7168743750,"package_name":"github/codeql-action/analyze","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/post-dependabot.yml","sha":null,"kind":"manifest","created_at":"2023-01-26T11:31:57.134Z","updated_at":"2023-01-26T11:31:57.134Z","repository_link":"https://github.com/npm/package-json/blob/main/.github/workflows/post-dependabot.yml","dependencies":[{"id":7168743751,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7168743752,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7168743753,"package_name":"dependabot/fetch-metadata","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/pull-request.yml","sha":null,"kind":"manifest","created_at":"2023-01-26T11:31:57.140Z","updated_at":"2023-01-26T11:31:57.140Z","repository_link":"https://github.com/npm/package-json/blob/main/.github/workflows/pull-request.yml","dependencies":[{"id":7168743754,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7168743755,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/release.yml","sha":null,"kind":"manifest","created_at":"2023-01-26T11:31:57.146Z","updated_at":"2023-01-26T11:31:57.146Z","repository_link":"https://github.com/npm/package-json/blob/main/.github/workflows/release.yml","dependencies":[{"id":7168743756,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7168743757,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7168743758,"package_name":"actions/github-script","ecosystem":"actions","requirements":"v6","direct":true,"kind":"composite","optional":false},{"id":7168743759,"package_name":"LouisBrunner/checks-action","ecosystem":"actions","requirements":"v1.3.1","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"npm","filepath":"package.json","sha":null,"kind":"manifest","created_at":"2022-08-09T22:22:19.475Z","updated_at":"2022-08-09T22:22:19.475Z","repository_link":"https://github.com/npm/package-json/blob/main/package.json","dependencies":[{"id":963478847,"package_name":"json-parse-even-better-errors","ecosystem":"npm","requirements":"^2.3.1","direct":true,"kind":"runtime","optional":false},{"id":963478848,"package_name":"@npmcli/eslint-config","ecosystem":"npm","requirements":"^3.0.1","direct":true,"kind":"development","optional":false},{"id":963478849,"package_name":"@npmcli/template-oss","ecosystem":"npm","requirements":"3.5.0","direct":true,"kind":"development","optional":false},{"id":963478850,"package_name":"tap","ecosystem":"npm","requirements":"^16.0.1","direct":true,"kind":"development","optional":false}]},{"ecosystem":"actions","filepath":".github/actions/create-check/action.yml","sha":null,"kind":"manifest","created_at":"2024-03-20T16:04:57.692Z","updated_at":"2024-03-20T16:04:57.692Z","repository_link":"https://github.com/npm/package-json/blob/main/.github/actions/create-check/action.yml","dependencies":[{"id":16938596228,"package_name":"actions/github-script","ecosystem":"actions","requirements":"v6","direct":true,"kind":"composite","optional":false},{"id":16938596229,"package_name":"LouisBrunner/checks-action","ecosystem":"actions","requirements":"v1.6.0","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/actions/install-latest-npm/action.yml","sha":null,"kind":"manifest","created_at":"2024-03-20T16:04:58.911Z","updated_at":"2024-03-20T16:04:58.911Z","repository_link":"https://github.com/npm/package-json/blob/main/.github/actions/install-latest-npm/action.yml","dependencies":[]},{"ecosystem":"actions","filepath":".github/workflows/release-integration.yml","sha":null,"kind":"manifest","created_at":"2024-03-20T16:04:59.082Z","updated_at":"2024-03-20T16:04:59.082Z","repository_link":"https://github.com/npm/package-json/blob/main/.github/workflows/release-integration.yml","dependencies":[{"id":16938598395,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":16938598396,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":16938598397,"package_name":"./.github/actions/install-latest-npm","ecosystem":"actions","requirements":"*","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"npm","filepath":"test/fixtures/all-fields-populated/package.json","sha":null,"kind":"manifest","created_at":"2025-12-14T07:00:51.554Z","updated_at":"2025-12-14T07:00:51.554Z","repository_link":"https://github.com/npm/package-json/blob/main/test/fixtures/all-fields-populated/package.json","dependencies":[{"id":25768231680,"package_name":"some-dependency","ecosystem":"npm","requirements":"^1.0.0","direct":true,"kind":"runtime","optional":false},{"id":25768231681,"package_name":"some-dev-dependency","ecosystem":"npm","requirements":"^1.0.0","direct":true,"kind":"development","optional":false}]},{"ecosystem":"npm","filepath":"test/fixtures/empty/package.json","sha":null,"kind":"manifest","created_at":"2025-12-14T07:00:51.891Z","updated_at":"2025-12-14T07:00:51.891Z","repository_link":"https://github.com/npm/package-json/blob/main/test/fixtures/empty/package.json","dependencies":[]},{"ecosystem":"npm","filepath":"test/fixtures/normalize-data/package.json","sha":null,"kind":"manifest","created_at":"2025-12-14T07:00:51.950Z","updated_at":"2025-12-14T07:00:51.950Z","repository_link":"https://github.com/npm/package-json/blob/main/test/fixtures/normalize-data/package.json","dependencies":[{"id":25768231682,"package_name":"@npmcli/arborist","ecosystem":"npm","requirements":"^2.6.3","direct":true,"kind":"runtime","optional":false},{"id":25768231683,"package_name":"@npmcli/ci-detect","ecosystem":"npm","requirements":"^1.2.0","direct":true,"kind":"runtime","optional":false},{"id":25768231694,"package_name":"@npmcli/config","ecosystem":"npm","requirements":"^2.2.0","direct":true,"kind":"runtime","optional":false},{"id":25768231695,"package_name":"@npmcli/run-script","ecosystem":"npm","requirements":"^1.8.5","direct":true,"kind":"runtime","optional":false},{"id":25768231696,"package_name":"abbrev","ecosystem":"npm","requirements":"~1.1.1","direct":true,"kind":"runtime","optional":false},{"id":25768231697,"package_name":"ansicolors","ecosystem":"npm","requirements":"~0.3.2","direct":true,"kind":"runtime","optional":false},{"id":25768231698,"package_name":"ansistyles","ecosystem":"npm","requirements":"~0.1.3","direct":true,"kind":"runtime","optional":false},{"id":25768231814,"package_name":"archy","ecosystem":"npm","requirements":"~1.0.0","direct":true,"kind":"runtime","optional":false},{"id":25768231815,"package_name":"byte-size","ecosystem":"npm","requirements":"^7.0.1","direct":true,"kind":"runtime","optional":false},{"id":25768231820,"package_name":"cacache","ecosystem":"npm","requirements":"^15.2.0","direct":true,"kind":"runtime","optional":false},{"id":25768231821,"package_name":"chalk","ecosystem":"npm","requirements":"^4.1.0","direct":true,"kind":"runtime","optional":false},{"id":25768231822,"package_name":"chownr","ecosystem":"npm","requirements":"^2.0.0","direct":true,"kind":"runtime","optional":false},{"id":25768231823,"package_name":"cli-columns","ecosystem":"npm","requirements":"^3.1.2","direct":true,"kind":"runtime","optional":false},{"id":25768231824,"package_name":"cli-table3","ecosystem":"npm","requirements":"^0.6.0","direct":true,"kind":"runtime","optional":false},{"id":25768231825,"package_name":"columnify","ecosystem":"npm","requirements":"~1.5.4","direct":true,"kind":"runtime","optional":false},{"id":25768231835,"package_name":"glob","ecosystem":"npm","requirements":"^7.1.7","direct":true,"kind":"runtime","optional":false},{"id":25768231836,"package_name":"graceful-fs","ecosystem":"npm","requirements":"^4.2.6","direct":true,"kind":"runtime","optional":false},{"id":25768231837,"package_name":"hosted-git-info","ecosystem":"npm","requirements":"^4.0.2","direct":true,"kind":"runtime","optional":false},{"id":25768231838,"package_name":"ini","ecosystem":"npm","requirements":"^2.0.0","direct":true,"kind":"runtime","optional":false},{"id":25768231839,"package_name":"init-package-json","ecosystem":"npm","requirements":"^2.0.3","direct":true,"kind":"runtime","optional":false},{"id":25768231840,"package_name":"is-cidr","ecosystem":"npm","requirements":"^4.0.2","direct":true,"kind":"runtime","optional":false},{"id":25768231841,"package_name":"json-parse-even-better-errors","ecosystem":"npm","requirements":"^2.3.1","direct":true,"kind":"runtime","optional":false},{"id":25768231842,"package_name":"leven","ecosystem":"npm","requirements":"^3.1.0","direct":true,"kind":"runtime","optional":false},{"id":25768231843,"package_name":"libnpmaccess","ecosystem":"npm","requirements":"^4.0.2","direct":true,"kind":"runtime","optional":false},{"id":25768231844,"package_name":"libnpmdiff","ecosystem":"npm","requirements":"^2.0.4","direct":true,"kind":"runtime","optional":false},{"id":25768231845,"package_name":"libnpmexec","ecosystem":"npm","requirements":"^2.0.0","direct":true,"kind":"runtime","optional":false},{"id":25768231846,"package_name":"libnpmfund","ecosystem":"npm","requirements":"^1.1.0","direct":true,"kind":"runtime","optional":false},{"id":25768231847,"package_name":"libnpmhook","ecosystem":"npm","requirements":"^6.0.2","direct":true,"kind":"runtime","optional":false},{"id":25768231851,"package_name":"libnpmorg","ecosystem":"npm","requirements":"^2.0.2","direct":true,"kind":"runtime","optional":false},{"id":25768231852,"package_name":"libnpmpack","ecosystem":"npm","requirements":"^2.0.1","direct":true,"kind":"runtime","optional":false},{"id":25768231853,"package_name":"libnpmpublish","ecosystem":"npm","requirements":"^4.0.1","direct":true,"kind":"runtime","optional":false},{"id":25768231854,"package_name":"libnpmsearch","ecosystem":"npm","requirements":"^3.1.1","direct":true,"kind":"runtime","optional":false},{"id":25768231855,"package_name":"libnpmteam","ecosystem":"npm","requirements":"^2.0.3","direct":true,"kind":"runtime","optional":false},{"id":25768231856,"package_name":"libnpmversion","ecosystem":"npm","requirements":"^1.2.1","direct":true,"kind":"runtime","optional":false},{"id":25768231857,"package_name":"make-fetch-happen","ecosystem":"npm","requirements":"^9.0.3","direct":true,"kind":"runtime","optional":false},{"id":25768231858,"package_name":"minipass","ecosystem":"npm","requirements":"^3.1.3","direct":true,"kind":"runtime","optional":false},{"id":25768231859,"package_name":"minipass-pipeline","ecosystem":"npm","requirements":"^1.2.4","direct":true,"kind":"runtime","optional":false},{"id":25768231860,"package_name":"mkdirp","ecosystem":"npm","requirements":"^1.0.4","direct":true,"kind":"runtime","optional":false},{"id":25768231861,"package_name":"mkdirp-infer-owner","ecosystem":"npm","requirements":"^2.0.0","direct":true,"kind":"runtime","optional":false},{"id":25768231865,"package_name":"ms","ecosystem":"npm","requirements":"^2.1.2","direct":true,"kind":"runtime","optional":false},{"id":25768231866,"package_name":"node-gyp","ecosystem":"npm","requirements":"^7.1.2","direct":true,"kind":"runtime","optional":false},{"id":25768231867,"package_name":"nopt","ecosystem":"npm","requirements":"^5.0.0","direct":true,"kind":"runtime","optional":false},{"id":25768231868,"package_name":"npm-audit-report","ecosystem":"npm","requirements":"^2.1.5","direct":true,"kind":"runtime","optional":false},{"id":25768231869,"package_name":"npm-package-arg","ecosystem":"npm","requirements":"^8.1.5","direct":true,"kind":"runtime","optional":false},{"id":25768231870,"package_name":"npm-pick-manifest","ecosystem":"npm","requirements":"^6.1.1","direct":true,"kind":"runtime","optional":false},{"id":25768231871,"package_name":"npm-profile","ecosystem":"npm","requirements":"^5.0.3","direct":true,"kind":"runtime","optional":false},{"id":25768231872,"package_name":"npm-registry-fetch","ecosystem":"npm","requirements":"^11.0.0","direct":true,"kind":"runtime","optional":false},{"id":25768231873,"package_name":"npm-user-validate","ecosystem":"npm","requirements":"^1.0.1","direct":true,"kind":"runtime","optional":false},{"id":25768231874,"package_name":"npmlog","ecosystem":"npm","requirements":"~4.1.2","direct":true,"kind":"runtime","optional":false},{"id":25768231875,"package_name":"opener","ecosystem":"npm","requirements":"^1.5.2","direct":true,"kind":"runtime","optional":false},{"id":25768231876,"package_name":"pacote","ecosystem":"npm","requirements":"^11.3.3","direct":true,"kind":"runtime","optional":false},{"id":25768231877,"package_name":"parse-conflict-json","ecosystem":"npm","requirements":"^1.1.1","direct":true,"kind":"runtime","optional":false},{"id":25768231878,"package_name":"qrcode-terminal","ecosystem":"npm","requirements":"^0.12.0","direct":true,"kind":"runtime","optional":false},{"id":25768231880,"package_name":"read","ecosystem":"npm","requirements":"~1.0.7","direct":true,"kind":"runtime","optional":false},{"id":25768231881,"package_name":"read-package-json","ecosystem":"npm","requirements":"^3.0.1","direct":true,"kind":"runtime","optional":false},{"id":25768231883,"package_name":"read-package-json-fast","ecosystem":"npm","requirements":"^2.0.2","direct":true,"kind":"runtime","optional":false},{"id":25768231909,"package_name":"readdir-scoped-modules","ecosystem":"npm","requirements":"^1.1.0","direct":true,"kind":"runtime","optional":false},{"id":25768231942,"package_name":"rimraf","ecosystem":"npm","requirements":"^3.0.2","direct":true,"kind":"runtime","optional":false},{"id":25768231943,"package_name":"semver","ecosystem":"npm","requirements":"^7.3.5","direct":true,"kind":"runtime","optional":false},{"id":25768231944,"package_name":"ssri","ecosystem":"npm","requirements":"^8.0.1","direct":true,"kind":"runtime","optional":false},{"id":25768231947,"package_name":"tar","ecosystem":"npm","requirements":"^6.1.0","direct":true,"kind":"runtime","optional":false},{"id":25768231948,"package_name":"text-table","ecosystem":"npm","requirements":"~0.2.0","direct":true,"kind":"runtime","optional":false},{"id":25768231949,"package_name":"tiny-relative-date","ecosystem":"npm","requirements":"^1.3.0","direct":true,"kind":"runtime","optional":false},{"id":25768231950,"package_name":"treeverse","ecosystem":"npm","requirements":"^1.0.4","direct":true,"kind":"runtime","optional":false},{"id":25768231951,"package_name":"validate-npm-package-name","ecosystem":"npm","requirements":"~3.0.0","direct":true,"kind":"runtime","optional":false},{"id":25768231952,"package_name":"which","ecosystem":"npm","requirements":"^2.0.2","direct":true,"kind":"runtime","optional":false},{"id":25768231953,"package_name":"write-file-atomic","ecosystem":"npm","requirements":"^3.0.3","direct":true,"kind":"runtime","optional":false},{"id":25768231954,"package_name":"eslint","ecosystem":"npm","requirements":"^7.26.0","direct":true,"kind":"development","optional":false},{"id":25768231955,"package_name":"eslint-plugin-import","ecosystem":"npm","requirements":"^2.23.4","direct":true,"kind":"development","optional":false},{"id":25768231956,"package_name":"eslint-plugin-node","ecosystem":"npm","requirements":"^11.1.0","direct":true,"kind":"development","optional":false},{"id":25768231957,"package_name":"eslint-plugin-promise","ecosystem":"npm","requirements":"^5.1.0","direct":true,"kind":"development","optional":false},{"id":25768231958,"package_name":"eslint-plugin-standard","ecosystem":"npm","requirements":"^5.0.0","direct":true,"kind":"development","optional":false},{"id":25768231959,"package_name":"licensee","ecosystem":"npm","requirements":"^8.2.0","direct":true,"kind":"development","optional":false},{"id":25768231965,"package_name":"tap","ecosystem":"npm","requirements":"^15.0.9","direct":true,"kind":"development","optional":false}]}],"score":30.479211890100498,"created_at":"2025-11-11T15:16:20.618Z","updated_at":"2026-08-24T12:07:48.720Z","avatar_url":"https://github.com/npm.png","language":"JavaScript","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/369155","html_url":"https://summary.ecosyste.ms/projects/369155"}