{"id":369394,"url":"https://github.com/hashicorp/go-cleanhttp","last_synced_at":"2026-08-24T12:06:12.258Z","repository":{"id":37951376,"uuid":"44763892","full_name":"hashicorp/go-cleanhttp","owner":"hashicorp","description":null,"archived":false,"fork":false,"pushed_at":"2026-07-23T08:40:27.000Z","size":78,"stargazers_count":444,"open_issues_count":2,"forks_count":38,"subscribers_count":12,"default_branch":"master","last_synced_at":"2026-08-09T04:25:13.458Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://godoc.org/github.com/hashicorp/go-cleanhttp","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hashicorp.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-10-22T18:07:48.000Z","updated_at":"2026-08-07T06:21:35.000Z","dependencies_parsed_at":"2026-03-18T05:01:04.483Z","dependency_job_id":null,"html_url":"https://github.com/hashicorp/go-cleanhttp","commit_stats":{"total_commits":22,"total_committers":9,"mean_commits":"2.4444444444444446","dds":"0.40909090909090906","last_synced_commit":"ff862fda8e09aad1244501dcf5038fdc7788fed2"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hashicorp/go-cleanhttp","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hashicorp","download_url":"https://codeload.github.com/hashicorp/go-cleanhttp/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/sbom","scorecard":{"id":457021,"data":{"date":"2025-08-11","repo":{"name":"github.com/hashicorp/go-cleanhttp","commit":"d15521f81f271a843c7c303030f00254b9053486"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.3,"checks":[{"name":"Code-Review","score":5,"reason":"Found 8/14 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/build-test.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":6,"reason":"8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:   3 out of   3 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Mozilla Public License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'master'","Info: 'force pushes' disabled on branch 'master'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'master'","Info: 'stale review dismissal' is required to merge on branch 'master'","Warn: required approving review count is 1 on branch 'master'","Info: codeowner review is required on branch 'master'","Info: 'last push approval' is required to merge on branch 'master'","Warn: no status checks found to merge onto branch 'master'","Info: PRs are required in order to make changes on branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hashicorp/.github/SECURITY.md:1","Info: Found linked content: github.com/hashicorp/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hashicorp/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hashicorp/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T09:58:56.362Z","repository_id":37951376,"created_at":"2025-08-19T09:58:56.363Z","updated_at":"2025-08-19T09:58:56.363Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36434780,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"hashicorp","name":"HashiCorp","uuid":"761456","kind":"organization","description":"Consistent workflows to provision, secure, connect, and run any infrastructure for any application.","email":"hello@hashicorp.com","website":"https://hashicorp.com","location":"San Francisco, CA","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/761456?v=4","repositories_count":920,"last_synced_at":"2025-07-01T06:04:51.252Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/hashicorp","funding_links":[],"total_stars":317824,"followers":9022,"following":0,"created_at":"2022-11-02T16:21:47.799Z","updated_at":"2025-07-01T06:04:51.253Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hashicorp","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hashicorp/repositories"},"packages":[{"id":13388005,"name":"golang-github-hashicorp-go-cleanhttp","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/hashicorp/go-cleanhttp","licenses":"mpl-2.0","normalized_licenses":[],"repository_url":"https://github.com/hashicorp/go-cleanhttp","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-05T16:04:30.364Z","latest_release_published_at":"2026-02-05T16:04:30.364Z","latest_release_number":"0.5.2-1","last_synced_at":"2026-08-13T18:01:53.750Z","created_at":"2026-02-05T16:04:22.411Z","updated_at":"2026-08-13T18:01:53.751Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-hashicorp-go-cleanhttp","install_command":"apt-get install golang-github-hashicorp-go-cleanhttp","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"extra","binary":"golang-github-hashicorp-go-cleanhttp-dev","standards_version":"4.5.1","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":37951376,"uuid":"44763892","full_name":"hashicorp/go-cleanhttp","owner":"hashicorp","description":null,"archived":false,"fork":false,"pushed_at":"2026-07-23T08:40:27.000Z","size":78,"stargazers_count":444,"open_issues_count":2,"forks_count":38,"subscribers_count":12,"default_branch":"master","last_synced_at":"2026-08-09T04:25:13.458Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://godoc.org/github.com/hashicorp/go-cleanhttp","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hashicorp.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-10-22T18:07:48.000Z","updated_at":"2026-08-07T06:21:35.000Z","dependencies_parsed_at":"2026-03-18T05:01:04.483Z","dependency_job_id":null,"html_url":"https://github.com/hashicorp/go-cleanhttp","commit_stats":{"total_commits":22,"total_committers":9,"mean_commits":"2.4444444444444446","dds":"0.40909090909090906","last_synced_commit":"ff862fda8e09aad1244501dcf5038fdc7788fed2"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hashicorp/go-cleanhttp","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hashicorp","download_url":"https://codeload.github.com/hashicorp/go-cleanhttp/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/sbom","scorecard":{"id":457021,"data":{"date":"2025-08-11","repo":{"name":"github.com/hashicorp/go-cleanhttp","commit":"d15521f81f271a843c7c303030f00254b9053486"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.3,"checks":[{"name":"Code-Review","score":5,"reason":"Found 8/14 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/build-test.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":6,"reason":"8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:   3 out of   3 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Mozilla Public License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'master'","Info: 'force pushes' disabled on branch 'master'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'master'","Info: 'stale review dismissal' is required to merge on branch 'master'","Warn: required approving review count is 1 on branch 'master'","Info: codeowner review is required on branch 'master'","Info: 'last push approval' is required to merge on branch 'master'","Warn: no status checks found to merge onto branch 'master'","Info: PRs are required in order to make changes on branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hashicorp/.github/SECURITY.md:1","Info: Found linked content: github.com/hashicorp/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hashicorp/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hashicorp/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T09:58:56.362Z","repository_id":37951376,"created_at":"2025-08-19T09:58:56.363Z","updated_at":"2025-08-19T09:58:56.363Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36434780,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-09T12:04:34.589Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-hashicorp-go-cleanhttp?arch=source\u0026distro=ubuntu-24.04","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-hashicorp-go-cleanhttp","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-hashicorp-go-cleanhttp","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-hashicorp-go-cleanhttp/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-07-24T20:00:44.973Z","issues_count":9,"pull_requests_count":58,"avg_time_to_close_issue":25100894.75,"avg_time_to_close_pull_request":3478549.980769231,"issues_closed_count":8,"pull_requests_closed_count":52,"pull_request_authors_count":20,"issue_authors_count":9,"avg_comments_per_issue":1.6666666666666667,"avg_comments_per_pull_request":0.3275862068965517,"merged_pull_requests_count":43,"bot_issues_count":0,"bot_pull_requests_count":27,"past_year_issues_count":0,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1554221.4347826086,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.4583333333333333,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":17,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/issues","maintainers":[{"login":"jefferai","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jefferai"},{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"},{"login":"KaushikiAnand","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/KaushikiAnand"},{"login":"bflad","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bflad"},{"login":"jbardin","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jbardin"},{"login":"calvn","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/calvn"}],"active_maintainers":[{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-hashicorp-go-cleanhttp/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-hashicorp-go-cleanhttp/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-hashicorp-go-cleanhttp/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-hashicorp-go-cleanhttp/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-hashicorp-go-cleanhttp/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-hashicorp-go-cleanhttp/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.04","url":"https://launchpad.net/ubuntu/noble","ecosystem":"ubuntu","default":true,"packages_count":37306,"maintainers_count":0,"namespaces_count":4,"keywords_count":1697,"github":"ubuntu","metadata":{"codename":"noble","funded_packages_count":1237},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:45.928Z","updated_at":"2026-08-24T05:06:09.353Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/namespaces"}},{"id":3492701,"name":"github.com/hashicorp/go-cleanhttp","ecosystem":"go","description":"Package cleanhttp offers convenience utilities for acquiring \"clean\" http.Transport and http.Client structs.","homepage":"https://github.com/hashicorp/go-cleanhttp","licenses":"mpl-2.0","normalized_licenses":["MPL-2.0"],"repository_url":"https://github.com/hashicorp/go-cleanhttp","keywords_array":[],"namespace":"github.com/hashicorp","versions_count":3,"first_release_published_at":"2018-08-30T03:37:06.000Z","latest_release_published_at":"2021-02-03T18:51:13.000Z","latest_release_number":"v0.5.2","last_synced_at":"2026-08-22T12:13:38.868Z","created_at":"2022-04-10T19:11:44.625Z","updated_at":"2026-08-22T12:13:38.868Z","registry_url":"https://pkg.go.dev/github.com/hashicorp/go-cleanhttp","install_command":"go get github.com/hashicorp/go-cleanhttp","documentation_url":"https://pkg.go.dev/github.com/hashicorp/go-cleanhttp#section-documentation","metadata":{},"repo_metadata":{"id":37951376,"uuid":"44763892","full_name":"hashicorp/go-cleanhttp","owner":"hashicorp","description":null,"archived":false,"fork":false,"pushed_at":"2026-07-23T08:40:27.000Z","size":78,"stargazers_count":444,"open_issues_count":2,"forks_count":38,"subscribers_count":12,"default_branch":"master","last_synced_at":"2026-08-09T04:25:13.458Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://godoc.org/github.com/hashicorp/go-cleanhttp","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hashicorp.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-10-22T18:07:48.000Z","updated_at":"2026-08-07T06:21:35.000Z","dependencies_parsed_at":"2026-03-18T05:01:04.483Z","dependency_job_id":null,"html_url":"https://github.com/hashicorp/go-cleanhttp","commit_stats":{"total_commits":22,"total_committers":9,"mean_commits":"2.4444444444444446","dds":"0.40909090909090906","last_synced_commit":"ff862fda8e09aad1244501dcf5038fdc7788fed2"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hashicorp/go-cleanhttp","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hashicorp","download_url":"https://codeload.github.com/hashicorp/go-cleanhttp/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/sbom","scorecard":{"id":457021,"data":{"date":"2025-08-11","repo":{"name":"github.com/hashicorp/go-cleanhttp","commit":"d15521f81f271a843c7c303030f00254b9053486"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.3,"checks":[{"name":"Code-Review","score":5,"reason":"Found 8/14 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/build-test.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":6,"reason":"8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:   3 out of   3 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Mozilla Public License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'master'","Info: 'force pushes' disabled on branch 'master'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'master'","Info: 'stale review dismissal' is required to merge on branch 'master'","Warn: required approving review count is 1 on branch 'master'","Info: codeowner review is required on branch 'master'","Info: 'last push approval' is required to merge on branch 'master'","Warn: no status checks found to merge onto branch 'master'","Info: PRs are required in order to make changes on branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hashicorp/.github/SECURITY.md:1","Info: Found linked content: github.com/hashicorp/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hashicorp/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hashicorp/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T09:58:56.362Z","repository_id":37951376,"created_at":"2025-08-19T09:58:56.363Z","updated_at":"2025-08-19T09:58:56.363Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36434780,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hashicorp","name":"HashiCorp","uuid":"761456","kind":"organization","description":"Consistent workflows to provision, secure, connect, and run any infrastructure for any application.","email":"hello@hashicorp.com","website":"https://hashicorp.com","location":"San Francisco, CA","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/761456?v=4","repositories_count":920,"last_synced_at":"2025-07-01T06:04:51.252Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/hashicorp","funding_links":[],"total_stars":317824,"followers":9022,"following":0,"created_at":"2022-11-02T16:21:47.799Z","updated_at":"2025-07-01T06:04:51.253Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hashicorp","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hashicorp/repositories"},"tags":[{"name":"v0.5.2","sha":"6d9e2ac5d828e5f8594b97f88c4bde14a67bb6d2","kind":"commit","published_at":"2021-02-03T18:51:13.000Z","download_url":"https://codeload.github.com/hashicorp/go-cleanhttp/tar.gz/v0.5.2","html_url":"https://github.com/hashicorp/go-cleanhttp/releases/tag/v0.5.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-cleanhttp@v0.5.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/tags/v0.5.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/tags/v0.5.2/manifests"},{"name":"v0.5.1","sha":"eda1e5db218aad1db63ca4642c8906b26bcf2744","kind":"commit","published_at":"2019-03-20T05:41:31.000Z","download_url":"https://codeload.github.com/hashicorp/go-cleanhttp/tar.gz/v0.5.1","html_url":"https://github.com/hashicorp/go-cleanhttp/releases/tag/v0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-cleanhttp@v0.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/tags/v0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/tags/v0.5.1/manifests"},{"name":"v0.5.0","sha":"e8ab9daed8d1ddd2d3c4efba338fe2eeae2e4f18","kind":"commit","published_at":"2018-08-30T03:37:06.000Z","download_url":"https://codeload.github.com/hashicorp/go-cleanhttp/tar.gz/v0.5.0","html_url":"https://github.com/hashicorp/go-cleanhttp/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hashicorp/go-cleanhttp@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/tags/v0.5.0/manifests"}]},"repo_metadata_updated_at":"2026-08-19T10:15:25.789Z","dependent_packages_count":12592,"downloads":null,"downloads_period":null,"dependent_repos_count":78667,"rankings":{"downloads":null,"dependent_repos_count":0.015451270426268404,"dependent_packages_count":0.016799367846009942,"stargazers_count":3.117099404143412,"forks_count":4.068246913375408,"docker_downloads_count":0.012755075586785326,"average":1.4460704062755767},"purl":"pkg:golang/github.com/hashicorp/go-cleanhttp","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/hashicorp/go-cleanhttp","docker_dependents_count":6610,"docker_downloads_count":34826343907,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/hashicorp/go-cleanhttp","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/hashicorp/go-cleanhttp/dependencies","status":null,"funding_links":[],"critical":true,"issue_metadata":{"last_synced_at":"2026-08-18T09:02:45.149Z","issues_count":9,"pull_requests_count":58,"avg_time_to_close_issue":25100894.75,"avg_time_to_close_pull_request":3478549.980769231,"issues_closed_count":8,"pull_requests_closed_count":52,"pull_request_authors_count":20,"issue_authors_count":9,"avg_comments_per_issue":1.6666666666666667,"avg_comments_per_pull_request":0.3275862068965517,"merged_pull_requests_count":43,"bot_issues_count":0,"bot_pull_requests_count":27,"past_year_issues_count":0,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1554221.4347826086,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.4583333333333333,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":17,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/issues","maintainers":[{"login":"jefferai","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jefferai"},{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"},{"login":"KaushikiAnand","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/KaushikiAnand"},{"login":"bflad","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bflad"},{"login":"jbardin","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jbardin"},{"login":"calvn","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/calvn"}],"active_maintainers":[{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fhashicorp%2Fgo-cleanhttp/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fhashicorp%2Fgo-cleanhttp/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fhashicorp%2Fgo-cleanhttp/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fhashicorp%2Fgo-cleanhttp/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fhashicorp%2Fgo-cleanhttp/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fhashicorp%2Fgo-cleanhttp/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2281895,"maintainers_count":0,"namespaces_count":839487,"keywords_count":124977,"github":"golang","metadata":{"funded_packages_count":67925,"sync_missing_packages_cursor":{"timestamp":"2026-08-17T00:00:58.969562Z","path":"github.com/Tektoncd/operator","version":"v0.78.0"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-08-24T05:01:22.286Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14201337,"name":"github.com/Hashicorp/go-cleanhttp","ecosystem":"go","description":null,"homepage":null,"licenses":"mpl-2.0","normalized_licenses":["MPL-2.0"],"repository_url":"https://github.com/Hashicorp/go-cleanhttp","keywords_array":[],"namespace":null,"versions_count":3,"first_release_published_at":"2018-08-30T03:37:06.000Z","latest_release_published_at":"2021-02-03T18:51:13.000Z","latest_release_number":"v0.5.2","last_synced_at":"2026-08-23T12:00:13.526Z","created_at":"2026-04-07T09:27:32.566Z","updated_at":"2026-08-23T12:00:13.527Z","registry_url":"https://pkg.go.dev/github.com/Hashicorp/go-cleanhttp","install_command":"go get github.com/Hashicorp/go-cleanhttp","documentation_url":"https://pkg.go.dev/github.com/Hashicorp/go-cleanhttp#section-documentation","metadata":{},"repo_metadata":{"id":37951376,"uuid":"44763892","full_name":"hashicorp/go-cleanhttp","owner":"hashicorp","description":null,"archived":false,"fork":false,"pushed_at":"2026-07-23T08:40:27.000Z","size":78,"stargazers_count":444,"open_issues_count":2,"forks_count":38,"subscribers_count":12,"default_branch":"master","last_synced_at":"2026-08-09T04:25:13.458Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://godoc.org/github.com/hashicorp/go-cleanhttp","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hashicorp.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-10-22T18:07:48.000Z","updated_at":"2026-08-07T06:21:35.000Z","dependencies_parsed_at":"2026-03-18T05:01:04.483Z","dependency_job_id":null,"html_url":"https://github.com/hashicorp/go-cleanhttp","commit_stats":{"total_commits":22,"total_committers":9,"mean_commits":"2.4444444444444446","dds":"0.40909090909090906","last_synced_commit":"ff862fda8e09aad1244501dcf5038fdc7788fed2"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hashicorp/go-cleanhttp","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hashicorp","download_url":"https://codeload.github.com/hashicorp/go-cleanhttp/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/sbom","scorecard":{"id":457021,"data":{"date":"2025-08-11","repo":{"name":"github.com/hashicorp/go-cleanhttp","commit":"d15521f81f271a843c7c303030f00254b9053486"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.3,"checks":[{"name":"Code-Review","score":5,"reason":"Found 8/14 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/build-test.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":6,"reason":"8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:   3 out of   3 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Mozilla Public License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'master'","Info: 'force pushes' disabled on branch 'master'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'master'","Info: 'stale review dismissal' is required to merge on branch 'master'","Warn: required approving review count is 1 on branch 'master'","Info: codeowner review is required on branch 'master'","Info: 'last push approval' is required to merge on branch 'master'","Warn: no status checks found to merge onto branch 'master'","Info: PRs are required in order to make changes on branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hashicorp/.github/SECURITY.md:1","Info: Found linked content: github.com/hashicorp/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hashicorp/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hashicorp/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T09:58:56.362Z","repository_id":37951376,"created_at":"2025-08-19T09:58:56.363Z","updated_at":"2025-08-19T09:58:56.363Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36453455,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-09T12:04:34.719Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.187121919065531,"dependent_packages_count":4.86046574014283,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":5.02379382960418},"purl":"pkg:golang/github.com/%21hashicorp/go-cleanhttp","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/Hashicorp/go-cleanhttp","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/Hashicorp/go-cleanhttp","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/Hashicorp/go-cleanhttp/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-07-24T20:00:44.973Z","issues_count":9,"pull_requests_count":58,"avg_time_to_close_issue":25100894.75,"avg_time_to_close_pull_request":3478549.980769231,"issues_closed_count":8,"pull_requests_closed_count":52,"pull_request_authors_count":20,"issue_authors_count":9,"avg_comments_per_issue":1.6666666666666667,"avg_comments_per_pull_request":0.3275862068965517,"merged_pull_requests_count":43,"bot_issues_count":0,"bot_pull_requests_count":27,"past_year_issues_count":0,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1554221.4347826086,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.4583333333333333,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":17,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/issues","maintainers":[{"login":"jefferai","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jefferai"},{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"},{"login":"KaushikiAnand","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/KaushikiAnand"},{"login":"bflad","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bflad"},{"login":"jbardin","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jbardin"},{"login":"calvn","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/calvn"}],"active_maintainers":[{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FHashicorp%2Fgo-cleanhttp/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FHashicorp%2Fgo-cleanhttp/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FHashicorp%2Fgo-cleanhttp/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FHashicorp%2Fgo-cleanhttp/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FHashicorp%2Fgo-cleanhttp/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FHashicorp%2Fgo-cleanhttp/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2281895,"maintainers_count":0,"namespaces_count":839487,"keywords_count":124977,"github":"golang","metadata":{"funded_packages_count":67925,"sync_missing_packages_cursor":{"timestamp":"2026-08-17T00:00:58.969562Z","path":"github.com/Tektoncd/operator","version":"v0.78.0"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-08-24T05:01:22.286Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14680566,"name":"github.com/HashiCorp/go-cleanhttp","ecosystem":"go","description":null,"homepage":null,"licenses":"mpl-2.0","normalized_licenses":["MPL-2.0"],"repository_url":"https://github.com/HashiCorp/go-cleanhttp","keywords_array":[],"namespace":null,"versions_count":3,"first_release_published_at":"2018-08-30T03:37:06.000Z","latest_release_published_at":"2021-02-03T18:51:13.000Z","latest_release_number":"v0.5.2","last_synced_at":"2026-08-23T11:42:09.418Z","created_at":"2026-06-26T13:15:42.582Z","updated_at":"2026-08-23T11:42:09.418Z","registry_url":"https://pkg.go.dev/github.com/HashiCorp/go-cleanhttp","install_command":"go get github.com/HashiCorp/go-cleanhttp","documentation_url":"https://pkg.go.dev/github.com/HashiCorp/go-cleanhttp#section-documentation","metadata":{},"repo_metadata":{"id":37951376,"uuid":"44763892","full_name":"hashicorp/go-cleanhttp","owner":"hashicorp","description":null,"archived":false,"fork":false,"pushed_at":"2026-07-23T08:40:27.000Z","size":78,"stargazers_count":444,"open_issues_count":2,"forks_count":38,"subscribers_count":12,"default_branch":"master","last_synced_at":"2026-08-09T04:25:13.458Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://godoc.org/github.com/hashicorp/go-cleanhttp","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hashicorp.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-10-22T18:07:48.000Z","updated_at":"2026-08-07T06:21:35.000Z","dependencies_parsed_at":"2026-03-18T05:01:04.483Z","dependency_job_id":null,"html_url":"https://github.com/hashicorp/go-cleanhttp","commit_stats":{"total_commits":22,"total_committers":9,"mean_commits":"2.4444444444444446","dds":"0.40909090909090906","last_synced_commit":"ff862fda8e09aad1244501dcf5038fdc7788fed2"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hashicorp/go-cleanhttp","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hashicorp","download_url":"https://codeload.github.com/hashicorp/go-cleanhttp/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/sbom","scorecard":{"id":457021,"data":{"date":"2025-08-11","repo":{"name":"github.com/hashicorp/go-cleanhttp","commit":"d15521f81f271a843c7c303030f00254b9053486"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.3,"checks":[{"name":"Code-Review","score":5,"reason":"Found 8/14 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/build-test.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":6,"reason":"8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:   3 out of   3 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Mozilla Public License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'master'","Info: 'force pushes' disabled on branch 'master'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'master'","Info: 'stale review dismissal' is required to merge on branch 'master'","Warn: required approving review count is 1 on branch 'master'","Info: codeowner review is required on branch 'master'","Info: 'last push approval' is required to merge on branch 'master'","Warn: no status checks found to merge onto branch 'master'","Info: PRs are required in order to make changes on branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hashicorp/.github/SECURITY.md:1","Info: Found linked content: github.com/hashicorp/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hashicorp/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hashicorp/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T09:58:56.362Z","repository_id":37951376,"created_at":"2025-08-19T09:58:56.363Z","updated_at":"2025-08-19T09:58:56.363Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36453455,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-09T12:04:34.754Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":4.949816600657531,"dependent_packages_count":4.638193141632565,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.794004871145048},"purl":"pkg:golang/github.com/%21hashi%21corp/go-cleanhttp","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/HashiCorp/go-cleanhttp","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/HashiCorp/go-cleanhttp","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/HashiCorp/go-cleanhttp/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-07-24T20:00:44.973Z","issues_count":9,"pull_requests_count":58,"avg_time_to_close_issue":25100894.75,"avg_time_to_close_pull_request":3478549.980769231,"issues_closed_count":8,"pull_requests_closed_count":52,"pull_request_authors_count":20,"issue_authors_count":9,"avg_comments_per_issue":1.6666666666666667,"avg_comments_per_pull_request":0.3275862068965517,"merged_pull_requests_count":43,"bot_issues_count":0,"bot_pull_requests_count":27,"past_year_issues_count":0,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1554221.4347826086,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.4583333333333333,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":17,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/issues","maintainers":[{"login":"jefferai","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jefferai"},{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"},{"login":"KaushikiAnand","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/KaushikiAnand"},{"login":"bflad","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bflad"},{"login":"jbardin","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jbardin"},{"login":"calvn","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/calvn"}],"active_maintainers":[{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FHashiCorp%2Fgo-cleanhttp/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FHashiCorp%2Fgo-cleanhttp/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FHashiCorp%2Fgo-cleanhttp/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FHashiCorp%2Fgo-cleanhttp/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FHashiCorp%2Fgo-cleanhttp/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FHashiCorp%2Fgo-cleanhttp/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2281895,"maintainers_count":0,"namespaces_count":839487,"keywords_count":124977,"github":"golang","metadata":{"funded_packages_count":67925,"sync_missing_packages_cursor":{"timestamp":"2026-08-17T00:00:58.969562Z","path":"github.com/Tektoncd/operator","version":"v0.78.0"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-08-24T05:01:22.286Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":13448368,"name":"golang-github-hashicorp-go-cleanhttp","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/hashicorp/go-cleanhttp","licenses":"mpl-2.0","normalized_licenses":[],"repository_url":"https://github.com/hashicorp/go-cleanhttp","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-08T15:33:05.742Z","latest_release_published_at":"2026-02-08T15:33:05.742Z","latest_release_number":"0.5.2-1","last_synced_at":"2026-03-08T15:44:23.321Z","created_at":"2026-02-08T15:33:05.131Z","updated_at":"2026-08-09T12:04:34.598Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-hashicorp-go-cleanhttp","install_command":"apt-get install golang-github-hashicorp-go-cleanhttp","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"extra","binary":"golang-github-hashicorp-go-cleanhttp-dev","standards_version":"4.5.1","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":37951376,"uuid":"44763892","full_name":"hashicorp/go-cleanhttp","owner":"hashicorp","description":null,"archived":false,"fork":false,"pushed_at":"2026-07-23T08:40:27.000Z","size":78,"stargazers_count":444,"open_issues_count":2,"forks_count":38,"subscribers_count":12,"default_branch":"master","last_synced_at":"2026-08-09T04:25:13.458Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://godoc.org/github.com/hashicorp/go-cleanhttp","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hashicorp.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-10-22T18:07:48.000Z","updated_at":"2026-08-07T06:21:35.000Z","dependencies_parsed_at":"2026-03-18T05:01:04.483Z","dependency_job_id":null,"html_url":"https://github.com/hashicorp/go-cleanhttp","commit_stats":{"total_commits":22,"total_committers":9,"mean_commits":"2.4444444444444446","dds":"0.40909090909090906","last_synced_commit":"ff862fda8e09aad1244501dcf5038fdc7788fed2"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hashicorp/go-cleanhttp","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hashicorp","download_url":"https://codeload.github.com/hashicorp/go-cleanhttp/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/sbom","scorecard":{"id":457021,"data":{"date":"2025-08-11","repo":{"name":"github.com/hashicorp/go-cleanhttp","commit":"d15521f81f271a843c7c303030f00254b9053486"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.3,"checks":[{"name":"Code-Review","score":5,"reason":"Found 8/14 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/build-test.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":6,"reason":"8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:   3 out of   3 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Mozilla Public License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'master'","Info: 'force pushes' disabled on branch 'master'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'master'","Info: 'stale review dismissal' is required to merge on branch 'master'","Warn: required approving review count is 1 on branch 'master'","Info: codeowner review is required on branch 'master'","Info: 'last push approval' is required to merge on branch 'master'","Warn: no status checks found to merge onto branch 'master'","Info: PRs are required in order to make changes on branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hashicorp/.github/SECURITY.md:1","Info: Found linked content: github.com/hashicorp/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hashicorp/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hashicorp/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T09:58:56.362Z","repository_id":37951376,"created_at":"2025-08-19T09:58:56.363Z","updated_at":"2025-08-19T09:58:56.363Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36434780,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-09T12:04:34.598Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-hashicorp-go-cleanhttp?arch=source\u0026distro=ubuntu-24.10\u0026repository_url=https://launchpad.net/ubuntu/oracular","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-hashicorp-go-cleanhttp","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-hashicorp-go-cleanhttp","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-hashicorp-go-cleanhttp/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-07-24T20:00:44.973Z","issues_count":9,"pull_requests_count":58,"avg_time_to_close_issue":25100894.75,"avg_time_to_close_pull_request":3478549.980769231,"issues_closed_count":8,"pull_requests_closed_count":52,"pull_request_authors_count":20,"issue_authors_count":9,"avg_comments_per_issue":1.6666666666666667,"avg_comments_per_pull_request":0.3275862068965517,"merged_pull_requests_count":43,"bot_issues_count":0,"bot_pull_requests_count":27,"past_year_issues_count":0,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1554221.4347826086,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.4583333333333333,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":17,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/issues","maintainers":[{"login":"jefferai","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jefferai"},{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"},{"login":"KaushikiAnand","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/KaushikiAnand"},{"login":"bflad","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bflad"},{"login":"jbardin","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jbardin"},{"login":"calvn","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/calvn"}],"active_maintainers":[{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-hashicorp-go-cleanhttp/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-hashicorp-go-cleanhttp/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-hashicorp-go-cleanhttp/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-hashicorp-go-cleanhttp/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-hashicorp-go-cleanhttp/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-hashicorp-go-cleanhttp/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.10","url":"https://launchpad.net/ubuntu/oracular","ecosystem":"ubuntu","default":false,"packages_count":38437,"maintainers_count":0,"namespaces_count":4,"keywords_count":1440,"github":"ubuntu","metadata":{"codename":"oracular","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":1308},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.028Z","updated_at":"2026-08-24T05:05:15.657Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/namespaces"}},{"id":13581134,"name":"golang-github-hashicorp-go-cleanhttp","ecosystem":"debian","description":null,"homepage":"https://github.com/hashicorp/go-cleanhttp","licenses":"mpl-2.0","normalized_licenses":[],"repository_url":"https://github.com/hashicorp/go-cleanhttp","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-11T08:51:28.929Z","latest_release_published_at":"2026-02-11T08:51:28.929Z","latest_release_number":"0.5.0-1.1","last_synced_at":"2026-08-06T10:26:12.697Z","created_at":"2026-02-11T08:51:28.764Z","updated_at":"2026-08-09T12:04:34.591Z","registry_url":"https://tracker.debian.org/pkg/golang-github-hashicorp-go-cleanhttp","install_command":"apt-get install golang-github-hashicorp-go-cleanhttp","documentation_url":"https://packages.debian.org/buster/golang-github-hashicorp-go-cleanhttp","metadata":{"component":"main","architecture":"all","priority":"optional","binary":"golang-github-hashicorp-go-cleanhttp-dev","standards_version":"4.3.0","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper (\u003e= 11~), dh-golang, golang-any","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":37951376,"uuid":"44763892","full_name":"hashicorp/go-cleanhttp","owner":"hashicorp","description":null,"archived":false,"fork":false,"pushed_at":"2026-07-23T08:40:27.000Z","size":78,"stargazers_count":444,"open_issues_count":2,"forks_count":38,"subscribers_count":12,"default_branch":"master","last_synced_at":"2026-08-09T04:25:13.458Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://godoc.org/github.com/hashicorp/go-cleanhttp","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hashicorp.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-10-22T18:07:48.000Z","updated_at":"2026-08-07T06:21:35.000Z","dependencies_parsed_at":"2026-03-18T05:01:04.483Z","dependency_job_id":null,"html_url":"https://github.com/hashicorp/go-cleanhttp","commit_stats":{"total_commits":22,"total_committers":9,"mean_commits":"2.4444444444444446","dds":"0.40909090909090906","last_synced_commit":"ff862fda8e09aad1244501dcf5038fdc7788fed2"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hashicorp/go-cleanhttp","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hashicorp","download_url":"https://codeload.github.com/hashicorp/go-cleanhttp/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/sbom","scorecard":{"id":457021,"data":{"date":"2025-08-11","repo":{"name":"github.com/hashicorp/go-cleanhttp","commit":"d15521f81f271a843c7c303030f00254b9053486"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.3,"checks":[{"name":"Code-Review","score":5,"reason":"Found 8/14 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/build-test.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":6,"reason":"8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:   3 out of   3 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Mozilla Public License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'master'","Info: 'force pushes' disabled on branch 'master'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'master'","Info: 'stale review dismissal' is required to merge on branch 'master'","Warn: required approving review count is 1 on branch 'master'","Info: codeowner review is required on branch 'master'","Info: 'last push approval' is required to merge on branch 'master'","Warn: no status checks found to merge onto branch 'master'","Info: PRs are required in order to make changes on branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hashicorp/.github/SECURITY.md:1","Info: Found linked content: github.com/hashicorp/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hashicorp/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hashicorp/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T09:58:56.362Z","repository_id":37951376,"created_at":"2025-08-19T09:58:56.363Z","updated_at":"2025-08-19T09:58:56.363Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36434780,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-09T12:04:34.591Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/golang-github-hashicorp-go-cleanhttp?arch=source\u0026distro=debian-10\u0026repository_url=https://packages.debian.org/buster","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/golang-github-hashicorp-go-cleanhttp","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/golang-github-hashicorp-go-cleanhttp","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/golang-github-hashicorp-go-cleanhttp/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-07-24T20:00:44.973Z","issues_count":9,"pull_requests_count":58,"avg_time_to_close_issue":25100894.75,"avg_time_to_close_pull_request":3478549.980769231,"issues_closed_count":8,"pull_requests_closed_count":52,"pull_request_authors_count":20,"issue_authors_count":9,"avg_comments_per_issue":1.6666666666666667,"avg_comments_per_pull_request":0.3275862068965517,"merged_pull_requests_count":43,"bot_issues_count":0,"bot_pull_requests_count":27,"past_year_issues_count":0,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1554221.4347826086,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.4583333333333333,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":17,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/issues","maintainers":[{"login":"jefferai","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jefferai"},{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"},{"login":"KaushikiAnand","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/KaushikiAnand"},{"login":"bflad","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bflad"},{"login":"jbardin","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jbardin"},{"login":"calvn","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/calvn"}],"active_maintainers":[{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-github-hashicorp-go-cleanhttp/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-github-hashicorp-go-cleanhttp/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-github-hashicorp-go-cleanhttp/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-github-hashicorp-go-cleanhttp/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-github-hashicorp-go-cleanhttp/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-github-hashicorp-go-cleanhttp/codemeta","maintainers":[],"registry":{"name":"debian-10","url":"https://packages.debian.org/buster","ecosystem":"debian","default":false,"packages_count":28836,"maintainers_count":0,"namespaces_count":3,"keywords_count":903,"github":"debian","metadata":{"codename":"buster","mirror":"http://archive.debian.org/debian","funded_packages_count":606},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:50.156Z","updated_at":"2026-08-24T05:03:25.597Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/namespaces"}},{"id":13438501,"name":"golang-github-hashicorp-go-cleanhttp","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/hashicorp/go-cleanhttp","licenses":"mpl-2.0","normalized_licenses":[],"repository_url":"https://github.com/hashicorp/go-cleanhttp","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-08T01:34:20.906Z","latest_release_published_at":"2026-02-08T01:34:20.906Z","latest_release_number":"0.5.1-1","last_synced_at":"2026-03-08T02:57:43.939Z","created_at":"2026-02-08T01:34:20.573Z","updated_at":"2026-08-09T12:04:34.600Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-hashicorp-go-cleanhttp","install_command":"apt-get install golang-github-hashicorp-go-cleanhttp","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"extra","binary":"golang-github-hashicorp-go-cleanhttp-dev","standards_version":"4.4.1","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper (\u003e= 12~), dh-golang, golang-any","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":37951376,"uuid":"44763892","full_name":"hashicorp/go-cleanhttp","owner":"hashicorp","description":null,"archived":false,"fork":false,"pushed_at":"2026-07-23T08:40:27.000Z","size":78,"stargazers_count":444,"open_issues_count":2,"forks_count":38,"subscribers_count":12,"default_branch":"master","last_synced_at":"2026-08-09T04:25:13.458Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://godoc.org/github.com/hashicorp/go-cleanhttp","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hashicorp.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-10-22T18:07:48.000Z","updated_at":"2026-08-07T06:21:35.000Z","dependencies_parsed_at":"2026-03-18T05:01:04.483Z","dependency_job_id":null,"html_url":"https://github.com/hashicorp/go-cleanhttp","commit_stats":{"total_commits":22,"total_committers":9,"mean_commits":"2.4444444444444446","dds":"0.40909090909090906","last_synced_commit":"ff862fda8e09aad1244501dcf5038fdc7788fed2"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hashicorp/go-cleanhttp","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hashicorp","download_url":"https://codeload.github.com/hashicorp/go-cleanhttp/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/sbom","scorecard":{"id":457021,"data":{"date":"2025-08-11","repo":{"name":"github.com/hashicorp/go-cleanhttp","commit":"d15521f81f271a843c7c303030f00254b9053486"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.3,"checks":[{"name":"Code-Review","score":5,"reason":"Found 8/14 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/build-test.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":6,"reason":"8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:   3 out of   3 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Mozilla Public License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'master'","Info: 'force pushes' disabled on branch 'master'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'master'","Info: 'stale review dismissal' is required to merge on branch 'master'","Warn: required approving review count is 1 on branch 'master'","Info: codeowner review is required on branch 'master'","Info: 'last push approval' is required to merge on branch 'master'","Warn: no status checks found to merge onto branch 'master'","Info: PRs are required in order to make changes on branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hashicorp/.github/SECURITY.md:1","Info: Found linked content: github.com/hashicorp/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hashicorp/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hashicorp/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T09:58:56.362Z","repository_id":37951376,"created_at":"2025-08-19T09:58:56.363Z","updated_at":"2025-08-19T09:58:56.363Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36434780,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-09T12:04:34.600Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-hashicorp-go-cleanhttp?arch=source\u0026distro=ubuntu-20.04\u0026repository_url=https://launchpad.net/ubuntu/focal","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-hashicorp-go-cleanhttp","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-hashicorp-go-cleanhttp","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-hashicorp-go-cleanhttp/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-07-24T20:00:44.973Z","issues_count":9,"pull_requests_count":58,"avg_time_to_close_issue":25100894.75,"avg_time_to_close_pull_request":3478549.980769231,"issues_closed_count":8,"pull_requests_closed_count":52,"pull_request_authors_count":20,"issue_authors_count":9,"avg_comments_per_issue":1.6666666666666667,"avg_comments_per_pull_request":0.3275862068965517,"merged_pull_requests_count":43,"bot_issues_count":0,"bot_pull_requests_count":27,"past_year_issues_count":0,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1554221.4347826086,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.4583333333333333,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":17,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/issues","maintainers":[{"login":"jefferai","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jefferai"},{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"},{"login":"KaushikiAnand","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/KaushikiAnand"},{"login":"bflad","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bflad"},{"login":"jbardin","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jbardin"},{"login":"calvn","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/calvn"}],"active_maintainers":[{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-github-hashicorp-go-cleanhttp/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-github-hashicorp-go-cleanhttp/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-github-hashicorp-go-cleanhttp/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-github-hashicorp-go-cleanhttp/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-github-hashicorp-go-cleanhttp/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-github-hashicorp-go-cleanhttp/codemeta","maintainers":[],"registry":{"name":"ubuntu-20.04","url":"https://launchpad.net/ubuntu/focal","ecosystem":"ubuntu","default":false,"packages_count":30789,"maintainers_count":0,"namespaces_count":4,"keywords_count":1429,"github":"ubuntu","metadata":{"codename":"focal","funded_packages_count":754},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:47.233Z","updated_at":"2026-08-24T05:06:13.646Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/namespaces"}},{"id":13963982,"name":"go-github-com-hashicorp-go-cleanhttp","ecosystem":"guix","description":"Functions for accessing clean Go @code{http.Client} values","homepage":"https://github.com/hashicorp/go-cleanhttp","licenses":"mpl2.0","normalized_licenses":["MPL-2.0"],"repository_url":"https://github.com/hashicorp/go-cleanhttp","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-03-02T23:01:19.321Z","latest_release_published_at":"2026-03-02T23:01:19.321Z","latest_release_number":"0.5.2","last_synced_at":"2026-04-07T02:02:17.007Z","created_at":"2026-03-02T23:01:19.100Z","updated_at":"2026-08-09T12:04:34.605Z","registry_url":"https://packages.guix.gnu.org/packages/go-github-com-hashicorp-go-cleanhttp/0.5.2/","install_command":"guix install go-github-com-hashicorp-go-cleanhttp","documentation_url":"https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/golang-web.scm#n7295","metadata":{"location":"gnu/packages/golang-web.scm:7295","variable_name":"go-github-com-hashicorp-go-cleanhttp"},"repo_metadata":{"id":37951376,"uuid":"44763892","full_name":"hashicorp/go-cleanhttp","owner":"hashicorp","description":null,"archived":false,"fork":false,"pushed_at":"2026-07-23T08:40:27.000Z","size":78,"stargazers_count":444,"open_issues_count":2,"forks_count":38,"subscribers_count":12,"default_branch":"master","last_synced_at":"2026-08-09T04:25:13.458Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://godoc.org/github.com/hashicorp/go-cleanhttp","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hashicorp.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-10-22T18:07:48.000Z","updated_at":"2026-08-07T06:21:35.000Z","dependencies_parsed_at":"2026-03-18T05:01:04.483Z","dependency_job_id":null,"html_url":"https://github.com/hashicorp/go-cleanhttp","commit_stats":{"total_commits":22,"total_committers":9,"mean_commits":"2.4444444444444446","dds":"0.40909090909090906","last_synced_commit":"ff862fda8e09aad1244501dcf5038fdc7788fed2"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hashicorp/go-cleanhttp","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hashicorp","download_url":"https://codeload.github.com/hashicorp/go-cleanhttp/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/sbom","scorecard":{"id":457021,"data":{"date":"2025-08-11","repo":{"name":"github.com/hashicorp/go-cleanhttp","commit":"d15521f81f271a843c7c303030f00254b9053486"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.3,"checks":[{"name":"Code-Review","score":5,"reason":"Found 8/14 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/build-test.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":6,"reason":"8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:   3 out of   3 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Mozilla Public License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'master'","Info: 'force pushes' disabled on branch 'master'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'master'","Info: 'stale review dismissal' is required to merge on branch 'master'","Warn: required approving review count is 1 on branch 'master'","Info: codeowner review is required on branch 'master'","Info: 'last push approval' is required to merge on branch 'master'","Warn: no status checks found to merge onto branch 'master'","Info: PRs are required in order to make changes on branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hashicorp/.github/SECURITY.md:1","Info: Found linked content: github.com/hashicorp/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hashicorp/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hashicorp/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T09:58:56.362Z","repository_id":37951376,"created_at":"2025-08-19T09:58:56.363Z","updated_at":"2025-08-19T09:58:56.363Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36434780,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-09T12:04:34.605Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:guix/go-github-com-hashicorp-go-cleanhttp","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/guix/go-github-com-hashicorp-go-cleanhttp","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/guix/go-github-com-hashicorp-go-cleanhttp","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/guix/go-github-com-hashicorp-go-cleanhttp/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-07-24T20:00:44.973Z","issues_count":9,"pull_requests_count":58,"avg_time_to_close_issue":25100894.75,"avg_time_to_close_pull_request":3478549.980769231,"issues_closed_count":8,"pull_requests_closed_count":52,"pull_request_authors_count":20,"issue_authors_count":9,"avg_comments_per_issue":1.6666666666666667,"avg_comments_per_pull_request":0.3275862068965517,"merged_pull_requests_count":43,"bot_issues_count":0,"bot_pull_requests_count":27,"past_year_issues_count":0,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1554221.4347826086,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.4583333333333333,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":17,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/issues","maintainers":[{"login":"jefferai","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jefferai"},{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"},{"login":"KaushikiAnand","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/KaushikiAnand"},{"login":"bflad","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bflad"},{"login":"jbardin","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jbardin"},{"login":"calvn","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/calvn"}],"active_maintainers":[{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-hashicorp-go-cleanhttp/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-hashicorp-go-cleanhttp/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-hashicorp-go-cleanhttp/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-hashicorp-go-cleanhttp/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-hashicorp-go-cleanhttp/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-hashicorp-go-cleanhttp/codemeta","maintainers":[],"registry":{"name":"guix","url":"https://guix.gnu.org","ecosystem":"guix","default":true,"packages_count":32336,"maintainers_count":0,"namespaces_count":0,"keywords_count":1654,"github":"guix-mirror","metadata":{"funded_packages_count":1223},"icon_url":"https://github.com/guix-mirror.png","created_at":"2026-03-02T16:23:46.981Z","updated_at":"2026-08-24T05:05:20.073Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/guix/namespaces"}},{"id":13504874,"name":"golang-github-hashicorp-go-cleanhttp","ecosystem":"debian","description":null,"homepage":"https://github.com/hashicorp/go-cleanhttp","licenses":"mpl-2.0","normalized_licenses":[],"repository_url":"https://github.com/hashicorp/go-cleanhttp","keywords_array":["golang"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-10T18:57:52.512Z","latest_release_published_at":"2026-02-10T18:57:52.512Z","latest_release_number":"0.5.2-1","last_synced_at":"2026-03-14T15:33:47.843Z","created_at":"2026-02-10T18:57:52.309Z","updated_at":"2026-08-09T12:04:34.609Z","registry_url":"https://tracker.debian.org/pkg/golang-github-hashicorp-go-cleanhttp","install_command":"apt-get install golang-github-hashicorp-go-cleanhttp","documentation_url":"https://packages.debian.org/bullseye/golang-github-hashicorp-go-cleanhttp","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"golang-github-hashicorp-go-cleanhttp-dev","standards_version":"4.5.1","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":37951376,"uuid":"44763892","full_name":"hashicorp/go-cleanhttp","owner":"hashicorp","description":null,"archived":false,"fork":false,"pushed_at":"2026-07-23T08:40:27.000Z","size":78,"stargazers_count":444,"open_issues_count":2,"forks_count":38,"subscribers_count":12,"default_branch":"master","last_synced_at":"2026-08-09T04:25:13.458Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://godoc.org/github.com/hashicorp/go-cleanhttp","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hashicorp.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-10-22T18:07:48.000Z","updated_at":"2026-08-07T06:21:35.000Z","dependencies_parsed_at":"2026-03-18T05:01:04.483Z","dependency_job_id":null,"html_url":"https://github.com/hashicorp/go-cleanhttp","commit_stats":{"total_commits":22,"total_committers":9,"mean_commits":"2.4444444444444446","dds":"0.40909090909090906","last_synced_commit":"ff862fda8e09aad1244501dcf5038fdc7788fed2"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hashicorp/go-cleanhttp","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hashicorp","download_url":"https://codeload.github.com/hashicorp/go-cleanhttp/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/sbom","scorecard":{"id":457021,"data":{"date":"2025-08-11","repo":{"name":"github.com/hashicorp/go-cleanhttp","commit":"d15521f81f271a843c7c303030f00254b9053486"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.3,"checks":[{"name":"Code-Review","score":5,"reason":"Found 8/14 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/build-test.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":6,"reason":"8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:   3 out of   3 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Mozilla Public License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'master'","Info: 'force pushes' disabled on branch 'master'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'master'","Info: 'stale review dismissal' is required to merge on branch 'master'","Warn: required approving review count is 1 on branch 'master'","Info: codeowner review is required on branch 'master'","Info: 'last push approval' is required to merge on branch 'master'","Warn: no status checks found to merge onto branch 'master'","Info: PRs are required in order to make changes on branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hashicorp/.github/SECURITY.md:1","Info: Found linked content: github.com/hashicorp/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hashicorp/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hashicorp/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T09:58:56.362Z","repository_id":37951376,"created_at":"2025-08-19T09:58:56.363Z","updated_at":"2025-08-19T09:58:56.363Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36434780,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-09T12:04:34.609Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/golang-github-hashicorp-go-cleanhttp?arch=source\u0026distro=debian-11\u0026repository_url=https://packages.debian.org/bullseye","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/golang-github-hashicorp-go-cleanhttp","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/golang-github-hashicorp-go-cleanhttp","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/golang-github-hashicorp-go-cleanhttp/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-07-24T20:00:44.973Z","issues_count":9,"pull_requests_count":58,"avg_time_to_close_issue":25100894.75,"avg_time_to_close_pull_request":3478549.980769231,"issues_closed_count":8,"pull_requests_closed_count":52,"pull_request_authors_count":20,"issue_authors_count":9,"avg_comments_per_issue":1.6666666666666667,"avg_comments_per_pull_request":0.3275862068965517,"merged_pull_requests_count":43,"bot_issues_count":0,"bot_pull_requests_count":27,"past_year_issues_count":0,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1554221.4347826086,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.4583333333333333,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":17,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/issues","maintainers":[{"login":"jefferai","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jefferai"},{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"},{"login":"KaushikiAnand","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/KaushikiAnand"},{"login":"bflad","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bflad"},{"login":"jbardin","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jbardin"},{"login":"calvn","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/calvn"}],"active_maintainers":[{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-github-hashicorp-go-cleanhttp/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-github-hashicorp-go-cleanhttp/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-github-hashicorp-go-cleanhttp/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-github-hashicorp-go-cleanhttp/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-github-hashicorp-go-cleanhttp/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-github-hashicorp-go-cleanhttp/codemeta","maintainers":[],"registry":{"name":"debian-11","url":"https://packages.debian.org/bullseye","ecosystem":"debian","default":false,"packages_count":31268,"maintainers_count":0,"namespaces_count":3,"keywords_count":759,"github":"debian","metadata":{"codename":"bullseye","funded_packages_count":800},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:49.702Z","updated_at":"2026-08-24T05:06:16.474Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/namespaces"}},{"id":13545743,"name":"golang-github-hashicorp-go-cleanhttp","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/hashicorp/go-cleanhttp","licenses":"mpl-2.0","normalized_licenses":[],"repository_url":"https://github.com/hashicorp/go-cleanhttp","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-11T02:03:29.391Z","latest_release_published_at":"2026-02-11T02:03:29.391Z","latest_release_number":"0.5.2-1","last_synced_at":"2026-03-11T09:04:09.124Z","created_at":"2026-02-11T02:03:29.222Z","updated_at":"2026-08-09T12:04:34.622Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-hashicorp-go-cleanhttp","install_command":"apt-get install golang-github-hashicorp-go-cleanhttp","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"extra","binary":"golang-github-hashicorp-go-cleanhttp-dev","standards_version":"4.5.1","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":37951376,"uuid":"44763892","full_name":"hashicorp/go-cleanhttp","owner":"hashicorp","description":null,"archived":false,"fork":false,"pushed_at":"2026-07-23T08:40:27.000Z","size":78,"stargazers_count":444,"open_issues_count":2,"forks_count":38,"subscribers_count":12,"default_branch":"master","last_synced_at":"2026-08-09T04:25:13.458Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://godoc.org/github.com/hashicorp/go-cleanhttp","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hashicorp.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-10-22T18:07:48.000Z","updated_at":"2026-08-07T06:21:35.000Z","dependencies_parsed_at":"2026-03-18T05:01:04.483Z","dependency_job_id":null,"html_url":"https://github.com/hashicorp/go-cleanhttp","commit_stats":{"total_commits":22,"total_committers":9,"mean_commits":"2.4444444444444446","dds":"0.40909090909090906","last_synced_commit":"ff862fda8e09aad1244501dcf5038fdc7788fed2"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hashicorp/go-cleanhttp","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hashicorp","download_url":"https://codeload.github.com/hashicorp/go-cleanhttp/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/sbom","scorecard":{"id":457021,"data":{"date":"2025-08-11","repo":{"name":"github.com/hashicorp/go-cleanhttp","commit":"d15521f81f271a843c7c303030f00254b9053486"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.3,"checks":[{"name":"Code-Review","score":5,"reason":"Found 8/14 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/build-test.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":6,"reason":"8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:   3 out of   3 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Mozilla Public License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'master'","Info: 'force pushes' disabled on branch 'master'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'master'","Info: 'stale review dismissal' is required to merge on branch 'master'","Warn: required approving review count is 1 on branch 'master'","Info: codeowner review is required on branch 'master'","Info: 'last push approval' is required to merge on branch 'master'","Warn: no status checks found to merge onto branch 'master'","Info: PRs are required in order to make changes on branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hashicorp/.github/SECURITY.md:1","Info: Found linked content: github.com/hashicorp/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hashicorp/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hashicorp/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T09:58:56.362Z","repository_id":37951376,"created_at":"2025-08-19T09:58:56.363Z","updated_at":"2025-08-19T09:58:56.363Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36434780,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-09T12:04:34.622Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-hashicorp-go-cleanhttp?arch=source\u0026distro=ubuntu-23.04\u0026repository_url=https://launchpad.net/ubuntu/lunar","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-hashicorp-go-cleanhttp","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-hashicorp-go-cleanhttp","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-hashicorp-go-cleanhttp/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-07-24T20:00:44.973Z","issues_count":9,"pull_requests_count":58,"avg_time_to_close_issue":25100894.75,"avg_time_to_close_pull_request":3478549.980769231,"issues_closed_count":8,"pull_requests_closed_count":52,"pull_request_authors_count":20,"issue_authors_count":9,"avg_comments_per_issue":1.6666666666666667,"avg_comments_per_pull_request":0.3275862068965517,"merged_pull_requests_count":43,"bot_issues_count":0,"bot_pull_requests_count":27,"past_year_issues_count":0,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1554221.4347826086,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.4583333333333333,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":17,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/issues","maintainers":[{"login":"jefferai","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jefferai"},{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"},{"login":"KaushikiAnand","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/KaushikiAnand"},{"login":"bflad","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bflad"},{"login":"jbardin","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jbardin"},{"login":"calvn","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/calvn"}],"active_maintainers":[{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-hashicorp-go-cleanhttp/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-hashicorp-go-cleanhttp/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-hashicorp-go-cleanhttp/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-hashicorp-go-cleanhttp/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-hashicorp-go-cleanhttp/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-hashicorp-go-cleanhttp/codemeta","maintainers":[],"registry":{"name":"ubuntu-23.04","url":"https://launchpad.net/ubuntu/lunar","ecosystem":"ubuntu","default":false,"packages_count":36116,"maintainers_count":0,"namespaces_count":4,"keywords_count":999,"github":"ubuntu","metadata":{"codename":"lunar","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":1100},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:49.117Z","updated_at":"2026-08-24T05:06:12.490Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/namespaces"}},{"id":13475763,"name":"golang-github-hashicorp-go-cleanhttp","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/hashicorp/go-cleanhttp","licenses":"mpl-2.0","normalized_licenses":[],"repository_url":"https://github.com/hashicorp/go-cleanhttp","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-10T03:52:23.332Z","latest_release_published_at":"2026-02-10T03:52:23.332Z","latest_release_number":"0.5.2-1","last_synced_at":"2026-03-10T04:12:10.941Z","created_at":"2026-02-10T03:52:22.944Z","updated_at":"2026-08-09T12:04:34.672Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-hashicorp-go-cleanhttp","install_command":"apt-get install golang-github-hashicorp-go-cleanhttp","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"extra","binary":"golang-github-hashicorp-go-cleanhttp-dev","standards_version":"4.5.1","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":37951376,"uuid":"44763892","full_name":"hashicorp/go-cleanhttp","owner":"hashicorp","description":null,"archived":false,"fork":false,"pushed_at":"2026-07-23T08:40:27.000Z","size":78,"stargazers_count":444,"open_issues_count":2,"forks_count":38,"subscribers_count":12,"default_branch":"master","last_synced_at":"2026-08-09T04:25:13.458Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://godoc.org/github.com/hashicorp/go-cleanhttp","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hashicorp.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-10-22T18:07:48.000Z","updated_at":"2026-08-07T06:21:35.000Z","dependencies_parsed_at":"2026-03-18T05:01:04.483Z","dependency_job_id":null,"html_url":"https://github.com/hashicorp/go-cleanhttp","commit_stats":{"total_commits":22,"total_committers":9,"mean_commits":"2.4444444444444446","dds":"0.40909090909090906","last_synced_commit":"ff862fda8e09aad1244501dcf5038fdc7788fed2"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hashicorp/go-cleanhttp","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hashicorp","download_url":"https://codeload.github.com/hashicorp/go-cleanhttp/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/sbom","scorecard":{"id":457021,"data":{"date":"2025-08-11","repo":{"name":"github.com/hashicorp/go-cleanhttp","commit":"d15521f81f271a843c7c303030f00254b9053486"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.3,"checks":[{"name":"Code-Review","score":5,"reason":"Found 8/14 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/build-test.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":6,"reason":"8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:   3 out of   3 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Mozilla Public License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'master'","Info: 'force pushes' disabled on branch 'master'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'master'","Info: 'stale review dismissal' is required to merge on branch 'master'","Warn: required approving review count is 1 on branch 'master'","Info: codeowner review is required on branch 'master'","Info: 'last push approval' is required to merge on branch 'master'","Warn: no status checks found to merge onto branch 'master'","Info: PRs are required in order to make changes on branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hashicorp/.github/SECURITY.md:1","Info: Found linked content: github.com/hashicorp/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hashicorp/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hashicorp/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T09:58:56.362Z","repository_id":37951376,"created_at":"2025-08-19T09:58:56.363Z","updated_at":"2025-08-19T09:58:56.363Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36434780,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-09T12:04:34.672Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-hashicorp-go-cleanhttp?arch=source\u0026distro=ubuntu-23.10\u0026repository_url=https://launchpad.net/ubuntu/mantic","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-hashicorp-go-cleanhttp","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-hashicorp-go-cleanhttp","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-hashicorp-go-cleanhttp/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-07-24T20:00:44.973Z","issues_count":9,"pull_requests_count":58,"avg_time_to_close_issue":25100894.75,"avg_time_to_close_pull_request":3478549.980769231,"issues_closed_count":8,"pull_requests_closed_count":52,"pull_request_authors_count":20,"issue_authors_count":9,"avg_comments_per_issue":1.6666666666666667,"avg_comments_per_pull_request":0.3275862068965517,"merged_pull_requests_count":43,"bot_issues_count":0,"bot_pull_requests_count":27,"past_year_issues_count":0,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1554221.4347826086,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.4583333333333333,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":17,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/issues","maintainers":[{"login":"jefferai","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jefferai"},{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"},{"login":"KaushikiAnand","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/KaushikiAnand"},{"login":"bflad","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bflad"},{"login":"jbardin","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jbardin"},{"login":"calvn","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/calvn"}],"active_maintainers":[{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-hashicorp-go-cleanhttp/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-hashicorp-go-cleanhttp/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-hashicorp-go-cleanhttp/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-hashicorp-go-cleanhttp/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-hashicorp-go-cleanhttp/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-hashicorp-go-cleanhttp/codemeta","maintainers":[],"registry":{"name":"ubuntu-23.10","url":"https://launchpad.net/ubuntu/mantic","ecosystem":"ubuntu","default":false,"packages_count":36642,"maintainers_count":0,"namespaces_count":4,"keywords_count":2213,"github":"ubuntu","metadata":{"codename":"mantic","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":1334},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.636Z","updated_at":"2026-08-24T05:06:10.948Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/namespaces"}},{"id":13417643,"name":"golang-github-hashicorp-go-cleanhttp","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/hashicorp/go-cleanhttp","licenses":"mpl-2.0","normalized_licenses":[],"repository_url":"https://github.com/hashicorp/go-cleanhttp","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-07T03:22:51.168Z","latest_release_published_at":"2026-02-07T03:22:51.168Z","latest_release_number":"0.5.2-1","last_synced_at":"2026-03-07T03:36:43.975Z","created_at":"2026-02-07T03:22:50.888Z","updated_at":"2026-08-09T12:04:34.666Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-hashicorp-go-cleanhttp","install_command":"apt-get install golang-github-hashicorp-go-cleanhttp","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"extra","binary":"golang-github-hashicorp-go-cleanhttp-dev","standards_version":"4.5.1","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":37951376,"uuid":"44763892","full_name":"hashicorp/go-cleanhttp","owner":"hashicorp","description":null,"archived":false,"fork":false,"pushed_at":"2026-07-23T08:40:27.000Z","size":78,"stargazers_count":444,"open_issues_count":2,"forks_count":38,"subscribers_count":12,"default_branch":"master","last_synced_at":"2026-08-09T04:25:13.458Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://godoc.org/github.com/hashicorp/go-cleanhttp","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hashicorp.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-10-22T18:07:48.000Z","updated_at":"2026-08-07T06:21:35.000Z","dependencies_parsed_at":"2026-03-18T05:01:04.483Z","dependency_job_id":null,"html_url":"https://github.com/hashicorp/go-cleanhttp","commit_stats":{"total_commits":22,"total_committers":9,"mean_commits":"2.4444444444444446","dds":"0.40909090909090906","last_synced_commit":"ff862fda8e09aad1244501dcf5038fdc7788fed2"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hashicorp/go-cleanhttp","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hashicorp","download_url":"https://codeload.github.com/hashicorp/go-cleanhttp/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/sbom","scorecard":{"id":457021,"data":{"date":"2025-08-11","repo":{"name":"github.com/hashicorp/go-cleanhttp","commit":"d15521f81f271a843c7c303030f00254b9053486"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.3,"checks":[{"name":"Code-Review","score":5,"reason":"Found 8/14 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/build-test.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":6,"reason":"8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:   3 out of   3 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Mozilla Public License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'master'","Info: 'force pushes' disabled on branch 'master'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'master'","Info: 'stale review dismissal' is required to merge on branch 'master'","Warn: required approving review count is 1 on branch 'master'","Info: codeowner review is required on branch 'master'","Info: 'last push approval' is required to merge on branch 'master'","Warn: no status checks found to merge onto branch 'master'","Info: PRs are required in order to make changes on branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hashicorp/.github/SECURITY.md:1","Info: Found linked content: github.com/hashicorp/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hashicorp/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hashicorp/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T09:58:56.362Z","repository_id":37951376,"created_at":"2025-08-19T09:58:56.363Z","updated_at":"2025-08-19T09:58:56.363Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36434780,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-09T12:04:34.665Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-hashicorp-go-cleanhttp?arch=source\u0026distro=ubuntu-22.04\u0026repository_url=https://launchpad.net/ubuntu/jammy","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-hashicorp-go-cleanhttp","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-hashicorp-go-cleanhttp","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-hashicorp-go-cleanhttp/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-07-24T20:00:44.973Z","issues_count":9,"pull_requests_count":58,"avg_time_to_close_issue":25100894.75,"avg_time_to_close_pull_request":3478549.980769231,"issues_closed_count":8,"pull_requests_closed_count":52,"pull_request_authors_count":20,"issue_authors_count":9,"avg_comments_per_issue":1.6666666666666667,"avg_comments_per_pull_request":0.3275862068965517,"merged_pull_requests_count":43,"bot_issues_count":0,"bot_pull_requests_count":27,"past_year_issues_count":0,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1554221.4347826086,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.4583333333333333,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":17,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/issues","maintainers":[{"login":"jefferai","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jefferai"},{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"},{"login":"KaushikiAnand","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/KaushikiAnand"},{"login":"bflad","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bflad"},{"login":"jbardin","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jbardin"},{"login":"calvn","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/calvn"}],"active_maintainers":[{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-hashicorp-go-cleanhttp/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-hashicorp-go-cleanhttp/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-hashicorp-go-cleanhttp/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-hashicorp-go-cleanhttp/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-hashicorp-go-cleanhttp/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-hashicorp-go-cleanhttp/codemeta","maintainers":[],"registry":{"name":"ubuntu-22.04","url":"https://launchpad.net/ubuntu/jammy","ecosystem":"ubuntu","default":false,"packages_count":34289,"maintainers_count":0,"namespaces_count":4,"keywords_count":1498,"github":"ubuntu","metadata":{"codename":"jammy","funded_packages_count":971},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:46.486Z","updated_at":"2026-08-24T05:06:06.213Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/namespaces"}},{"id":13684821,"name":"golang-github-hashicorp-go-cleanhttp","ecosystem":"debian","description":null,"homepage":"https://github.com/hashicorp/go-cleanhttp","licenses":"mpl-2.0","normalized_licenses":[],"repository_url":"https://github.com/hashicorp/go-cleanhttp","keywords_array":["golang"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T17:49:25.319Z","latest_release_published_at":"2026-02-12T17:49:25.319Z","latest_release_number":"0.5.2-1","last_synced_at":"2026-08-03T17:05:27.629Z","created_at":"2026-02-12T17:49:25.141Z","updated_at":"2026-08-09T12:04:34.670Z","registry_url":"https://tracker.debian.org/pkg/golang-github-hashicorp-go-cleanhttp","install_command":"apt-get install golang-github-hashicorp-go-cleanhttp","documentation_url":"https://packages.debian.org/bookworm/golang-github-hashicorp-go-cleanhttp","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"golang-github-hashicorp-go-cleanhttp-dev","standards_version":"4.5.1","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":37951376,"uuid":"44763892","full_name":"hashicorp/go-cleanhttp","owner":"hashicorp","description":null,"archived":false,"fork":false,"pushed_at":"2026-07-23T08:40:27.000Z","size":78,"stargazers_count":444,"open_issues_count":2,"forks_count":38,"subscribers_count":12,"default_branch":"master","last_synced_at":"2026-08-09T04:25:13.458Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://godoc.org/github.com/hashicorp/go-cleanhttp","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hashicorp.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-10-22T18:07:48.000Z","updated_at":"2026-08-07T06:21:35.000Z","dependencies_parsed_at":"2026-03-18T05:01:04.483Z","dependency_job_id":null,"html_url":"https://github.com/hashicorp/go-cleanhttp","commit_stats":{"total_commits":22,"total_committers":9,"mean_commits":"2.4444444444444446","dds":"0.40909090909090906","last_synced_commit":"ff862fda8e09aad1244501dcf5038fdc7788fed2"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hashicorp/go-cleanhttp","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hashicorp","download_url":"https://codeload.github.com/hashicorp/go-cleanhttp/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/sbom","scorecard":{"id":457021,"data":{"date":"2025-08-11","repo":{"name":"github.com/hashicorp/go-cleanhttp","commit":"d15521f81f271a843c7c303030f00254b9053486"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.3,"checks":[{"name":"Code-Review","score":5,"reason":"Found 8/14 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/build-test.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":6,"reason":"8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:   3 out of   3 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Mozilla Public License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'master'","Info: 'force pushes' disabled on branch 'master'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'master'","Info: 'stale review dismissal' is required to merge on branch 'master'","Warn: required approving review count is 1 on branch 'master'","Info: codeowner review is required on branch 'master'","Info: 'last push approval' is required to merge on branch 'master'","Warn: no status checks found to merge onto branch 'master'","Info: PRs are required in order to make changes on branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hashicorp/.github/SECURITY.md:1","Info: Found linked content: github.com/hashicorp/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hashicorp/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hashicorp/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T09:58:56.362Z","repository_id":37951376,"created_at":"2025-08-19T09:58:56.363Z","updated_at":"2025-08-19T09:58:56.363Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36434780,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-09T12:04:34.669Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/golang-github-hashicorp-go-cleanhttp?arch=source\u0026distro=debian-12","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/golang-github-hashicorp-go-cleanhttp","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/golang-github-hashicorp-go-cleanhttp","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/golang-github-hashicorp-go-cleanhttp/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-07-24T20:00:44.973Z","issues_count":9,"pull_requests_count":58,"avg_time_to_close_issue":25100894.75,"avg_time_to_close_pull_request":3478549.980769231,"issues_closed_count":8,"pull_requests_closed_count":52,"pull_request_authors_count":20,"issue_authors_count":9,"avg_comments_per_issue":1.6666666666666667,"avg_comments_per_pull_request":0.3275862068965517,"merged_pull_requests_count":43,"bot_issues_count":0,"bot_pull_requests_count":27,"past_year_issues_count":0,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1554221.4347826086,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.4583333333333333,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":17,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/issues","maintainers":[{"login":"jefferai","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jefferai"},{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"},{"login":"KaushikiAnand","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/KaushikiAnand"},{"login":"bflad","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bflad"},{"login":"jbardin","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jbardin"},{"login":"calvn","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/calvn"}],"active_maintainers":[{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-hashicorp-go-cleanhttp/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-hashicorp-go-cleanhttp/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-hashicorp-go-cleanhttp/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-hashicorp-go-cleanhttp/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-hashicorp-go-cleanhttp/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-hashicorp-go-cleanhttp/codemeta","maintainers":[],"registry":{"name":"debian-12","url":"https://packages.debian.org/bookworm","ecosystem":"debian","default":true,"packages_count":34734,"maintainers_count":0,"namespaces_count":4,"keywords_count":2650,"github":"debian","metadata":{"codename":"bookworm","funded_packages_count":1231},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:49.459Z","updated_at":"2026-08-24T05:06:15.317Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/namespaces"}},{"id":13645759,"name":"golang-github-hashicorp-go-cleanhttp","ecosystem":"debian","description":null,"homepage":"https://github.com/hashicorp/go-cleanhttp","licenses":"mpl-2.0","normalized_licenses":[],"repository_url":"https://github.com/hashicorp/go-cleanhttp","keywords_array":["golang"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T03:17:49.941Z","latest_release_published_at":"2026-02-12T03:17:49.941Z","latest_release_number":"0.5.2-1","last_synced_at":"2026-07-24T20:48:41.308Z","created_at":"2026-02-12T03:17:49.770Z","updated_at":"2026-08-09T12:04:34.698Z","registry_url":"https://tracker.debian.org/pkg/golang-github-hashicorp-go-cleanhttp","install_command":"apt-get install golang-github-hashicorp-go-cleanhttp","documentation_url":"https://packages.debian.org/trixie/golang-github-hashicorp-go-cleanhttp","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"golang-github-hashicorp-go-cleanhttp-dev","standards_version":"4.5.1","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":37951376,"uuid":"44763892","full_name":"hashicorp/go-cleanhttp","owner":"hashicorp","description":null,"archived":false,"fork":false,"pushed_at":"2026-07-23T08:40:27.000Z","size":78,"stargazers_count":444,"open_issues_count":2,"forks_count":38,"subscribers_count":12,"default_branch":"master","last_synced_at":"2026-08-09T04:25:13.458Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://godoc.org/github.com/hashicorp/go-cleanhttp","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mpl-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hashicorp.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-10-22T18:07:48.000Z","updated_at":"2026-08-07T06:21:35.000Z","dependencies_parsed_at":"2026-03-18T05:01:04.483Z","dependency_job_id":null,"html_url":"https://github.com/hashicorp/go-cleanhttp","commit_stats":{"total_commits":22,"total_committers":9,"mean_commits":"2.4444444444444446","dds":"0.40909090909090906","last_synced_commit":"ff862fda8e09aad1244501dcf5038fdc7788fed2"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hashicorp/go-cleanhttp","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hashicorp","download_url":"https://codeload.github.com/hashicorp/go-cleanhttp/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/sbom","scorecard":{"id":457021,"data":{"date":"2025-08-11","repo":{"name":"github.com/hashicorp/go-cleanhttp","commit":"d15521f81f271a843c7c303030f00254b9053486"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.3,"checks":[{"name":"Code-Review","score":5,"reason":"Found 8/14 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/build-test.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Maintained","score":6,"reason":"8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:   3 out of   3 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Mozilla Public License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":6,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'master'","Info: 'force pushes' disabled on branch 'master'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'master'","Info: 'stale review dismissal' is required to merge on branch 'master'","Warn: required approving review count is 1 on branch 'master'","Info: codeowner review is required on branch 'master'","Info: 'last push approval' is required to merge on branch 'master'","Warn: no status checks found to merge onto branch 'master'","Info: PRs are required in order to make changes on branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: github.com/hashicorp/.github/SECURITY.md:1","Info: Found linked content: github.com/hashicorp/.github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/hashicorp/.github/SECURITY.md:1","Info: Found text in security policy: github.com/hashicorp/.github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 26 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T09:58:56.362Z","repository_id":37951376,"created_at":"2025-08-19T09:58:56.363Z","updated_at":"2025-08-19T09:58:56.363Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36434780,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-09T12:04:34.698Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/golang-github-hashicorp-go-cleanhttp?arch=source\u0026distro=debian-13\u0026repository_url=https://packages.debian.org/trixie","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/golang-github-hashicorp-go-cleanhttp","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/golang-github-hashicorp-go-cleanhttp","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/golang-github-hashicorp-go-cleanhttp/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-07-24T20:00:44.973Z","issues_count":9,"pull_requests_count":58,"avg_time_to_close_issue":25100894.75,"avg_time_to_close_pull_request":3478549.980769231,"issues_closed_count":8,"pull_requests_closed_count":52,"pull_request_authors_count":20,"issue_authors_count":9,"avg_comments_per_issue":1.6666666666666667,"avg_comments_per_pull_request":0.3275862068965517,"merged_pull_requests_count":43,"bot_issues_count":0,"bot_pull_requests_count":27,"past_year_issues_count":0,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1554221.4347826086,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.4583333333333333,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":17,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/issues","maintainers":[{"login":"jefferai","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jefferai"},{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"},{"login":"KaushikiAnand","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/KaushikiAnand"},{"login":"bflad","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bflad"},{"login":"jbardin","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jbardin"},{"login":"calvn","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/calvn"}],"active_maintainers":[{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-hashicorp-go-cleanhttp/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-hashicorp-go-cleanhttp/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-hashicorp-go-cleanhttp/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-hashicorp-go-cleanhttp/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-hashicorp-go-cleanhttp/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-hashicorp-go-cleanhttp/codemeta","maintainers":[],"registry":{"name":"debian-13","url":"https://packages.debian.org/trixie","ecosystem":"debian","default":false,"packages_count":38024,"maintainers_count":0,"namespaces_count":4,"keywords_count":1985,"github":"debian","metadata":{"codename":"trixie","funded_packages_count":1681},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:50.448Z","updated_at":"2026-08-24T05:05:13.674Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/namespaces"}}],"commits":{"id":1690230,"full_name":"hashicorp/go-cleanhttp","default_branch":"master","total_commits":55,"total_committers":15,"total_bot_commits":22,"total_bot_committers":4,"mean_commits":3.6666666666666665,"dds":0.6909090909090909,"past_year_total_commits":23,"past_year_total_committers":5,"past_year_total_bot_commits":16,"past_year_total_bot_committers":2,"past_year_mean_commits":4.6,"past_year_dds":0.34782608695652173,"last_synced_at":"2026-08-19T09:32:42.135Z","last_synced_commit":"b8a14b6bfc68b4ced977e4f9e64948a4133d8fcf","created_at":"2024-09-04T21:21:16.575Z","updated_at":"2026-08-19T09:32:41.620Z","committers":[{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":17},{"name":"Jeff Mitchell","email":"jeffrey.mitchell@gmail.com","login":"jefferai","count":13},{"name":"KaushikiAnand","email":"kaushiki.anand@hashicorp.com","login":"KaushikiAnand","count":6},{"name":"James Rasell","email":"jrasell","login":"jrasell","count":4},{"name":"hashicorp-copywrite[bot]","email":"110428419+hashicorp-copywrite[bot]","login":"hashicorp-copywrite[bot]","count":3},{"name":"creatorHead","email":"aatish.azad@hashicorp.com","login":"CreatorHead","count":2},{"name":"Calvin Leung Huang","email":"cleung2010@gmail.com","login":"calvn","count":2},{"name":"vishalnayak","email":"vishalnayakv@gmail.com","login":"vishalnayak","count":1},{"name":"sonamtenzin","email":"sonam.tenzin@hashicorp.com","login":"sonamtenzin6","count":1},{"name":"compliance-pr-automation-bot[bot]","email":"216934098+compliance-pr-automation-bot[bot]","login":"compliance-pr-automation-bot[bot]","count":1},{"name":"UKEME BASSEY","email":"ukeme.bassey@hashicorp.com","login":"Uk1288","count":1},{"name":"Mukesh Choudhari","email":"mukeshjchoudhari@gmail.com","login":"mukeshjc","count":1},{"name":"James Bardin","email":"j.bardin@gmail.com","login":"jbardin","count":1},{"name":"Brian Flad","email":"bflad417@gmail.com","login":"bflad","count":1},{"name":"hashicorp-copywrite[bot]","email":"noreply@hashicorp.com","login":null,"count":1}],"past_year_committers":[{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":15},{"name":"James Rasell","email":"jrasell","login":"jrasell","count":4},{"name":"creatorHead","email":"aatish.azad@hashicorp.com","login":"CreatorHead","count":2},{"name":"sonamtenzin","email":"sonam.tenzin@hashicorp.com","login":"sonamtenzin6","count":1},{"name":"hashicorp-copywrite[bot]","email":"110428419+hashicorp-copywrite[bot]","login":"hashicorp-copywrite[bot]","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-08-20T00:00:10.776Z","repositories_count":6748731,"commits_count":977355002,"contributors_count":41214648,"owners_count":1358222,"committers_count":3351898,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"hashicorp/go-cleanhttp","html_url":"https://github.com/hashicorp/go-cleanhttp","last_synced_at":"2026-08-23T11:31:50.680Z","status":null,"issues_count":9,"pull_requests_count":58,"avg_time_to_close_issue":25100894.75,"avg_time_to_close_pull_request":3478549.980769231,"issues_closed_count":8,"pull_requests_closed_count":52,"pull_request_authors_count":20,"issue_authors_count":9,"avg_comments_per_issue":1.6666666666666667,"avg_comments_per_pull_request":0.3275862068965517,"merged_pull_requests_count":43,"bot_issues_count":0,"bot_pull_requests_count":27,"past_year_issues_count":0,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1554221.4347826086,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":0.4583333333333333,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":16,"past_year_merged_pull_requests_count":17,"created_at":"2023-05-16T03:48:13.470Z","updated_at":"2026-08-23T11:31:50.680Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hashicorp%2Fgo-cleanhttp/issues","issue_labels_count":{"table":{}},"pull_request_labels_count":{"table":{"github_actions":20,"dependencies":20,"automated":5,"legal":5}},"issue_author_associations_count":{"table":{"NONE":9}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":32,"NONE":13,"MEMBER":11,"COLLABORATOR":2}},"issue_authors":{"table":{"glasser":1,"kodabb":1,"davidmateos":1,"bhourigan":1,"orivej":1,"zeha":1,"shalberd":1,"sanketplus":1,"MaerF0x0":1}},"pull_request_authors":{"table":{"dependabot[bot]":20,"KaushikiAnand":8,"jefferai":4,"hashicorp-copywrite[bot]":4,"jrasell":4,"sonnemusk":2,"mukeshjc":2,"zaafar":2,"jbardin":1,"Uk1288":1,"ibm-mend-app[bot]":1,"bflad":1,"paultyng":1,"oss-core-libraries-dashboard[bot]":1,"bored-engineer":1,"CreatorHead":1,"dmwilcox":1,"calvn":1,"sonamtenzin2":1,"compliance-pr-automation-bot[bot]":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-08-24T00:00:06.384Z","repositories_count":16301769,"issues_count":42335015,"pull_requests_count":134763975,"authors_count":11516393,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{}},"past_year_pull_request_labels_count":{"table":{"dependencies":14,"github_actions":14,"automated":1,"legal":1}},"past_year_issue_author_associations_count":{"table":{}},"past_year_pull_request_author_associations_count":{"table":{"CONTRIBUTOR":16,"MEMBER":4,"NONE":4}},"past_year_issue_authors":{"table":{}},"past_year_pull_request_authors":{"table":{"dependabot[bot]":14,"jrasell":4,"sonnemusk":2,"CreatorHead":1,"ibm-mend-app[bot]":1,"oss-core-libraries-dashboard[bot]":1,"sonamtenzin2":1}},"maintainers":[{"table":{"login":"jefferai","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jefferai"}},{"table":{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"}},{"table":{"login":"KaushikiAnand","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/KaushikiAnand"}},{"table":{"login":"bflad","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bflad"}},{"table":{"login":"jbardin","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jbardin"}},{"table":{"login":"calvn","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/calvn"}}],"active_maintainers":[{"table":{"login":"jrasell","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jrasell"}}]}},"events":{"total":{"DeleteEvent":16,"MemberEvent":2,"PullRequestEvent":36,"ForkEvent":5,"WatchEvent":42,"IssueCommentEvent":2,"PushEvent":17,"PullRequestReviewCommentEvent":1,"PullRequestReviewEvent":8,"CreateEvent":14},"last_year":{"DeleteEvent":15,"PullRequestEvent":20,"ForkEvent":1,"WatchEvent":9,"IssueCommentEvent":1,"PushEvent":7,"PullRequestReviewEvent":2,"CreateEvent":9}},"keywords":[],"dependencies":[{"ecosystem":"go","filepath":"go.mod","sha":null,"kind":"manifest","created_at":"2024-12-24T10:09:42.997Z","updated_at":"2024-12-24T10:09:42.997Z","repository_link":"https://github.com/hashicorp/go-cleanhttp/blob/master/go.mod","dependencies":[]},{"ecosystem":"actions","filepath":".github/workflows/build-test.yml","sha":null,"kind":"manifest","created_at":"2025-12-15T14:09:13.312Z","updated_at":"2025-12-15T14:09:13.312Z","repository_link":"https://github.com/hashicorp/go-cleanhttp/blob/master/.github/workflows/build-test.yml","dependencies":[{"id":25769624899,"package_name":"actions/checkout","ecosystem":"actions","requirements":"1af3b93b6815bc44a9784bd300feb67ff0d1eeb3","direct":true,"kind":"composite","optional":false},{"id":25769624900,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"44694675825211faa026b3c33043df3e48a5fa00","direct":true,"kind":"composite","optional":false},{"id":25769624901,"package_name":"golangci/golangci-lint-action","ecosystem":"actions","requirements":"08e2f20817b15149a52b5b3ebe7de50aff2ba8c5","direct":true,"kind":"composite","optional":false},{"id":25769624902,"package_name":"actions/upload-artifact","ecosystem":"actions","requirements":"b7c566a772e6b6bfb58ed0dc250532a479d7789f","direct":true,"kind":"composite","optional":false}]}],"score":33.082011909480585,"created_at":"2025-11-11T15:26:45.689Z","updated_at":"2026-08-24T12:06:12.258Z","avatar_url":"https://github.com/hashicorp.png","language":"Go","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/369394","html_url":"https://summary.ecosyste.ms/projects/369394"}