{"id":371652,"url":"https://github.com/hynek/argon2-cffi-bindings","last_synced_at":"2026-08-25T14:12:48.935Z","repository":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-20T08:06:46.000Z","size":285,"stargazers_count":20,"open_issues_count":4,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-23T14:40:54.963Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-20T08:09:08.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36862457,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-23T02:00:05.822Z","response_time":128,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"hynek","name":"Hynek Schlawack","uuid":"41240","kind":"user","description":"","email":"hs@ox.cx","website":"https://hynek.me/about/","location":"Berlin","twitter":"hynek","company":"Variomedia AG","icon_url":"https://avatars.githubusercontent.com/u/41240?u=c77db9d353f9df8435a5bfcdaab2121c047f0456\u0026v=4","repositories_count":41,"last_synced_at":"2026-08-20T05:49:45.399Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/hynek","funding_links":["https://github.com/sponsors/hynek"],"total_stars":9746,"followers":1927,"following":6,"created_at":"2022-11-02T16:24:56.789Z","updated_at":"2026-08-20T05:49:45.593Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek/repositories"},"packages":[{"id":7632334,"name":"py3-argon2-cffi-bindings-pyc","ecosystem":"alpine","description":"Precompiled Python bytecode for py3-argon2-cffi-bindings","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":[],"namespace":"community","versions_count":5,"first_release_published_at":"2023-04-20T01:20:52.000Z","latest_release_published_at":"2026-03-05T02:26:55.000Z","latest_release_number":"25.1.0-r0","last_synced_at":"2026-08-11T12:26:23.284Z","created_at":"2023-04-23T01:44:57.679Z","updated_at":"2026-08-11T12:26:23.285Z","registry_url":"https://pkgs.alpinelinux.org/package/edge/community/x86_64/py3-argon2-cffi-bindings-pyc","install_command":"apk add py3-argon2-cffi-bindings-pyc","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-06T06:07:34.000Z","size":263,"stargazers_count":20,"open_issues_count":3,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-08T10:44:08.120Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-06T06:08:18.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36414931,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-08T02:00:08.763Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hynek","name":"Hynek Schlawack","uuid":"41240","kind":"user","description":"","email":"hs@ox.cx","website":"https://hynek.me/about/","location":"Berlin","twitter":"hynek","company":"Variomedia AG","icon_url":"https://avatars.githubusercontent.com/u/41240?u=c77db9d353f9df8435a5bfcdaab2121c047f0456\u0026v=4","repositories_count":40,"last_synced_at":"2026-08-05T12:08:05.838Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/hynek","funding_links":["https://github.com/sponsors/hynek"],"total_stars":9713,"followers":1927,"following":6,"created_at":"2022-11-02T16:24:56.789Z","updated_at":"2026-08-05T12:08:05.940Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek/repositories"},"tags":[{"name":"25.1.0","sha":"66f5b2340ef25699504bcc0f08eadcbefaf219aa","kind":"tag","published_at":"2025-07-30T09:43:43.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/25.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/25.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@25.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0/manifests"},{"name":"21.2.0","sha":"2bf609f920d83a081a5787425b9eb1c95ecf6e0c","kind":"tag","published_at":"2021-12-01T08:44:02.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.2.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0/manifests"},{"name":"21.1.0","sha":"78d28409e22144f152bd408ccc2e2dd6efee2466","kind":"tag","published_at":"2021-11-28T10:18:23.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0/manifests"}]},"repo_metadata_updated_at":"2026-08-08T19:06:19.663Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":14.132689623958058,"stargazers_count":31.541059037441094,"forks_count":31.281309139485696,"average":19.23876445022121},"purl":"pkg:apk/alpine/py3-argon2-cffi-bindings-pyc?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=edge","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-argon2-cffi-bindings-pyc","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-argon2-cffi-bindings-pyc","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-argon2-cffi-bindings-pyc/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-08T05:37:05.092Z","issues_count":11,"pull_requests_count":145,"avg_time_to_close_issue":2202977.75,"avg_time_to_close_pull_request":402672.45454545453,"issues_closed_count":8,"pull_requests_closed_count":132,"pull_request_authors_count":10,"issue_authors_count":11,"avg_comments_per_issue":3.6363636363636362,"avg_comments_per_pull_request":0.6758620689655173,"merged_pull_requests_count":126,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":3,"past_year_pull_requests_count":25,"past_year_avg_time_to_close_issue":4382892.5,"past_year_avg_time_to_close_pull_request":725034.3478260869,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":9.0,"past_year_avg_comments_per_pull_request":1.04,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":20,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":40,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/py3-argon2-cffi-bindings-pyc/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/py3-argon2-cffi-bindings-pyc/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/py3-argon2-cffi-bindings-pyc/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/py3-argon2-cffi-bindings-pyc/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/py3-argon2-cffi-bindings-pyc/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/py3-argon2-cffi-bindings-pyc/codemeta","maintainers":[{"uuid":"alpine@ptrcnull.me","login":null,"name":"Patrycja Rosa","email":"alpine@ptrcnull.me","url":"https://pkgs.alpinelinux.org/packages?maintainer=Patrycja Rosa","packages_count":770,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Patrycja Rosa","role":null,"created_at":"2024-02-12T23:07:58.769Z","updated_at":"2024-02-12T23:07:58.769Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/maintainers/alpine@ptrcnull.me/packages"}],"registry":{"name":"alpine-edge","url":"https://pkgs.alpinelinux.org/packages?branch=edge","ecosystem":"alpine","default":false,"packages_count":39959,"maintainers_count":905,"namespaces_count":3,"keywords_count":6584,"github":"alpinelinux","metadata":{"repos":["main","community","testing"],"funded_packages_count":2944},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.616Z","updated_at":"2026-08-25T05:06:28.429Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/namespaces"}},{"id":6051074,"name":"py3-argon2-cffi-bindings","ecosystem":"alpine","description":"Low-level Python CFFI Bindings for Argon2","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":[],"namespace":"community","versions_count":6,"first_release_published_at":"2022-12-17T04:11:49.000Z","latest_release_published_at":"2026-03-05T02:26:55.000Z","latest_release_number":"25.1.0-r0","last_synced_at":"2026-08-11T12:26:24.970Z","created_at":"2023-01-31T18:25:39.920Z","updated_at":"2026-08-11T12:26:24.970Z","registry_url":"https://pkgs.alpinelinux.org/package/edge/community/x86_64/py3-argon2-cffi-bindings","install_command":"apk add py3-argon2-cffi-bindings","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-06T06:07:34.000Z","size":263,"stargazers_count":20,"open_issues_count":3,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-08T10:44:08.120Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-06T06:08:18.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36414931,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-08T02:00:08.763Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hynek","name":"Hynek Schlawack","uuid":"41240","kind":"user","description":"","email":"hs@ox.cx","website":"https://hynek.me/about/","location":"Berlin","twitter":"hynek","company":"Variomedia AG","icon_url":"https://avatars.githubusercontent.com/u/41240?u=c77db9d353f9df8435a5bfcdaab2121c047f0456\u0026v=4","repositories_count":40,"last_synced_at":"2026-08-05T12:08:05.838Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/hynek","funding_links":["https://github.com/sponsors/hynek"],"total_stars":9713,"followers":1927,"following":6,"created_at":"2022-11-02T16:24:56.789Z","updated_at":"2026-08-05T12:08:05.940Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek/repositories"},"tags":[{"name":"25.1.0","sha":"66f5b2340ef25699504bcc0f08eadcbefaf219aa","kind":"tag","published_at":"2025-07-30T09:43:43.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/25.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/25.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@25.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0/manifests"},{"name":"21.2.0","sha":"2bf609f920d83a081a5787425b9eb1c95ecf6e0c","kind":"tag","published_at":"2021-12-01T08:44:02.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.2.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0/manifests"},{"name":"21.1.0","sha":"78d28409e22144f152bd408ccc2e2dd6efee2466","kind":"tag","published_at":"2021-11-28T10:18:23.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0/manifests"}]},"repo_metadata_updated_at":"2026-08-08T19:06:19.607Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":6.030839073262366,"stargazers_count":29.903725735754538,"forks_count":29.453663118346903,"average":16.34705698184095},"purl":"pkg:apk/alpine/py3-argon2-cffi-bindings?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=edge","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-argon2-cffi-bindings","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-argon2-cffi-bindings","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-argon2-cffi-bindings/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-08T05:37:05.092Z","issues_count":11,"pull_requests_count":145,"avg_time_to_close_issue":2202977.75,"avg_time_to_close_pull_request":402672.45454545453,"issues_closed_count":8,"pull_requests_closed_count":132,"pull_request_authors_count":10,"issue_authors_count":11,"avg_comments_per_issue":3.6363636363636362,"avg_comments_per_pull_request":0.6758620689655173,"merged_pull_requests_count":126,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":3,"past_year_pull_requests_count":25,"past_year_avg_time_to_close_issue":4382892.5,"past_year_avg_time_to_close_pull_request":725034.3478260869,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":9.0,"past_year_avg_comments_per_pull_request":1.04,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":20,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":40,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/py3-argon2-cffi-bindings/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/py3-argon2-cffi-bindings/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/py3-argon2-cffi-bindings/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/py3-argon2-cffi-bindings/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/py3-argon2-cffi-bindings/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages/py3-argon2-cffi-bindings/codemeta","maintainers":[{"uuid":"alpine@ptrcnull.me","login":null,"name":"Patrycja Rosa","email":"alpine@ptrcnull.me","url":"https://pkgs.alpinelinux.org/packages?maintainer=Patrycja Rosa","packages_count":770,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Patrycja Rosa","role":null,"created_at":"2024-02-12T23:07:30.042Z","updated_at":"2024-02-12T23:07:30.042Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/maintainers/alpine@ptrcnull.me/packages"}],"registry":{"name":"alpine-edge","url":"https://pkgs.alpinelinux.org/packages?branch=edge","ecosystem":"alpine","default":false,"packages_count":39959,"maintainers_count":905,"namespaces_count":3,"keywords_count":6584,"github":"alpinelinux","metadata":{"repos":["main","community","testing"],"funded_packages_count":2944},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-01-31T17:27:50.616Z","updated_at":"2026-08-25T05:06:28.429Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-edge/namespaces"}},{"id":12824276,"name":"python311Packages.argon2-cffi-bindings","ecosystem":"nixpkgs","description":"Low-level CFFI bindings for Argon2","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":["python"],"namespace":null,"versions_count":1,"first_release_published_at":"2026-01-26T18:40:11.866Z","latest_release_published_at":"2026-01-26T18:40:11.866Z","latest_release_number":"21.2.0","last_synced_at":"2026-04-18T00:03:31.993Z","created_at":"2026-01-26T18:40:11.676Z","updated_at":"2026-08-08T19:06:19.287Z","registry_url":"https://search.nixos.org/packages?channel=23.05\u0026query=python311Packages.argon2-cffi-bindings","install_command":"nix-env -iA nixpkgs.python311Packages.argon2-cffi-bindings","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-23.05/pkgs/development/python-modules/argon2-cffi-bindings/default.nix#L30","metadata":{"nix_attribute":"python3.11-argon2-cffi-bindings-21.2.0","position":"pkgs/development/python-modules/argon2-cffi-bindings/default.nix:30","platforms":["aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mipsel-linux","mips64el-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux","x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin"],"broken":false,"insecure":false,"unfree":false,"outputs":["dist","out"],"upstream_ecosystem":"pypi","upstream_name":"argon2-cffi-bindings","upstream_purl":"pkg:pypi/argon2-cffi-bindings"},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-06T06:07:34.000Z","size":263,"stargazers_count":20,"open_issues_count":3,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-08T10:44:08.120Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-06T06:08:18.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36414931,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-08T02:00:08.763Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-08T19:06:19.287Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/python311Packages.argon2-cffi-bindings?channel=23.05\u0026repository_url=https://channels.nixos.org/nixos-23.05","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/python311Packages.argon2-cffi-bindings","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/python311Packages.argon2-cffi-bindings","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/python311Packages.argon2-cffi-bindings/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-08T05:37:05.092Z","issues_count":11,"pull_requests_count":145,"avg_time_to_close_issue":2202977.75,"avg_time_to_close_pull_request":402672.45454545453,"issues_closed_count":8,"pull_requests_closed_count":132,"pull_request_authors_count":10,"issue_authors_count":11,"avg_comments_per_issue":3.6363636363636362,"avg_comments_per_pull_request":0.6758620689655173,"merged_pull_requests_count":126,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":3,"past_year_pull_requests_count":25,"past_year_avg_time_to_close_issue":4382892.5,"past_year_avg_time_to_close_pull_request":725034.3478260869,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":9.0,"past_year_avg_comments_per_pull_request":1.04,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":20,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":40,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/python311Packages.argon2-cffi-bindings/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/python311Packages.argon2-cffi-bindings/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/python311Packages.argon2-cffi-bindings/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/python311Packages.argon2-cffi-bindings/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/python311Packages.argon2-cffi-bindings/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/python311Packages.argon2-cffi-bindings/codemeta","maintainers":[{"uuid":"jonringer","login":null,"name":"Jonathan Ringer","email":"jonringer117@gmail.com","url":"https://github.com/jonringer","packages_count":412,"html_url":null,"role":null,"created_at":"2026-03-04T19:32:28.725Z","updated_at":"2026-03-04T19:32:28.725Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/maintainers/jonringer/packages"}],"registry":{"name":"nixpkgs-23.05","url":"https://channels.nixos.org/nixos-23.05","ecosystem":"nixpkgs","default":false,"packages_count":101092,"maintainers_count":2622,"namespaces_count":0,"keywords_count":613,"github":"NixOS","metadata":{"funded_packages_count":2166},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.882Z","updated_at":"2026-08-25T05:04:32.337Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/namespaces"}},{"id":12811746,"name":"python310Packages.argon2-cffi-bindings","ecosystem":"nixpkgs","description":"Low-level CFFI bindings for Argon2","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":["python"],"namespace":null,"versions_count":1,"first_release_published_at":"2026-01-26T16:29:20.259Z","latest_release_published_at":"2026-01-26T16:29:20.259Z","latest_release_number":"21.2.0","last_synced_at":"2026-04-08T16:13:47.924Z","created_at":"2026-01-26T16:29:20.045Z","updated_at":"2026-08-08T19:06:19.498Z","registry_url":"https://search.nixos.org/packages?channel=23.05\u0026query=python310Packages.argon2-cffi-bindings","install_command":"nix-env -iA nixpkgs.python310Packages.argon2-cffi-bindings","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-23.05/pkgs/development/python-modules/argon2-cffi-bindings/default.nix#L30","metadata":{"nix_attribute":"python3.10-argon2-cffi-bindings-21.2.0","position":"pkgs/development/python-modules/argon2-cffi-bindings/default.nix:30","platforms":["aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mipsel-linux","mips64el-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux","x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin"],"broken":false,"insecure":false,"unfree":false,"outputs":["dist","out"],"upstream_ecosystem":"pypi","upstream_name":"argon2-cffi-bindings","upstream_purl":"pkg:pypi/argon2-cffi-bindings"},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-06T06:07:34.000Z","size":263,"stargazers_count":20,"open_issues_count":3,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-08T10:44:08.120Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-06T06:08:18.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36414931,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-08T02:00:08.763Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-08T19:06:19.498Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/python310Packages.argon2-cffi-bindings?channel=23.05\u0026repository_url=https://channels.nixos.org/nixos-23.05","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/python310Packages.argon2-cffi-bindings","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/python310Packages.argon2-cffi-bindings","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/python310Packages.argon2-cffi-bindings/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-08T05:37:05.092Z","issues_count":11,"pull_requests_count":145,"avg_time_to_close_issue":2202977.75,"avg_time_to_close_pull_request":402672.45454545453,"issues_closed_count":8,"pull_requests_closed_count":132,"pull_request_authors_count":10,"issue_authors_count":11,"avg_comments_per_issue":3.6363636363636362,"avg_comments_per_pull_request":0.6758620689655173,"merged_pull_requests_count":126,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":3,"past_year_pull_requests_count":25,"past_year_avg_time_to_close_issue":4382892.5,"past_year_avg_time_to_close_pull_request":725034.3478260869,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":9.0,"past_year_avg_comments_per_pull_request":1.04,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":20,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":40,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/python310Packages.argon2-cffi-bindings/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/python310Packages.argon2-cffi-bindings/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/python310Packages.argon2-cffi-bindings/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/python310Packages.argon2-cffi-bindings/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/python310Packages.argon2-cffi-bindings/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages/python310Packages.argon2-cffi-bindings/codemeta","maintainers":[{"uuid":"jonringer","login":null,"name":"Jonathan Ringer","email":"jonringer117@gmail.com","url":"https://github.com/jonringer","packages_count":412,"html_url":null,"role":null,"created_at":"2026-03-03T14:25:26.122Z","updated_at":"2026-03-03T14:25:26.122Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/maintainers/jonringer/packages"}],"registry":{"name":"nixpkgs-23.05","url":"https://channels.nixos.org/nixos-23.05","ecosystem":"nixpkgs","default":false,"packages_count":101092,"maintainers_count":2622,"namespaces_count":0,"keywords_count":613,"github":"NixOS","metadata":{"funded_packages_count":2166},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.882Z","updated_at":"2026-08-25T05:04:32.337Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.05/namespaces"}},{"id":13301508,"name":"python311Packages.argon2-cffi-bindings","ecosystem":"nixpkgs","description":"Low-level CFFI bindings for Argon2","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":["python"],"namespace":null,"versions_count":1,"first_release_published_at":"2026-02-02T06:45:22.984Z","latest_release_published_at":"2026-02-02T06:45:22.984Z","latest_release_number":"21.2.0","last_synced_at":"2026-04-12T04:01:58.008Z","created_at":"2026-02-02T06:44:51.715Z","updated_at":"2026-08-08T19:06:19.649Z","registry_url":"https://search.nixos.org/packages?channel=23.11\u0026query=python311Packages.argon2-cffi-bindings","install_command":"nix-env -iA nixpkgs.python311Packages.argon2-cffi-bindings","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-23.11/pkgs/development/python-modules/argon2-cffi-bindings/default.nix#L36","metadata":{"nix_attribute":"python3.11-argon2-cffi-bindings-21.2.0","position":"pkgs/development/python-modules/argon2-cffi-bindings/default.nix:36","platforms":["aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux","x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin","i686-cygwin","x86_64-cygwin","x86_64-windows","i686-windows"],"broken":false,"insecure":false,"unfree":false,"outputs":["dist","out"],"upstream_ecosystem":"pypi","upstream_name":"argon2-cffi-bindings","upstream_purl":"pkg:pypi/argon2-cffi-bindings"},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-06T06:07:34.000Z","size":263,"stargazers_count":20,"open_issues_count":3,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-08T10:44:08.120Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-06T06:08:18.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36414931,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-08T02:00:08.763Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-08T19:06:19.649Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/python311Packages.argon2-cffi-bindings?channel=23.11\u0026repository_url=https://channels.nixos.org/nixos-23.11","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/python311Packages.argon2-cffi-bindings","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/python311Packages.argon2-cffi-bindings","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/python311Packages.argon2-cffi-bindings/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-08T05:37:05.092Z","issues_count":11,"pull_requests_count":145,"avg_time_to_close_issue":2202977.75,"avg_time_to_close_pull_request":402672.45454545453,"issues_closed_count":8,"pull_requests_closed_count":132,"pull_request_authors_count":10,"issue_authors_count":11,"avg_comments_per_issue":3.6363636363636362,"avg_comments_per_pull_request":0.6758620689655173,"merged_pull_requests_count":126,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":3,"past_year_pull_requests_count":25,"past_year_avg_time_to_close_issue":4382892.5,"past_year_avg_time_to_close_pull_request":725034.3478260869,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":9.0,"past_year_avg_comments_per_pull_request":1.04,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":20,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":40,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/python311Packages.argon2-cffi-bindings/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/python311Packages.argon2-cffi-bindings/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/python311Packages.argon2-cffi-bindings/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/python311Packages.argon2-cffi-bindings/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/python311Packages.argon2-cffi-bindings/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/python311Packages.argon2-cffi-bindings/codemeta","maintainers":[{"uuid":"jonringer","login":null,"name":"Jonathan Ringer","email":"jonringer117@gmail.com","url":"https://github.com/jonringer","packages_count":436,"html_url":null,"role":null,"created_at":"2026-03-04T02:04:29.559Z","updated_at":"2026-03-04T02:04:29.559Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/maintainers/jonringer/packages"}],"registry":{"name":"nixpkgs-23.11","url":"https://channels.nixos.org/nixos-23.11","ecosystem":"nixpkgs","default":false,"packages_count":108178,"maintainers_count":2997,"namespaces_count":0,"keywords_count":569,"github":"NixOS","metadata":{"funded_packages_count":3095},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.577Z","updated_at":"2026-08-25T05:04:39.690Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/namespaces"}},{"id":13082812,"name":"python312Packages.argon2-cffi-bindings","ecosystem":"nixpkgs","description":"Low-level CFFI bindings for Argon2","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":["python"],"namespace":null,"versions_count":1,"first_release_published_at":"2026-02-01T17:54:49.485Z","latest_release_published_at":"2026-02-01T17:54:49.485Z","latest_release_number":"21.2.0","last_synced_at":"2026-03-07T14:13:50.867Z","created_at":"2026-02-01T17:53:39.908Z","updated_at":"2026-08-08T19:06:19.522Z","registry_url":"https://search.nixos.org/packages?channel=24.11\u0026query=python312Packages.argon2-cffi-bindings","install_command":"nix-env -iA nixpkgs.python312Packages.argon2-cffi-bindings","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-24.11/pkgs/development/python-modules/argon2-cffi-bindings/default.nix#L36","metadata":{"nix_attribute":"python3.12-argon2-cffi-bindings-21.2.0","position":"pkgs/development/python-modules/argon2-cffi-bindings/default.nix:36","platforms":["aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux","x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin","i686-cygwin","x86_64-cygwin","aarch64-windows","x86_64-windows","i686-windows","i686-freebsd","x86_64-freebsd"],"broken":false,"insecure":false,"unfree":false,"outputs":["dist","out"],"upstream_ecosystem":"pypi","upstream_name":"argon2-cffi-bindings","upstream_purl":"pkg:pypi/argon2-cffi-bindings"},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-06T06:07:34.000Z","size":263,"stargazers_count":20,"open_issues_count":3,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-08T10:44:08.120Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-06T06:08:18.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36414931,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-08T02:00:08.763Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-08T19:06:19.522Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/python312Packages.argon2-cffi-bindings?channel=24.11\u0026repository_url=https://channels.nixos.org/nixos-24.11","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/python312Packages.argon2-cffi-bindings","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/python312Packages.argon2-cffi-bindings","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/python312Packages.argon2-cffi-bindings/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-08T05:37:05.092Z","issues_count":11,"pull_requests_count":145,"avg_time_to_close_issue":2202977.75,"avg_time_to_close_pull_request":402672.45454545453,"issues_closed_count":8,"pull_requests_closed_count":132,"pull_request_authors_count":10,"issue_authors_count":11,"avg_comments_per_issue":3.6363636363636362,"avg_comments_per_pull_request":0.6758620689655173,"merged_pull_requests_count":126,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":3,"past_year_pull_requests_count":25,"past_year_avg_time_to_close_issue":4382892.5,"past_year_avg_time_to_close_pull_request":725034.3478260869,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":9.0,"past_year_avg_comments_per_pull_request":1.04,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":20,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":40,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/python312Packages.argon2-cffi-bindings/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/python312Packages.argon2-cffi-bindings/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/python312Packages.argon2-cffi-bindings/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/python312Packages.argon2-cffi-bindings/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/python312Packages.argon2-cffi-bindings/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/python312Packages.argon2-cffi-bindings/codemeta","maintainers":[],"registry":{"name":"nixpkgs-24.11","url":"https://channels.nixos.org/nixos-24.11","ecosystem":"nixpkgs","default":false,"packages_count":121983,"maintainers_count":3777,"namespaces_count":0,"keywords_count":739,"github":"NixOS","metadata":{"funded_packages_count":3380},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.059Z","updated_at":"2026-08-25T05:04:34.674Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/namespaces"}},{"id":7778098,"name":"py3-argon2-cffi-bindings","ecosystem":"alpine","description":"Low-level Python CFFI Bindings for Argon2","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2023-04-20T01:20:52.000Z","latest_release_published_at":"2023-04-20T01:20:52.000Z","latest_release_number":"21.2.0-r1","last_synced_at":"2026-04-09T02:09:03.128Z","created_at":"2023-05-22T14:16:47.851Z","updated_at":"2026-08-08T19:06:19.627Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.18/community/x86_64/py3-argon2-cffi-bindings","install_command":"apk add py3-argon2-cffi-bindings","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-06T06:07:34.000Z","size":263,"stargazers_count":20,"open_issues_count":3,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-08T10:44:08.120Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-06T06:08:18.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36414931,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-08T02:00:08.763Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hynek","name":"Hynek Schlawack","uuid":"41240","kind":"user","description":"","email":"hs@ox.cx","website":"https://hynek.me/about/","location":"Berlin","twitter":"hynek","company":"Variomedia AG","icon_url":"https://avatars.githubusercontent.com/u/41240?u=c77db9d353f9df8435a5bfcdaab2121c047f0456\u0026v=4","repositories_count":40,"last_synced_at":"2026-08-05T12:08:05.838Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/hynek","funding_links":["https://github.com/sponsors/hynek"],"total_stars":9713,"followers":1927,"following":6,"created_at":"2022-11-02T16:24:56.789Z","updated_at":"2026-08-05T12:08:05.940Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek/repositories"},"tags":[{"name":"25.1.0","sha":"66f5b2340ef25699504bcc0f08eadcbefaf219aa","kind":"tag","published_at":"2025-07-30T09:43:43.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/25.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/25.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@25.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0/manifests"},{"name":"21.2.0","sha":"2bf609f920d83a081a5787425b9eb1c95ecf6e0c","kind":"tag","published_at":"2021-12-01T08:44:02.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.2.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0/manifests"},{"name":"21.1.0","sha":"78d28409e22144f152bd408ccc2e2dd6efee2466","kind":"tag","published_at":"2021-11-28T10:18:23.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0/manifests"}]},"repo_metadata_updated_at":"2026-08-08T19:06:19.627Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":28.487357239040445,"forks_count":27.89387062989377,"docker_downloads_count":null,"average":14.095306967233554},"purl":"pkg:apk/alpine/py3-argon2-cffi-bindings?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.18","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-argon2-cffi-bindings","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-argon2-cffi-bindings","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-argon2-cffi-bindings/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-08T05:37:05.092Z","issues_count":11,"pull_requests_count":145,"avg_time_to_close_issue":2202977.75,"avg_time_to_close_pull_request":402672.45454545453,"issues_closed_count":8,"pull_requests_closed_count":132,"pull_request_authors_count":10,"issue_authors_count":11,"avg_comments_per_issue":3.6363636363636362,"avg_comments_per_pull_request":0.6758620689655173,"merged_pull_requests_count":126,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":3,"past_year_pull_requests_count":25,"past_year_avg_time_to_close_issue":4382892.5,"past_year_avg_time_to_close_pull_request":725034.3478260869,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":9.0,"past_year_avg_comments_per_pull_request":1.04,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":20,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":40,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/py3-argon2-cffi-bindings/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/py3-argon2-cffi-bindings/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/py3-argon2-cffi-bindings/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/py3-argon2-cffi-bindings/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/py3-argon2-cffi-bindings/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/py3-argon2-cffi-bindings/codemeta","maintainers":[{"uuid":"alice@ayaya.dev","login":null,"name":"psykose","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=psykose","packages_count":493,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=psykose","role":null,"created_at":"2023-05-23T06:58:41.071Z","updated_at":"2023-05-23T06:58:41.071Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/maintainers/alice@ayaya.dev/packages"}],"registry":{"name":"alpine-v3.18","url":"https://pkgs.alpinelinux.org/packages?branch=v3.18","ecosystem":"alpine","default":false,"packages_count":20068,"maintainers_count":367,"namespaces_count":2,"keywords_count":3639,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1238},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-05-22T10:43:30.622Z","updated_at":"2026-08-22T05:06:15.110Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/namespaces"}},{"id":11764660,"name":"py3-argon2-cffi-bindings-pyc","ecosystem":"alpine","description":"Precompiled Python bytecode for py3-argon2-cffi-bindings","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_number":"21.2.0-r4","last_synced_at":"2026-04-02T15:47:31.447Z","created_at":"2025-06-07T18:00:56.028Z","updated_at":"2026-08-08T19:06:19.629Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.22/community/x86_64/py3-argon2-cffi-bindings-pyc","install_command":"apk add py3-argon2-cffi-bindings-pyc","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-06T06:07:34.000Z","size":263,"stargazers_count":20,"open_issues_count":3,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-08T10:44:08.120Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-06T06:08:18.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36414931,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-08T02:00:08.763Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hynek","name":"Hynek Schlawack","uuid":"41240","kind":"user","description":"","email":"hs@ox.cx","website":"https://hynek.me/about/","location":"Berlin","twitter":"hynek","company":"Variomedia AG","icon_url":"https://avatars.githubusercontent.com/u/41240?u=c77db9d353f9df8435a5bfcdaab2121c047f0456\u0026v=4","repositories_count":40,"last_synced_at":"2026-08-05T12:08:05.838Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/hynek","funding_links":["https://github.com/sponsors/hynek"],"total_stars":9713,"followers":1927,"following":6,"created_at":"2022-11-02T16:24:56.789Z","updated_at":"2026-08-05T12:08:05.940Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek/repositories"},"tags":[{"name":"25.1.0","sha":"66f5b2340ef25699504bcc0f08eadcbefaf219aa","kind":"tag","published_at":"2025-07-30T09:43:43.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/25.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/25.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@25.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0/manifests"},{"name":"21.2.0","sha":"2bf609f920d83a081a5787425b9eb1c95ecf6e0c","kind":"tag","published_at":"2021-12-01T08:44:02.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.2.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0/manifests"},{"name":"21.1.0","sha":"78d28409e22144f152bd408ccc2e2dd6efee2466","kind":"tag","published_at":"2021-11-28T10:18:23.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0/manifests"}]},"repo_metadata_updated_at":"2026-08-08T19:06:19.629Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/py3-argon2-cffi-bindings-pyc?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.22","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-argon2-cffi-bindings-pyc","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-argon2-cffi-bindings-pyc","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-argon2-cffi-bindings-pyc/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-08T05:37:05.092Z","issues_count":11,"pull_requests_count":145,"avg_time_to_close_issue":2202977.75,"avg_time_to_close_pull_request":402672.45454545453,"issues_closed_count":8,"pull_requests_closed_count":132,"pull_request_authors_count":10,"issue_authors_count":11,"avg_comments_per_issue":3.6363636363636362,"avg_comments_per_pull_request":0.6758620689655173,"merged_pull_requests_count":126,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":3,"past_year_pull_requests_count":25,"past_year_avg_time_to_close_issue":4382892.5,"past_year_avg_time_to_close_pull_request":725034.3478260869,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":9.0,"past_year_avg_comments_per_pull_request":1.04,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":20,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":40,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/py3-argon2-cffi-bindings-pyc/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/py3-argon2-cffi-bindings-pyc/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/py3-argon2-cffi-bindings-pyc/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/py3-argon2-cffi-bindings-pyc/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/py3-argon2-cffi-bindings-pyc/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/py3-argon2-cffi-bindings-pyc/codemeta","maintainers":[{"uuid":"alpine@ptrcnull.me","login":null,"name":"Patrycja Rosa","email":"alpine@ptrcnull.me","url":"https://pkgs.alpinelinux.org/packages?maintainer=Patrycja Rosa","packages_count":493,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Patrycja Rosa","role":null,"created_at":"2025-06-08T14:40:27.681Z","updated_at":"2025-06-08T14:40:27.681Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/maintainers/alpine@ptrcnull.me/packages"}],"registry":{"name":"alpine-v3.22","url":"https://pkgs.alpinelinux.org/packages?branch=v3.22","ecosystem":"alpine","default":false,"packages_count":26323,"maintainers_count":422,"namespaces_count":2,"keywords_count":4638,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1803},"icon_url":"https://github.com/alpinelinux.png","created_at":"2025-06-05T10:49:56.987Z","updated_at":"2026-08-24T05:06:25.345Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/namespaces"}},{"id":11764666,"name":"py3-argon2-cffi-bindings","ecosystem":"alpine","description":"Low-level Python CFFI Bindings for Argon2","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_number":"21.2.0-r4","last_synced_at":"2026-04-02T15:47:38.205Z","created_at":"2025-06-07T18:01:00.684Z","updated_at":"2026-08-08T19:06:19.657Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.22/community/x86_64/py3-argon2-cffi-bindings","install_command":"apk add py3-argon2-cffi-bindings","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-06T06:07:34.000Z","size":263,"stargazers_count":20,"open_issues_count":3,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-08T10:44:08.120Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-06T06:08:18.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36414931,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-08T02:00:08.763Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hynek","name":"Hynek Schlawack","uuid":"41240","kind":"user","description":"","email":"hs@ox.cx","website":"https://hynek.me/about/","location":"Berlin","twitter":"hynek","company":"Variomedia AG","icon_url":"https://avatars.githubusercontent.com/u/41240?u=c77db9d353f9df8435a5bfcdaab2121c047f0456\u0026v=4","repositories_count":40,"last_synced_at":"2026-08-05T12:08:05.838Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/hynek","funding_links":["https://github.com/sponsors/hynek"],"total_stars":9713,"followers":1927,"following":6,"created_at":"2022-11-02T16:24:56.789Z","updated_at":"2026-08-05T12:08:05.940Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek/repositories"},"tags":[{"name":"25.1.0","sha":"66f5b2340ef25699504bcc0f08eadcbefaf219aa","kind":"tag","published_at":"2025-07-30T09:43:43.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/25.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/25.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@25.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0/manifests"},{"name":"21.2.0","sha":"2bf609f920d83a081a5787425b9eb1c95ecf6e0c","kind":"tag","published_at":"2021-12-01T08:44:02.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.2.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0/manifests"},{"name":"21.1.0","sha":"78d28409e22144f152bd408ccc2e2dd6efee2466","kind":"tag","published_at":"2021-11-28T10:18:23.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0/manifests"}]},"repo_metadata_updated_at":"2026-08-08T19:06:19.657Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/py3-argon2-cffi-bindings?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.22","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-argon2-cffi-bindings","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-argon2-cffi-bindings","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-argon2-cffi-bindings/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-08T05:37:05.092Z","issues_count":11,"pull_requests_count":145,"avg_time_to_close_issue":2202977.75,"avg_time_to_close_pull_request":402672.45454545453,"issues_closed_count":8,"pull_requests_closed_count":132,"pull_request_authors_count":10,"issue_authors_count":11,"avg_comments_per_issue":3.6363636363636362,"avg_comments_per_pull_request":0.6758620689655173,"merged_pull_requests_count":126,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":3,"past_year_pull_requests_count":25,"past_year_avg_time_to_close_issue":4382892.5,"past_year_avg_time_to_close_pull_request":725034.3478260869,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":9.0,"past_year_avg_comments_per_pull_request":1.04,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":20,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":40,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/py3-argon2-cffi-bindings/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/py3-argon2-cffi-bindings/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/py3-argon2-cffi-bindings/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/py3-argon2-cffi-bindings/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/py3-argon2-cffi-bindings/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages/py3-argon2-cffi-bindings/codemeta","maintainers":[{"uuid":"alpine@ptrcnull.me","login":null,"name":"Patrycja Rosa","email":"alpine@ptrcnull.me","url":"https://pkgs.alpinelinux.org/packages?maintainer=Patrycja Rosa","packages_count":493,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Patrycja Rosa","role":null,"created_at":"2025-06-08T14:40:29.085Z","updated_at":"2025-06-08T14:40:29.085Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/maintainers/alpine@ptrcnull.me/packages"}],"registry":{"name":"alpine-v3.22","url":"https://pkgs.alpinelinux.org/packages?branch=v3.22","ecosystem":"alpine","default":false,"packages_count":26323,"maintainers_count":422,"namespaces_count":2,"keywords_count":4638,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1803},"icon_url":"https://github.com/alpinelinux.png","created_at":"2025-06-05T10:49:56.987Z","updated_at":"2026-08-24T05:06:25.345Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.22/namespaces"}},{"id":13193206,"name":"python311Packages.argon2-cffi-bindings","ecosystem":"nixpkgs","description":"Low-level CFFI bindings for Argon2","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":["python"],"namespace":null,"versions_count":1,"first_release_published_at":"2026-02-02T00:16:39.927Z","latest_release_published_at":"2026-02-02T00:16:39.927Z","latest_release_number":"21.2.0","last_synced_at":"2026-03-08T12:03:35.757Z","created_at":"2026-02-02T00:16:39.450Z","updated_at":"2026-08-08T19:06:19.652Z","registry_url":"https://search.nixos.org/packages?channel=24.05\u0026query=python311Packages.argon2-cffi-bindings","install_command":"nix-env -iA nixpkgs.python311Packages.argon2-cffi-bindings","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-24.05/pkgs/development/python-modules/argon2-cffi-bindings/default.nix#L36","metadata":{"nix_attribute":"python3.11-argon2-cffi-bindings-21.2.0","position":"pkgs/development/python-modules/argon2-cffi-bindings/default.nix:36","platforms":["aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux","x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin","i686-cygwin","x86_64-cygwin","x86_64-windows","i686-windows"],"broken":false,"insecure":false,"unfree":false,"outputs":["dist","out"],"upstream_ecosystem":"pypi","upstream_name":"argon2-cffi-bindings","upstream_purl":"pkg:pypi/argon2-cffi-bindings"},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-06T06:07:34.000Z","size":263,"stargazers_count":20,"open_issues_count":3,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-08T10:44:08.120Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-06T06:08:18.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36414931,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-08T02:00:08.763Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-08T19:06:19.652Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/python311Packages.argon2-cffi-bindings?channel=24.05\u0026repository_url=https://channels.nixos.org/nixos-24.05","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/python311Packages.argon2-cffi-bindings","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/python311Packages.argon2-cffi-bindings","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/python311Packages.argon2-cffi-bindings/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-08T05:37:05.092Z","issues_count":11,"pull_requests_count":145,"avg_time_to_close_issue":2202977.75,"avg_time_to_close_pull_request":402672.45454545453,"issues_closed_count":8,"pull_requests_closed_count":132,"pull_request_authors_count":10,"issue_authors_count":11,"avg_comments_per_issue":3.6363636363636362,"avg_comments_per_pull_request":0.6758620689655173,"merged_pull_requests_count":126,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":3,"past_year_pull_requests_count":25,"past_year_avg_time_to_close_issue":4382892.5,"past_year_avg_time_to_close_pull_request":725034.3478260869,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":9.0,"past_year_avg_comments_per_pull_request":1.04,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":20,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":40,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/python311Packages.argon2-cffi-bindings/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/python311Packages.argon2-cffi-bindings/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/python311Packages.argon2-cffi-bindings/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/python311Packages.argon2-cffi-bindings/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/python311Packages.argon2-cffi-bindings/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/python311Packages.argon2-cffi-bindings/codemeta","maintainers":[],"registry":{"name":"nixpkgs-24.05","url":"https://channels.nixos.org/nixos-24.05","ecosystem":"nixpkgs","default":false,"packages_count":116156,"maintainers_count":3383,"namespaces_count":0,"keywords_count":654,"github":"NixOS","metadata":{"funded_packages_count":3204},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.309Z","updated_at":"2026-08-25T05:01:17.178Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/namespaces"}},{"id":13073948,"name":"python311Packages.argon2-cffi-bindings","ecosystem":"nixpkgs","description":"Low-level CFFI bindings for Argon2","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":["python"],"namespace":null,"versions_count":1,"first_release_published_at":"2026-02-01T17:26:25.066Z","latest_release_published_at":"2026-02-01T17:26:25.066Z","latest_release_number":"21.2.0","last_synced_at":"2026-04-11T16:01:28.632Z","created_at":"2026-02-01T17:26:24.449Z","updated_at":"2026-08-08T19:06:19.732Z","registry_url":"https://search.nixos.org/packages?channel=24.11\u0026query=python311Packages.argon2-cffi-bindings","install_command":"nix-env -iA nixpkgs.python311Packages.argon2-cffi-bindings","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-24.11/pkgs/development/python-modules/argon2-cffi-bindings/default.nix#L36","metadata":{"nix_attribute":"python3.11-argon2-cffi-bindings-21.2.0","position":"pkgs/development/python-modules/argon2-cffi-bindings/default.nix:36","platforms":["aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux","x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin","i686-cygwin","x86_64-cygwin","aarch64-windows","x86_64-windows","i686-windows","i686-freebsd","x86_64-freebsd"],"broken":false,"insecure":false,"unfree":false,"outputs":["dist","out"],"upstream_ecosystem":"pypi","upstream_name":"argon2-cffi-bindings","upstream_purl":"pkg:pypi/argon2-cffi-bindings"},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-06T06:07:34.000Z","size":263,"stargazers_count":20,"open_issues_count":3,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-08T10:44:08.120Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-06T06:08:18.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36414931,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-08T02:00:08.763Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-08T19:06:19.732Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/python311Packages.argon2-cffi-bindings?channel=24.11\u0026repository_url=https://channels.nixos.org/nixos-24.11","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/python311Packages.argon2-cffi-bindings","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/python311Packages.argon2-cffi-bindings","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/python311Packages.argon2-cffi-bindings/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-08T05:37:05.092Z","issues_count":11,"pull_requests_count":145,"avg_time_to_close_issue":2202977.75,"avg_time_to_close_pull_request":402672.45454545453,"issues_closed_count":8,"pull_requests_closed_count":132,"pull_request_authors_count":10,"issue_authors_count":11,"avg_comments_per_issue":3.6363636363636362,"avg_comments_per_pull_request":0.6758620689655173,"merged_pull_requests_count":126,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":3,"past_year_pull_requests_count":25,"past_year_avg_time_to_close_issue":4382892.5,"past_year_avg_time_to_close_pull_request":725034.3478260869,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":9.0,"past_year_avg_comments_per_pull_request":1.04,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":20,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":40,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/python311Packages.argon2-cffi-bindings/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/python311Packages.argon2-cffi-bindings/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/python311Packages.argon2-cffi-bindings/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/python311Packages.argon2-cffi-bindings/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/python311Packages.argon2-cffi-bindings/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages/python311Packages.argon2-cffi-bindings/codemeta","maintainers":[],"registry":{"name":"nixpkgs-24.11","url":"https://channels.nixos.org/nixos-24.11","ecosystem":"nixpkgs","default":false,"packages_count":121983,"maintainers_count":3777,"namespaces_count":0,"keywords_count":739,"github":"NixOS","metadata":{"funded_packages_count":3380},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.059Z","updated_at":"2026-08-25T05:04:34.674Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.11/namespaces"}},{"id":13952905,"name":"python-argon2-cffi-bindings","ecosystem":"guix","description":"Low-level CFFI bindings for Argon2","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"expat","normalized_licenses":["Other"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-03-02T19:43:30.209Z","latest_release_published_at":"2026-03-02T19:43:30.209Z","latest_release_number":"25.1.0","last_synced_at":"2026-04-27T16:43:12.506Z","created_at":"2026-03-02T19:43:30.036Z","updated_at":"2026-08-08T19:06:19.782Z","registry_url":"https://packages.guix.gnu.org/packages/python-argon2-cffi-bindings/25.1.0/","install_command":"guix install python-argon2-cffi-bindings","documentation_url":"https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/python-crypto.scm#n1713","metadata":{"location":"gnu/packages/python-crypto.scm:1713","variable_name":"python-argon2-cffi-bindings"},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-06T06:07:34.000Z","size":263,"stargazers_count":20,"open_issues_count":3,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-08T10:44:08.120Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-06T06:08:18.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36414931,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-08T02:00:08.763Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hynek","name":"Hynek Schlawack","uuid":"41240","kind":"user","description":"","email":"hs@ox.cx","website":"https://hynek.me/about/","location":"Berlin","twitter":"hynek","company":"Variomedia AG","icon_url":"https://avatars.githubusercontent.com/u/41240?u=c77db9d353f9df8435a5bfcdaab2121c047f0456\u0026v=4","repositories_count":40,"last_synced_at":"2026-08-05T12:08:05.838Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/hynek","funding_links":["https://github.com/sponsors/hynek"],"total_stars":9713,"followers":1927,"following":6,"created_at":"2022-11-02T16:24:56.789Z","updated_at":"2026-08-05T12:08:05.940Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek/repositories"},"tags":[{"name":"25.1.0","sha":"66f5b2340ef25699504bcc0f08eadcbefaf219aa","kind":"tag","published_at":"2025-07-30T09:43:43.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/25.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/25.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@25.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0/manifests"},{"name":"21.2.0","sha":"2bf609f920d83a081a5787425b9eb1c95ecf6e0c","kind":"tag","published_at":"2021-12-01T08:44:02.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.2.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0/manifests"},{"name":"21.1.0","sha":"78d28409e22144f152bd408ccc2e2dd6efee2466","kind":"tag","published_at":"2021-11-28T10:18:23.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0/manifests"}]},"repo_metadata_updated_at":"2026-08-08T19:06:19.782Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:guix/python-argon2-cffi-bindings","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/guix/python-argon2-cffi-bindings","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/guix/python-argon2-cffi-bindings","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/guix/python-argon2-cffi-bindings/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-08T05:37:05.092Z","issues_count":11,"pull_requests_count":145,"avg_time_to_close_issue":2202977.75,"avg_time_to_close_pull_request":402672.45454545453,"issues_closed_count":8,"pull_requests_closed_count":132,"pull_request_authors_count":10,"issue_authors_count":11,"avg_comments_per_issue":3.6363636363636362,"avg_comments_per_pull_request":0.6758620689655173,"merged_pull_requests_count":126,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":3,"past_year_pull_requests_count":25,"past_year_avg_time_to_close_issue":4382892.5,"past_year_avg_time_to_close_pull_request":725034.3478260869,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":9.0,"past_year_avg_comments_per_pull_request":1.04,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":20,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":40,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/python-argon2-cffi-bindings/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/python-argon2-cffi-bindings/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/python-argon2-cffi-bindings/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/python-argon2-cffi-bindings/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/python-argon2-cffi-bindings/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/python-argon2-cffi-bindings/codemeta","maintainers":[],"registry":{"name":"guix","url":"https://guix.gnu.org","ecosystem":"guix","default":true,"packages_count":32342,"maintainers_count":0,"namespaces_count":0,"keywords_count":1654,"github":"guix-mirror","metadata":{"funded_packages_count":1231},"icon_url":"https://github.com/guix-mirror.png","created_at":"2026-03-02T16:23:46.981Z","updated_at":"2026-08-25T05:05:02.543Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/guix/namespaces"}},{"id":13008081,"name":"py3-argon2-cffi-bindings","ecosystem":"alpine","description":"Low-level Python CFFI Bindings for Argon2","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_number":"21.2.0-r4","last_synced_at":"2026-04-12T18:03:10.616Z","created_at":"2026-01-31T00:30:17.742Z","updated_at":"2026-08-08T19:06:19.820Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.23/community/x86_64/py3-argon2-cffi-bindings","install_command":"apk add py3-argon2-cffi-bindings","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-06T06:07:34.000Z","size":263,"stargazers_count":20,"open_issues_count":3,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-08T10:44:08.120Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-06T06:08:18.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36414931,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-08T02:00:08.763Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-08T19:06:19.820Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/py3-argon2-cffi-bindings?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.23","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-argon2-cffi-bindings","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-argon2-cffi-bindings","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-argon2-cffi-bindings/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-08T05:37:05.092Z","issues_count":11,"pull_requests_count":145,"avg_time_to_close_issue":2202977.75,"avg_time_to_close_pull_request":402672.45454545453,"issues_closed_count":8,"pull_requests_closed_count":132,"pull_request_authors_count":10,"issue_authors_count":11,"avg_comments_per_issue":3.6363636363636362,"avg_comments_per_pull_request":0.6758620689655173,"merged_pull_requests_count":126,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":3,"past_year_pull_requests_count":25,"past_year_avg_time_to_close_issue":4382892.5,"past_year_avg_time_to_close_pull_request":725034.3478260869,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":9.0,"past_year_avg_comments_per_pull_request":1.04,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":20,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":40,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/py3-argon2-cffi-bindings/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/py3-argon2-cffi-bindings/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/py3-argon2-cffi-bindings/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/py3-argon2-cffi-bindings/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/py3-argon2-cffi-bindings/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/py3-argon2-cffi-bindings/codemeta","maintainers":[{"uuid":"alpine@ptrcnull.me","login":null,"name":"Patrycja Rosa","email":"alpine@ptrcnull.me","url":"https://pkgs.alpinelinux.org/packages?maintainer=Patrycja Rosa","packages_count":487,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Patrycja Rosa","role":null,"created_at":"2026-03-04T03:14:27.805Z","updated_at":"2026-03-04T03:14:27.805Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/maintainers/alpine@ptrcnull.me/packages"}],"registry":{"name":"alpine-v3.23","url":"https://pkgs.alpinelinux.org/packages?branch=v3.23","ecosystem":"alpine","default":false,"packages_count":27576,"maintainers_count":428,"namespaces_count":2,"keywords_count":189,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1051},"icon_url":"https://github.com/alpinelinux.png","created_at":"2026-01-24T14:35:50.739Z","updated_at":"2026-08-25T05:04:59.407Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/namespaces"}},{"id":13293829,"name":"python310Packages.argon2-cffi-bindings","ecosystem":"nixpkgs","description":"Low-level CFFI bindings for Argon2","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":["python"],"namespace":null,"versions_count":1,"first_release_published_at":"2026-02-02T06:21:33.148Z","latest_release_published_at":"2026-02-02T06:21:33.148Z","latest_release_number":"21.2.0","last_synced_at":"2026-03-08T23:24:55.417Z","created_at":"2026-02-02T06:21:31.129Z","updated_at":"2026-08-08T19:06:19.829Z","registry_url":"https://search.nixos.org/packages?channel=23.11\u0026query=python310Packages.argon2-cffi-bindings","install_command":"nix-env -iA nixpkgs.python310Packages.argon2-cffi-bindings","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-23.11/pkgs/development/python-modules/argon2-cffi-bindings/default.nix#L36","metadata":{"nix_attribute":"python3.10-argon2-cffi-bindings-21.2.0","position":"pkgs/development/python-modules/argon2-cffi-bindings/default.nix:36","platforms":["aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux","x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin","i686-cygwin","x86_64-cygwin","x86_64-windows","i686-windows"],"broken":false,"insecure":false,"unfree":false,"outputs":["dist","out"],"upstream_ecosystem":"pypi","upstream_name":"argon2-cffi-bindings","upstream_purl":"pkg:pypi/argon2-cffi-bindings"},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-06T06:07:34.000Z","size":263,"stargazers_count":20,"open_issues_count":3,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-08T10:44:08.120Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-06T06:08:18.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36414931,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-08T02:00:08.763Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-08T19:06:19.829Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/python310Packages.argon2-cffi-bindings?channel=23.11\u0026repository_url=https://channels.nixos.org/nixos-23.11","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/python310Packages.argon2-cffi-bindings","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/python310Packages.argon2-cffi-bindings","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/python310Packages.argon2-cffi-bindings/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-08T05:37:05.092Z","issues_count":11,"pull_requests_count":145,"avg_time_to_close_issue":2202977.75,"avg_time_to_close_pull_request":402672.45454545453,"issues_closed_count":8,"pull_requests_closed_count":132,"pull_request_authors_count":10,"issue_authors_count":11,"avg_comments_per_issue":3.6363636363636362,"avg_comments_per_pull_request":0.6758620689655173,"merged_pull_requests_count":126,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":3,"past_year_pull_requests_count":25,"past_year_avg_time_to_close_issue":4382892.5,"past_year_avg_time_to_close_pull_request":725034.3478260869,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":9.0,"past_year_avg_comments_per_pull_request":1.04,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":20,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":40,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/python310Packages.argon2-cffi-bindings/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/python310Packages.argon2-cffi-bindings/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/python310Packages.argon2-cffi-bindings/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/python310Packages.argon2-cffi-bindings/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/python310Packages.argon2-cffi-bindings/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages/python310Packages.argon2-cffi-bindings/codemeta","maintainers":[{"uuid":"jonringer","login":null,"name":"Jonathan Ringer","email":"jonringer117@gmail.com","url":"https://github.com/jonringer","packages_count":436,"html_url":null,"role":null,"created_at":"2026-03-08T23:24:55.569Z","updated_at":"2026-03-08T23:24:55.569Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/maintainers/jonringer/packages"}],"registry":{"name":"nixpkgs-23.11","url":"https://channels.nixos.org/nixos-23.11","ecosystem":"nixpkgs","default":false,"packages_count":108178,"maintainers_count":2997,"namespaces_count":0,"keywords_count":569,"github":"NixOS","metadata":{"funded_packages_count":3095},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.577Z","updated_at":"2026-08-25T05:04:39.690Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-23.11/namespaces"}},{"id":14554500,"name":"security/py-argon2-cffi-bindings","ecosystem":"openbsd","description":"argon2 password hashing for Python","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":[],"namespace":"security","versions_count":1,"first_release_published_at":"2026-04-25T13:29:14.000Z","latest_release_published_at":"2026-04-25T13:29:14.000Z","latest_release_number":"25.1.0","last_synced_at":"2026-05-28T02:54:56.868Z","created_at":"2026-05-28T02:54:56.605Z","updated_at":"2026-08-08T19:06:19.892Z","registry_url":"https://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/security/py-argon2-cffi-bindings/","install_command":"pkg_add py3-argon2-cffi-bindings-25.1.0","documentation_url":null,"metadata":{"pkgstem":"py3-argon2-cffi-bindings","fullpkgname":"py3-argon2-cffi-bindings-25.1.0","subpackage":"-"},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-06T06:07:34.000Z","size":263,"stargazers_count":20,"open_issues_count":3,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-08T10:44:08.120Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-06T06:08:18.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36414931,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-08T02:00:08.763Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-08T19:06:19.891Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:openbsd/security/py-argon2-cffi-bindings?arch=amd64","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/openbsd/security/py-argon2-cffi-bindings","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/openbsd/security/py-argon2-cffi-bindings","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/openbsd/security/py-argon2-cffi-bindings/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-08T05:37:05.092Z","issues_count":11,"pull_requests_count":145,"avg_time_to_close_issue":2202977.75,"avg_time_to_close_pull_request":402672.45454545453,"issues_closed_count":8,"pull_requests_closed_count":132,"pull_request_authors_count":10,"issue_authors_count":11,"avg_comments_per_issue":3.6363636363636362,"avg_comments_per_pull_request":0.6758620689655173,"merged_pull_requests_count":126,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":3,"past_year_pull_requests_count":25,"past_year_avg_time_to_close_issue":4382892.5,"past_year_avg_time_to_close_pull_request":725034.3478260869,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":9.0,"past_year_avg_comments_per_pull_request":1.04,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":20,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":40,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/openbsd-7.9-amd64/packages/security%2Fpy-argon2-cffi-bindings/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/openbsd-7.9-amd64/packages/security%2Fpy-argon2-cffi-bindings/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/openbsd-7.9-amd64/packages/security%2Fpy-argon2-cffi-bindings/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/openbsd-7.9-amd64/packages/security%2Fpy-argon2-cffi-bindings/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/openbsd-7.9-amd64/packages/security%2Fpy-argon2-cffi-bindings/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/openbsd-7.9-amd64/packages/security%2Fpy-argon2-cffi-bindings/codemeta","maintainers":[{"uuid":"ports@openbsd.org","login":null,"name":"The OpenBSD ports mailing-list","email":"ports@openbsd.org","url":null,"packages_count":6235,"html_url":null,"role":null,"created_at":"2026-05-28T02:54:57.108Z","updated_at":"2026-05-28T02:54:57.108Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/openbsd-7.9-amd64/maintainers/ports@openbsd.org/packages"}],"registry":{"name":"openbsd-7.9-amd64","url":"https://cdn.openbsd.org/pub/OpenBSD/7.9/packages/amd64","ecosystem":"openbsd","default":true,"packages_count":11808,"maintainers_count":274,"namespaces_count":42,"keywords_count":23,"github":"openbsd","metadata":{"arch":"amd64","sqlports_version":"7.54","funded_packages_count":219},"icon_url":"https://github.com/openbsd.png","created_at":"2026-05-26T11:21:10.750Z","updated_at":"2026-08-25T05:00:07.823Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/openbsd-7.9-amd64/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/openbsd-7.9-amd64/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/openbsd-7.9-amd64/namespaces"}},{"id":10343677,"name":"py3-argon2-cffi-bindings-pyc","ecosystem":"alpine","description":"Precompiled Python bytecode for py3-argon2-cffi-bindings","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_number":"21.2.0-r4","last_synced_at":"2026-04-08T13:08:51.401Z","created_at":"2024-06-11T09:29:06.228Z","updated_at":"2026-08-08T19:06:19.903Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.20/community/x86_64/py3-argon2-cffi-bindings-pyc","install_command":"apk add py3-argon2-cffi-bindings-pyc","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-06T06:07:34.000Z","size":263,"stargazers_count":20,"open_issues_count":3,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-08T10:44:08.120Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-06T06:08:18.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36414931,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-08T02:00:08.763Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hynek","name":"Hynek Schlawack","uuid":"41240","kind":"user","description":"","email":"hs@ox.cx","website":"https://hynek.me/about/","location":"Berlin","twitter":"hynek","company":"Variomedia AG","icon_url":"https://avatars.githubusercontent.com/u/41240?u=c77db9d353f9df8435a5bfcdaab2121c047f0456\u0026v=4","repositories_count":40,"last_synced_at":"2026-08-05T12:08:05.838Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/hynek","funding_links":["https://github.com/sponsors/hynek"],"total_stars":9713,"followers":1927,"following":6,"created_at":"2022-11-02T16:24:56.789Z","updated_at":"2026-08-05T12:08:05.940Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek/repositories"},"tags":[{"name":"25.1.0","sha":"66f5b2340ef25699504bcc0f08eadcbefaf219aa","kind":"tag","published_at":"2025-07-30T09:43:43.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/25.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/25.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@25.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0/manifests"},{"name":"21.2.0","sha":"2bf609f920d83a081a5787425b9eb1c95ecf6e0c","kind":"tag","published_at":"2021-12-01T08:44:02.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.2.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0/manifests"},{"name":"21.1.0","sha":"78d28409e22144f152bd408ccc2e2dd6efee2466","kind":"tag","published_at":"2021-11-28T10:18:23.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0/manifests"}]},"repo_metadata_updated_at":"2026-08-08T19:06:19.902Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/py3-argon2-cffi-bindings-pyc?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.20","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-argon2-cffi-bindings-pyc","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-argon2-cffi-bindings-pyc","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-argon2-cffi-bindings-pyc/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-08T05:37:05.092Z","issues_count":11,"pull_requests_count":145,"avg_time_to_close_issue":2202977.75,"avg_time_to_close_pull_request":402672.45454545453,"issues_closed_count":8,"pull_requests_closed_count":132,"pull_request_authors_count":10,"issue_authors_count":11,"avg_comments_per_issue":3.6363636363636362,"avg_comments_per_pull_request":0.6758620689655173,"merged_pull_requests_count":126,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":3,"past_year_pull_requests_count":25,"past_year_avg_time_to_close_issue":4382892.5,"past_year_avg_time_to_close_pull_request":725034.3478260869,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":9.0,"past_year_avg_comments_per_pull_request":1.04,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":20,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":40,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/py3-argon2-cffi-bindings-pyc/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/py3-argon2-cffi-bindings-pyc/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/py3-argon2-cffi-bindings-pyc/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/py3-argon2-cffi-bindings-pyc/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/py3-argon2-cffi-bindings-pyc/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/py3-argon2-cffi-bindings-pyc/codemeta","maintainers":[{"uuid":"alpine@ptrcnull.me","login":null,"name":"team/rust","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=team/rust","packages_count":398,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=team/rust","role":null,"created_at":"2024-06-12T00:54:55.682Z","updated_at":"2024-06-12T00:54:55.682Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/maintainers/alpine@ptrcnull.me/packages"}],"registry":{"name":"alpine-v3.20","url":"https://pkgs.alpinelinux.org/packages?branch=v3.20","ecosystem":"alpine","default":false,"packages_count":24162,"maintainers_count":405,"namespaces_count":2,"keywords_count":4251,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1543},"icon_url":"https://github.com/alpinelinux.png","created_at":"2024-06-07T11:51:39.915Z","updated_at":"2026-08-24T05:06:36.705Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/namespaces"}},{"id":5285145,"name":"argon2-cffi-bindings","ecosystem":"conda","description":"argon2-cffi-bindings provides low-level CFFI bindings to the Argon2 password hashing algorithm including a vendored version of them.","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":[],"namespace":null,"versions_count":2,"first_release_published_at":"2022-02-11T04:23:21.000Z","latest_release_published_at":"2025-09-15T08:29:57.000Z","latest_release_number":"25.1.0","last_synced_at":"2026-03-15T11:07:30.372Z","created_at":"2022-10-03T15:42:09.499Z","updated_at":"2026-08-08T19:06:19.910Z","registry_url":"https://anaconda.org/anaconda/argon2-cffi-bindings","install_command":"conda install -c anaconda argon2-cffi-bindings","documentation_url":null,"metadata":{},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-06T06:07:34.000Z","size":263,"stargazers_count":20,"open_issues_count":3,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-08T10:44:08.120Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-06T06:08:18.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36414931,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-08T02:00:08.763Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hynek","name":"Hynek Schlawack","uuid":"41240","kind":"user","description":"","email":"hs@ox.cx","website":"https://hynek.me/about/","location":"Berlin","twitter":"hynek","company":"Variomedia AG","icon_url":"https://avatars.githubusercontent.com/u/41240?u=c77db9d353f9df8435a5bfcdaab2121c047f0456\u0026v=4","repositories_count":40,"last_synced_at":"2026-08-05T12:08:05.838Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/hynek","funding_links":["https://github.com/sponsors/hynek"],"total_stars":9713,"followers":1927,"following":6,"created_at":"2022-11-02T16:24:56.789Z","updated_at":"2026-08-05T12:08:05.940Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek/repositories"},"tags":[{"name":"25.1.0","sha":"66f5b2340ef25699504bcc0f08eadcbefaf219aa","kind":"tag","published_at":"2025-07-30T09:43:43.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/25.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/25.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@25.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0/manifests"},{"name":"21.2.0","sha":"2bf609f920d83a081a5787425b9eb1c95ecf6e0c","kind":"tag","published_at":"2021-12-01T08:44:02.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.2.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0/manifests"},{"name":"21.1.0","sha":"78d28409e22144f152bd408ccc2e2dd6efee2466","kind":"tag","published_at":"2021-11-28T10:18:23.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0/manifests"}]},"repo_metadata_updated_at":"2026-08-08T19:06:19.910Z","dependent_packages_count":1,"downloads":370228,"downloads_period":"total","dependent_repos_count":242,"rankings":{"downloads":null,"dependent_repos_count":12.231954092419208,"dependent_packages_count":30.683192261185006,"stargazers_count":56.418000604047116,"forks_count":56.538810027182116,"docker_downloads_count":null,"average":38.96798924620836},"purl":"pkg:conda/argon2-cffi-bindings","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/conda/argon2-cffi-bindings","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/conda/argon2-cffi-bindings","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/conda/argon2-cffi-bindings/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-08T05:37:05.092Z","issues_count":11,"pull_requests_count":145,"avg_time_to_close_issue":2202977.75,"avg_time_to_close_pull_request":402672.45454545453,"issues_closed_count":8,"pull_requests_closed_count":132,"pull_request_authors_count":10,"issue_authors_count":11,"avg_comments_per_issue":3.6363636363636362,"avg_comments_per_pull_request":0.6758620689655173,"merged_pull_requests_count":126,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":3,"past_year_pull_requests_count":25,"past_year_avg_time_to_close_issue":4382892.5,"past_year_avg_time_to_close_pull_request":725034.3478260869,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":9.0,"past_year_avg_comments_per_pull_request":1.04,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":20,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":40,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/argon2-cffi-bindings/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/argon2-cffi-bindings/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/argon2-cffi-bindings/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/argon2-cffi-bindings/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/argon2-cffi-bindings/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/argon2-cffi-bindings/codemeta","maintainers":[],"registry":{"name":"anaconda.org","url":"https://anaconda.org","ecosystem":"conda","default":true,"packages_count":5475,"maintainers_count":0,"namespaces_count":0,"keywords_count":3313,"github":"Anaconda","metadata":{"kind":"anaconda","key":"Main","api":"https://repo.ananconda.com","funded_packages_count":852},"icon_url":"https://github.com/Anaconda.png","created_at":"2022-10-03T15:37:08.736Z","updated_at":"2026-08-24T05:06:29.101Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/namespaces"}},{"id":13008082,"name":"py3-argon2-cffi-bindings-pyc","ecosystem":"alpine","description":"Precompiled Python bytecode for py3-argon2-cffi-bindings","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_number":"21.2.0-r4","last_synced_at":"2026-04-12T18:03:14.410Z","created_at":"2026-01-31T00:30:18.554Z","updated_at":"2026-08-08T19:06:19.906Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.23/community/x86_64/py3-argon2-cffi-bindings-pyc","install_command":"apk add py3-argon2-cffi-bindings-pyc","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-06T06:07:34.000Z","size":263,"stargazers_count":20,"open_issues_count":3,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-08T10:44:08.120Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-06T06:08:18.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36414931,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-08T02:00:08.763Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-08T19:06:19.906Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/py3-argon2-cffi-bindings-pyc?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.23","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-argon2-cffi-bindings-pyc","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-argon2-cffi-bindings-pyc","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-argon2-cffi-bindings-pyc/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-08T05:37:05.092Z","issues_count":11,"pull_requests_count":145,"avg_time_to_close_issue":2202977.75,"avg_time_to_close_pull_request":402672.45454545453,"issues_closed_count":8,"pull_requests_closed_count":132,"pull_request_authors_count":10,"issue_authors_count":11,"avg_comments_per_issue":3.6363636363636362,"avg_comments_per_pull_request":0.6758620689655173,"merged_pull_requests_count":126,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":3,"past_year_pull_requests_count":25,"past_year_avg_time_to_close_issue":4382892.5,"past_year_avg_time_to_close_pull_request":725034.3478260869,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":9.0,"past_year_avg_comments_per_pull_request":1.04,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":20,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":40,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/py3-argon2-cffi-bindings-pyc/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/py3-argon2-cffi-bindings-pyc/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/py3-argon2-cffi-bindings-pyc/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/py3-argon2-cffi-bindings-pyc/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/py3-argon2-cffi-bindings-pyc/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages/py3-argon2-cffi-bindings-pyc/codemeta","maintainers":[{"uuid":"alpine@ptrcnull.me","login":null,"name":"Patrycja Rosa","email":"alpine@ptrcnull.me","url":"https://pkgs.alpinelinux.org/packages?maintainer=Patrycja Rosa","packages_count":487,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Patrycja Rosa","role":null,"created_at":"2026-03-04T03:14:28.738Z","updated_at":"2026-03-04T03:14:28.738Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/maintainers/alpine@ptrcnull.me/packages"}],"registry":{"name":"alpine-v3.23","url":"https://pkgs.alpinelinux.org/packages?branch=v3.23","ecosystem":"alpine","default":false,"packages_count":27576,"maintainers_count":428,"namespaces_count":2,"keywords_count":189,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1051},"icon_url":"https://github.com/alpinelinux.png","created_at":"2026-01-24T14:35:50.739Z","updated_at":"2026-08-25T05:04:59.407Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.23/namespaces"}},{"id":10343673,"name":"py3-argon2-cffi-bindings","ecosystem":"alpine","description":"Low-level Python CFFI Bindings for Argon2","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_number":"21.2.0-r4","last_synced_at":"2026-04-08T13:07:43.593Z","created_at":"2024-06-11T09:29:03.175Z","updated_at":"2026-08-08T19:06:20.144Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.20/community/x86_64/py3-argon2-cffi-bindings","install_command":"apk add py3-argon2-cffi-bindings","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-06T06:07:34.000Z","size":263,"stargazers_count":20,"open_issues_count":3,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-08T10:44:08.120Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-06T06:08:18.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36414931,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-08T02:00:08.763Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hynek","name":"Hynek Schlawack","uuid":"41240","kind":"user","description":"","email":"hs@ox.cx","website":"https://hynek.me/about/","location":"Berlin","twitter":"hynek","company":"Variomedia AG","icon_url":"https://avatars.githubusercontent.com/u/41240?u=c77db9d353f9df8435a5bfcdaab2121c047f0456\u0026v=4","repositories_count":40,"last_synced_at":"2026-08-05T12:08:05.838Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/hynek","funding_links":["https://github.com/sponsors/hynek"],"total_stars":9713,"followers":1927,"following":6,"created_at":"2022-11-02T16:24:56.789Z","updated_at":"2026-08-05T12:08:05.940Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek/repositories"},"tags":[{"name":"25.1.0","sha":"66f5b2340ef25699504bcc0f08eadcbefaf219aa","kind":"tag","published_at":"2025-07-30T09:43:43.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/25.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/25.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@25.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0/manifests"},{"name":"21.2.0","sha":"2bf609f920d83a081a5787425b9eb1c95ecf6e0c","kind":"tag","published_at":"2021-12-01T08:44:02.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.2.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0/manifests"},{"name":"21.1.0","sha":"78d28409e22144f152bd408ccc2e2dd6efee2466","kind":"tag","published_at":"2021-11-28T10:18:23.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0/manifests"}]},"repo_metadata_updated_at":"2026-08-08T19:06:20.144Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/py3-argon2-cffi-bindings?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.20","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-argon2-cffi-bindings","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-argon2-cffi-bindings","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-argon2-cffi-bindings/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-08T05:37:05.092Z","issues_count":11,"pull_requests_count":145,"avg_time_to_close_issue":2202977.75,"avg_time_to_close_pull_request":402672.45454545453,"issues_closed_count":8,"pull_requests_closed_count":132,"pull_request_authors_count":10,"issue_authors_count":11,"avg_comments_per_issue":3.6363636363636362,"avg_comments_per_pull_request":0.6758620689655173,"merged_pull_requests_count":126,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":3,"past_year_pull_requests_count":25,"past_year_avg_time_to_close_issue":4382892.5,"past_year_avg_time_to_close_pull_request":725034.3478260869,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":9.0,"past_year_avg_comments_per_pull_request":1.04,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":20,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":40,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/py3-argon2-cffi-bindings/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/py3-argon2-cffi-bindings/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/py3-argon2-cffi-bindings/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/py3-argon2-cffi-bindings/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/py3-argon2-cffi-bindings/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages/py3-argon2-cffi-bindings/codemeta","maintainers":[{"uuid":"alpine@ptrcnull.me","login":null,"name":"team/rust","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=team/rust","packages_count":398,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=team/rust","role":null,"created_at":"2024-06-12T00:54:53.853Z","updated_at":"2024-06-12T00:54:53.853Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/maintainers/alpine@ptrcnull.me/packages"}],"registry":{"name":"alpine-v3.20","url":"https://pkgs.alpinelinux.org/packages?branch=v3.20","ecosystem":"alpine","default":false,"packages_count":24162,"maintainers_count":405,"namespaces_count":2,"keywords_count":4251,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1543},"icon_url":"https://github.com/alpinelinux.png","created_at":"2024-06-07T11:51:39.915Z","updated_at":"2026-08-24T05:06:36.705Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.20/namespaces"}},{"id":8676163,"name":"py3-argon2-cffi-bindings","ecosystem":"alpine","description":"Low-level Python CFFI Bindings for Argon2","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2023-07-29T09:00:08.000Z","latest_release_published_at":"2023-07-29T09:00:08.000Z","latest_release_number":"21.2.0-r2","last_synced_at":"2026-04-08T14:04:20.266Z","created_at":"2023-12-20T10:26:07.961Z","updated_at":"2026-04-08T14:04:20.266Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.19/community/x86_64/py3-argon2-cffi-bindings","install_command":"apk add py3-argon2-cffi-bindings","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{},"repo_metadata_updated_at":null,"dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/py3-argon2-cffi-bindings?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.19","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-argon2-cffi-bindings","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-argon2-cffi-bindings","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-argon2-cffi-bindings/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/py3-argon2-cffi-bindings/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/py3-argon2-cffi-bindings/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/py3-argon2-cffi-bindings/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/py3-argon2-cffi-bindings/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/py3-argon2-cffi-bindings/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/py3-argon2-cffi-bindings/codemeta","maintainers":[],"registry":{"name":"alpine-v3.19","url":"https://pkgs.alpinelinux.org/packages?branch=v3.19","ecosystem":"alpine","default":false,"packages_count":23031,"maintainers_count":392,"namespaces_count":2,"keywords_count":3176,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":960},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-12-20T09:51:56.346Z","updated_at":"2026-08-25T05:07:15.581Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/namespaces"}},{"id":12859171,"name":"python313Packages.argon2-cffi-bindings","ecosystem":"nixpkgs","description":"Low-level CFFI bindings for Argon2","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":["python"],"namespace":null,"versions_count":1,"first_release_published_at":"2026-01-27T00:55:19.291Z","latest_release_published_at":"2026-01-27T00:55:19.291Z","latest_release_number":"25.1.0","last_synced_at":"2026-08-11T03:10:51.920Z","created_at":"2026-01-27T00:55:19.082Z","updated_at":"2026-08-23T22:08:45.379Z","registry_url":"https://search.nixos.org/packages?channel=unstable\u0026query=python313Packages.argon2-cffi-bindings","install_command":"nix-env -iA nixpkgs.python313Packages.argon2-cffi-bindings","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-unstable/pkgs/development/python-modules/argon2-cffi-bindings/default.nix#L40","metadata":{"nix_attribute":"python3.13-argon2-cffi-bindings-25.1.0","position":"pkgs/development/python-modules/argon2-cffi-bindings/default.nix:40","platforms":["aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux","x86_64-darwin","aarch64-darwin","aarch64-windows","x86_64-windows","i686-windows","i686-freebsd","x86_64-freebsd","aarch64-freebsd"],"broken":false,"insecure":false,"unfree":false,"outputs":["dist","out"],"upstream_ecosystem":"pypi","upstream_name":"argon2-cffi-bindings","upstream_purl":"pkg:pypi/argon2-cffi-bindings"},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-20T08:06:46.000Z","size":285,"stargazers_count":20,"open_issues_count":4,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-23T14:40:54.963Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-20T08:09:08.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36862457,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-23T02:00:05.822Z","response_time":128,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hynek","name":"Hynek Schlawack","uuid":"41240","kind":"user","description":"","email":"hs@ox.cx","website":"https://hynek.me/about/","location":"Berlin","twitter":"hynek","company":"Variomedia AG","icon_url":"https://avatars.githubusercontent.com/u/41240?u=c77db9d353f9df8435a5bfcdaab2121c047f0456\u0026v=4","repositories_count":41,"last_synced_at":"2026-08-20T05:49:45.399Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/hynek","funding_links":["https://github.com/sponsors/hynek"],"total_stars":9746,"followers":1927,"following":6,"created_at":"2022-11-02T16:24:56.789Z","updated_at":"2026-08-20T05:49:45.593Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek/repositories"},"tags":[{"name":"26.1.0","sha":"fb50afcbb80aee5e87d6f8b1d15e7238321387c9","kind":"tag","published_at":"2026-08-20T07:07:16.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/26.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/26.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@26.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/26.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/26.1.0/manifests"},{"name":"25.1.0","sha":"66f5b2340ef25699504bcc0f08eadcbefaf219aa","kind":"tag","published_at":"2025-07-30T09:43:43.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/25.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/25.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@25.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0/manifests"},{"name":"21.2.0","sha":"2bf609f920d83a081a5787425b9eb1c95ecf6e0c","kind":"tag","published_at":"2021-12-01T08:44:02.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.2.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0/manifests"},{"name":"21.1.0","sha":"78d28409e22144f152bd408ccc2e2dd6efee2466","kind":"tag","published_at":"2021-11-28T10:18:23.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0/manifests"}]},"repo_metadata_updated_at":"2026-08-23T22:08:45.379Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":10.013072238900092,"forks_count":7.370377912514534,"docker_downloads_count":null,"average":4.345862537853656},"purl":"pkg:nix/python313Packages.argon2-cffi-bindings?channel=unstable","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/python313Packages.argon2-cffi-bindings","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/python313Packages.argon2-cffi-bindings","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/python313Packages.argon2-cffi-bindings/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-23T13:09:00.747Z","issues_count":14,"pull_requests_count":146,"avg_time_to_close_issue":3205857.0,"avg_time_to_close_pull_request":422966.4962406015,"issues_closed_count":9,"pull_requests_closed_count":133,"pull_request_authors_count":10,"issue_authors_count":14,"avg_comments_per_issue":3.7857142857142856,"avg_comments_per_pull_request":0.726027397260274,"merged_pull_requests_count":127,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":6,"past_year_pull_requests_count":26,"past_year_avg_time_to_close_issue":6664892.0,"past_year_avg_time_to_close_pull_request":824065.4166666666,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":24,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":6.666666666666667,"past_year_avg_comments_per_pull_request":1.3076923076923077,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":21,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":41,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/python313Packages.argon2-cffi-bindings/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/python313Packages.argon2-cffi-bindings/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/python313Packages.argon2-cffi-bindings/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/python313Packages.argon2-cffi-bindings/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/python313Packages.argon2-cffi-bindings/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/python313Packages.argon2-cffi-bindings/codemeta","maintainers":[],"registry":{"name":"nixpkgs-unstable","url":"https://channels.nixos.org/nixos-unstable","ecosystem":"nixpkgs","default":true,"packages_count":153806,"maintainers_count":4905,"namespaces_count":0,"keywords_count":3244,"github":"NixOS","metadata":{"funded_packages_count":6032},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:52.762Z","updated_at":"2026-08-25T05:00:24.061Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/namespaces"}},{"id":14930485,"name":"github.com/hynek/argon2-cffi-bindings","ecosystem":"go","description":null,"homepage":null,"licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-08-06T06:07:32.000Z","latest_release_published_at":"2026-08-06T06:07:32.000Z","latest_release_number":"v0.0.0-20260806060732-04ace1a695f4","last_synced_at":"2026-08-24T13:46:23.148Z","created_at":"2026-08-12T00:32:28.068Z","updated_at":"2026-08-24T13:46:23.148Z","registry_url":"https://pkg.go.dev/github.com/hynek/argon2-cffi-bindings","install_command":"go get github.com/hynek/argon2-cffi-bindings","documentation_url":"https://pkg.go.dev/github.com/hynek/argon2-cffi-bindings#section-documentation","metadata":{},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-20T08:06:46.000Z","size":285,"stargazers_count":20,"open_issues_count":4,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-23T14:40:54.963Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-20T08:09:08.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36862457,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-23T02:00:05.822Z","response_time":128,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hynek","name":"Hynek Schlawack","uuid":"41240","kind":"user","description":"","email":"hs@ox.cx","website":"https://hynek.me/about/","location":"Berlin","twitter":"hynek","company":"Variomedia AG","icon_url":"https://avatars.githubusercontent.com/u/41240?u=c77db9d353f9df8435a5bfcdaab2121c047f0456\u0026v=4","repositories_count":41,"last_synced_at":"2026-08-20T05:49:45.399Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/hynek","funding_links":["https://github.com/sponsors/hynek"],"total_stars":9746,"followers":1927,"following":6,"created_at":"2022-11-02T16:24:56.789Z","updated_at":"2026-08-20T05:49:45.593Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek/repositories"},"tags":[{"name":"26.1.0","sha":"fb50afcbb80aee5e87d6f8b1d15e7238321387c9","kind":"tag","published_at":"2026-08-20T07:07:16.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/26.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/26.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@26.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/26.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/26.1.0/manifests"},{"name":"25.1.0","sha":"66f5b2340ef25699504bcc0f08eadcbefaf219aa","kind":"tag","published_at":"2025-07-30T09:43:43.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/25.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/25.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@25.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0/manifests"},{"name":"21.2.0","sha":"2bf609f920d83a081a5787425b9eb1c95ecf6e0c","kind":"tag","published_at":"2021-12-01T08:44:02.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.2.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0/manifests"},{"name":"21.1.0","sha":"78d28409e22144f152bd408ccc2e2dd6efee2466","kind":"tag","published_at":"2021-11-28T10:18:23.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0/manifests"}]},"repo_metadata_updated_at":"2026-08-24T00:20:01.472Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":4.796011385411047,"dependent_packages_count":4.494101325906062,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.6450563556585545},"purl":"pkg:golang/github.com/hynek/argon2-cffi-bindings","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/hynek/argon2-cffi-bindings","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/hynek/argon2-cffi-bindings","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/hynek/argon2-cffi-bindings/dependencies","status":"removed","funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-23T13:09:00.747Z","issues_count":14,"pull_requests_count":146,"avg_time_to_close_issue":3205857.0,"avg_time_to_close_pull_request":422966.4962406015,"issues_closed_count":9,"pull_requests_closed_count":133,"pull_request_authors_count":10,"issue_authors_count":14,"avg_comments_per_issue":3.7857142857142856,"avg_comments_per_pull_request":0.726027397260274,"merged_pull_requests_count":127,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":6,"past_year_pull_requests_count":26,"past_year_avg_time_to_close_issue":6664892.0,"past_year_avg_time_to_close_pull_request":824065.4166666666,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":24,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":6.666666666666667,"past_year_avg_comments_per_pull_request":1.3076923076923077,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":21,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":41,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fhynek%2Fargon2-cffi-bindings/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fhynek%2Fargon2-cffi-bindings/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fhynek%2Fargon2-cffi-bindings/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fhynek%2Fargon2-cffi-bindings/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fhynek%2Fargon2-cffi-bindings/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fhynek%2Fargon2-cffi-bindings/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2281915,"maintainers_count":0,"namespaces_count":839492,"keywords_count":125216,"github":"golang","metadata":{"funded_packages_count":67974,"sync_missing_packages_cursor":{"timestamp":"2026-08-17T00:00:58.969562Z","path":"github.com/Tektoncd/operator","version":"v0.78.0"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-08-25T05:01:14.867Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":13201489,"name":"python312Packages.argon2-cffi-bindings","ecosystem":"nixpkgs","description":"Low-level CFFI bindings for Argon2","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":["python"],"namespace":null,"versions_count":1,"first_release_published_at":"2026-02-02T00:49:34.288Z","latest_release_published_at":"2026-02-02T00:49:34.288Z","latest_release_number":"21.2.0","last_synced_at":"2026-03-09T04:03:15.914Z","created_at":"2026-02-02T00:49:33.493Z","updated_at":"2026-08-24T01:39:54.932Z","registry_url":"https://search.nixos.org/packages?channel=24.05\u0026query=python312Packages.argon2-cffi-bindings","install_command":"nix-env -iA nixpkgs.python312Packages.argon2-cffi-bindings","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-24.05/pkgs/development/python-modules/argon2-cffi-bindings/default.nix#L36","metadata":{"nix_attribute":"python3.12-argon2-cffi-bindings-21.2.0","position":"pkgs/development/python-modules/argon2-cffi-bindings/default.nix:36","platforms":["aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux","x86_64-darwin","i686-darwin","aarch64-darwin","armv7a-darwin","i686-cygwin","x86_64-cygwin","x86_64-windows","i686-windows"],"broken":false,"insecure":false,"unfree":false,"outputs":["dist","out"],"upstream_ecosystem":"pypi","upstream_name":"argon2-cffi-bindings","upstream_purl":"pkg:pypi/argon2-cffi-bindings"},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-20T08:06:46.000Z","size":285,"stargazers_count":20,"open_issues_count":4,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-23T14:40:54.963Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-20T08:09:08.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36862457,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-23T02:00:05.822Z","response_time":128,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hynek","name":"Hynek Schlawack","uuid":"41240","kind":"user","description":"","email":"hs@ox.cx","website":"https://hynek.me/about/","location":"Berlin","twitter":"hynek","company":"Variomedia AG","icon_url":"https://avatars.githubusercontent.com/u/41240?u=c77db9d353f9df8435a5bfcdaab2121c047f0456\u0026v=4","repositories_count":41,"last_synced_at":"2026-08-20T05:49:45.399Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/hynek","funding_links":["https://github.com/sponsors/hynek"],"total_stars":9746,"followers":1927,"following":6,"created_at":"2022-11-02T16:24:56.789Z","updated_at":"2026-08-20T05:49:45.593Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek/repositories"},"tags":[{"name":"26.1.0","sha":"fb50afcbb80aee5e87d6f8b1d15e7238321387c9","kind":"tag","published_at":"2026-08-20T07:07:16.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/26.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/26.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@26.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/26.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/26.1.0/manifests"},{"name":"25.1.0","sha":"66f5b2340ef25699504bcc0f08eadcbefaf219aa","kind":"tag","published_at":"2025-07-30T09:43:43.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/25.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/25.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@25.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0/manifests"},{"name":"21.2.0","sha":"2bf609f920d83a081a5787425b9eb1c95ecf6e0c","kind":"tag","published_at":"2021-12-01T08:44:02.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.2.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0/manifests"},{"name":"21.1.0","sha":"78d28409e22144f152bd408ccc2e2dd6efee2466","kind":"tag","published_at":"2021-11-28T10:18:23.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0/manifests"}]},"repo_metadata_updated_at":"2026-08-24T01:39:54.932Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/python312Packages.argon2-cffi-bindings?channel=24.05\u0026repository_url=https://channels.nixos.org/nixos-24.05","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/python312Packages.argon2-cffi-bindings","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/python312Packages.argon2-cffi-bindings","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/python312Packages.argon2-cffi-bindings/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-23T13:09:00.747Z","issues_count":14,"pull_requests_count":146,"avg_time_to_close_issue":3205857.0,"avg_time_to_close_pull_request":422966.4962406015,"issues_closed_count":9,"pull_requests_closed_count":133,"pull_request_authors_count":10,"issue_authors_count":14,"avg_comments_per_issue":3.7857142857142856,"avg_comments_per_pull_request":0.726027397260274,"merged_pull_requests_count":127,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":6,"past_year_pull_requests_count":26,"past_year_avg_time_to_close_issue":6664892.0,"past_year_avg_time_to_close_pull_request":824065.4166666666,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":24,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":6.666666666666667,"past_year_avg_comments_per_pull_request":1.3076923076923077,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":21,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":41,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/python312Packages.argon2-cffi-bindings/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/python312Packages.argon2-cffi-bindings/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/python312Packages.argon2-cffi-bindings/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/python312Packages.argon2-cffi-bindings/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/python312Packages.argon2-cffi-bindings/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages/python312Packages.argon2-cffi-bindings/codemeta","maintainers":[],"registry":{"name":"nixpkgs-24.05","url":"https://channels.nixos.org/nixos-24.05","ecosystem":"nixpkgs","default":false,"packages_count":116156,"maintainers_count":3383,"namespaces_count":0,"keywords_count":654,"github":"NixOS","metadata":{"funded_packages_count":3204},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:53.309Z","updated_at":"2026-08-25T05:01:17.178Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-24.05/namespaces"}},{"id":14511896,"name":"dev-python/argon2-cffi-bindings","ecosystem":"gentoo","description":"Low-level CFFI bindings for the Argon2 password hashing library","homepage":"https://github.com/hynek/argon2-cffi-bindings/","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":["~alpha","amd64","arm","arm64","~hppa","~loong","~m68k","~mips","ppc","ppc64","~riscv","~s390","~sparc","x86"],"namespace":"dev-python","versions_count":1,"first_release_published_at":"2026-05-11T16:39:47.000Z","latest_release_published_at":"2026-05-11T16:39:47.000Z","latest_release_number":"25.1.0","last_synced_at":"2026-06-30T01:48:41.393Z","created_at":"2026-05-27T02:19:22.885Z","updated_at":"2026-08-24T10:25:48.018Z","registry_url":"https://packages.gentoo.org/packages/dev-python/argon2-cffi-bindings","install_command":"emerge dev-python/argon2-cffi-bindings","documentation_url":"https://packages.gentoo.org/packages/dev-python/argon2-cffi-bindings","metadata":{"category":"dev-python","slot":"0","eapi":"8","inherit":"distutils-r1 pypi","iuse":"cpu_flags_x86_sse2 test python_targets_python3_12 python_targets_python3_13 python_targets_python3_14 python_targets_python3_15 debug"},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-20T08:06:46.000Z","size":285,"stargazers_count":20,"open_issues_count":4,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-23T14:40:54.963Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-20T08:09:08.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36862457,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-23T02:00:05.822Z","response_time":128,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hynek","name":"Hynek Schlawack","uuid":"41240","kind":"user","description":"","email":"hs@ox.cx","website":"https://hynek.me/about/","location":"Berlin","twitter":"hynek","company":"Variomedia AG","icon_url":"https://avatars.githubusercontent.com/u/41240?u=c77db9d353f9df8435a5bfcdaab2121c047f0456\u0026v=4","repositories_count":41,"last_synced_at":"2026-08-20T05:49:45.399Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/hynek","funding_links":["https://github.com/sponsors/hynek"],"total_stars":9746,"followers":1927,"following":6,"created_at":"2022-11-02T16:24:56.789Z","updated_at":"2026-08-20T05:49:45.593Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek/repositories"},"tags":[{"name":"26.1.0","sha":"fb50afcbb80aee5e87d6f8b1d15e7238321387c9","kind":"tag","published_at":"2026-08-20T07:07:16.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/26.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/26.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@26.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/26.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/26.1.0/manifests"},{"name":"25.1.0","sha":"66f5b2340ef25699504bcc0f08eadcbefaf219aa","kind":"tag","published_at":"2025-07-30T09:43:43.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/25.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/25.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@25.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0/manifests"},{"name":"21.2.0","sha":"2bf609f920d83a081a5787425b9eb1c95ecf6e0c","kind":"tag","published_at":"2021-12-01T08:44:02.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.2.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0/manifests"},{"name":"21.1.0","sha":"78d28409e22144f152bd408ccc2e2dd6efee2466","kind":"tag","published_at":"2021-11-28T10:18:23.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0/manifests"}]},"repo_metadata_updated_at":"2026-08-24T10:25:48.018Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:gentoo/dev-python/argon2-cffi-bindings","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/gentoo/dev-python/argon2-cffi-bindings","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/gentoo/dev-python/argon2-cffi-bindings","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/gentoo/dev-python/argon2-cffi-bindings/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-23T13:09:00.747Z","issues_count":14,"pull_requests_count":146,"avg_time_to_close_issue":3205857.0,"avg_time_to_close_pull_request":422966.4962406015,"issues_closed_count":9,"pull_requests_closed_count":133,"pull_request_authors_count":10,"issue_authors_count":14,"avg_comments_per_issue":3.7857142857142856,"avg_comments_per_pull_request":0.726027397260274,"merged_pull_requests_count":127,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":6,"past_year_pull_requests_count":26,"past_year_avg_time_to_close_issue":6664892.0,"past_year_avg_time_to_close_pull_request":824065.4166666666,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":24,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":6.666666666666667,"past_year_avg_comments_per_pull_request":1.3076923076923077,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":21,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":41,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/packages/dev-python%2Fargon2-cffi-bindings/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/packages/dev-python%2Fargon2-cffi-bindings/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/packages/dev-python%2Fargon2-cffi-bindings/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/packages/dev-python%2Fargon2-cffi-bindings/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/packages/dev-python%2Fargon2-cffi-bindings/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/packages/dev-python%2Fargon2-cffi-bindings/codemeta","maintainers":[],"registry":{"name":"gentoo-portage","url":"https://packages.gentoo.org/","ecosystem":"gentoo","default":true,"packages_count":19524,"maintainers_count":0,"namespaces_count":174,"keywords_count":1054,"github":"gentoo","metadata":{"snapshot_url":"https://distfiles.gentoo.org/snapshots/portage-latest.tar.xz","funded_packages_count":622},"icon_url":"https://github.com/gentoo.png","created_at":"2026-05-26T08:59:24.155Z","updated_at":"2026-08-25T05:05:03.406Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/namespaces"}},{"id":11138082,"name":"py3-argon2-cffi-bindings","ecosystem":"alpine","description":"Low-level Python CFFI Bindings for Argon2","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_number":"21.2.0-r4","last_synced_at":"2026-04-02T15:46:34.153Z","created_at":"2024-12-07T12:19:02.213Z","updated_at":"2026-08-24T10:25:48.021Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.21/community/x86_64/py3-argon2-cffi-bindings","install_command":"apk add py3-argon2-cffi-bindings","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-20T08:06:46.000Z","size":285,"stargazers_count":20,"open_issues_count":4,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-23T14:40:54.963Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-20T08:09:08.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36862457,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-23T02:00:05.822Z","response_time":128,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hynek","name":"Hynek Schlawack","uuid":"41240","kind":"user","description":"","email":"hs@ox.cx","website":"https://hynek.me/about/","location":"Berlin","twitter":"hynek","company":"Variomedia AG","icon_url":"https://avatars.githubusercontent.com/u/41240?u=c77db9d353f9df8435a5bfcdaab2121c047f0456\u0026v=4","repositories_count":41,"last_synced_at":"2026-08-20T05:49:45.399Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/hynek","funding_links":["https://github.com/sponsors/hynek"],"total_stars":9746,"followers":1927,"following":6,"created_at":"2022-11-02T16:24:56.789Z","updated_at":"2026-08-20T05:49:45.593Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek/repositories"},"tags":[{"name":"26.1.0","sha":"fb50afcbb80aee5e87d6f8b1d15e7238321387c9","kind":"tag","published_at":"2026-08-20T07:07:16.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/26.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/26.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@26.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/26.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/26.1.0/manifests"},{"name":"25.1.0","sha":"66f5b2340ef25699504bcc0f08eadcbefaf219aa","kind":"tag","published_at":"2025-07-30T09:43:43.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/25.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/25.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@25.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0/manifests"},{"name":"21.2.0","sha":"2bf609f920d83a081a5787425b9eb1c95ecf6e0c","kind":"tag","published_at":"2021-12-01T08:44:02.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.2.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0/manifests"},{"name":"21.1.0","sha":"78d28409e22144f152bd408ccc2e2dd6efee2466","kind":"tag","published_at":"2021-11-28T10:18:23.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0/manifests"}]},"repo_metadata_updated_at":"2026-08-24T10:25:48.021Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/py3-argon2-cffi-bindings?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.21","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-argon2-cffi-bindings","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-argon2-cffi-bindings","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-argon2-cffi-bindings/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-23T13:09:00.747Z","issues_count":14,"pull_requests_count":146,"avg_time_to_close_issue":3205857.0,"avg_time_to_close_pull_request":422966.4962406015,"issues_closed_count":9,"pull_requests_closed_count":133,"pull_request_authors_count":10,"issue_authors_count":14,"avg_comments_per_issue":3.7857142857142856,"avg_comments_per_pull_request":0.726027397260274,"merged_pull_requests_count":127,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":6,"past_year_pull_requests_count":26,"past_year_avg_time_to_close_issue":6664892.0,"past_year_avg_time_to_close_pull_request":824065.4166666666,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":24,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":6.666666666666667,"past_year_avg_comments_per_pull_request":1.3076923076923077,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":21,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":41,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/py3-argon2-cffi-bindings/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/py3-argon2-cffi-bindings/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/py3-argon2-cffi-bindings/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/py3-argon2-cffi-bindings/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/py3-argon2-cffi-bindings/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/py3-argon2-cffi-bindings/codemeta","maintainers":[{"uuid":"alpine@ptrcnull.me","login":null,"name":"Patrycja Rosa","email":"alpine@ptrcnull.me","url":"https://pkgs.alpinelinux.org/packages?maintainer=Patrycja Rosa","packages_count":492,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Patrycja Rosa","role":null,"created_at":"2024-12-13T17:59:54.299Z","updated_at":"2024-12-13T17:59:54.299Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/maintainers/alpine@ptrcnull.me/packages"}],"registry":{"name":"alpine-v3.21","url":"https://pkgs.alpinelinux.org/packages?branch=v3.21","ecosystem":"alpine","default":false,"packages_count":25394,"maintainers_count":413,"namespaces_count":2,"keywords_count":3607,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1400},"icon_url":"https://github.com/alpinelinux.png","created_at":"2024-12-06T12:06:36.014Z","updated_at":"2026-08-24T05:06:22.358Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/namespaces"}},{"id":11138083,"name":"py3-argon2-cffi-bindings-pyc","ecosystem":"alpine","description":"Precompiled Python bytecode for py3-argon2-cffi-bindings","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_published_at":"2024-04-12T09:59:22.000Z","latest_release_number":"21.2.0-r4","last_synced_at":"2026-08-05T05:04:38.687Z","created_at":"2024-12-07T12:19:02.469Z","updated_at":"2026-08-24T12:51:36.728Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.21/community/x86_64/py3-argon2-cffi-bindings-pyc","install_command":"apk add py3-argon2-cffi-bindings-pyc","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-20T08:06:46.000Z","size":285,"stargazers_count":20,"open_issues_count":4,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-23T14:40:54.963Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-20T08:09:08.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36862457,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-23T02:00:05.822Z","response_time":128,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hynek","name":"Hynek Schlawack","uuid":"41240","kind":"user","description":"","email":"hs@ox.cx","website":"https://hynek.me/about/","location":"Berlin","twitter":"hynek","company":"Variomedia AG","icon_url":"https://avatars.githubusercontent.com/u/41240?u=c77db9d353f9df8435a5bfcdaab2121c047f0456\u0026v=4","repositories_count":41,"last_synced_at":"2026-08-20T05:49:45.399Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/hynek","funding_links":["https://github.com/sponsors/hynek"],"total_stars":9746,"followers":1927,"following":6,"created_at":"2022-11-02T16:24:56.789Z","updated_at":"2026-08-20T05:49:45.593Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek/repositories"},"tags":[{"name":"26.1.0","sha":"fb50afcbb80aee5e87d6f8b1d15e7238321387c9","kind":"tag","published_at":"2026-08-20T07:07:16.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/26.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/26.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@26.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/26.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/26.1.0/manifests"},{"name":"25.1.0","sha":"66f5b2340ef25699504bcc0f08eadcbefaf219aa","kind":"tag","published_at":"2025-07-30T09:43:43.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/25.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/25.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@25.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0/manifests"},{"name":"21.2.0","sha":"2bf609f920d83a081a5787425b9eb1c95ecf6e0c","kind":"tag","published_at":"2021-12-01T08:44:02.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.2.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0/manifests"},{"name":"21.1.0","sha":"78d28409e22144f152bd408ccc2e2dd6efee2466","kind":"tag","published_at":"2021-11-28T10:18:23.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0/manifests"}]},"repo_metadata_updated_at":"2026-08-24T12:51:36.728Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/py3-argon2-cffi-bindings-pyc?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.21","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-argon2-cffi-bindings-pyc","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-argon2-cffi-bindings-pyc","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-argon2-cffi-bindings-pyc/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-23T13:09:00.747Z","issues_count":14,"pull_requests_count":146,"avg_time_to_close_issue":3205857.0,"avg_time_to_close_pull_request":422966.4962406015,"issues_closed_count":9,"pull_requests_closed_count":133,"pull_request_authors_count":10,"issue_authors_count":14,"avg_comments_per_issue":3.7857142857142856,"avg_comments_per_pull_request":0.726027397260274,"merged_pull_requests_count":127,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":6,"past_year_pull_requests_count":26,"past_year_avg_time_to_close_issue":6664892.0,"past_year_avg_time_to_close_pull_request":824065.4166666666,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":24,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":6.666666666666667,"past_year_avg_comments_per_pull_request":1.3076923076923077,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":21,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":41,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/py3-argon2-cffi-bindings-pyc/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/py3-argon2-cffi-bindings-pyc/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/py3-argon2-cffi-bindings-pyc/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/py3-argon2-cffi-bindings-pyc/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/py3-argon2-cffi-bindings-pyc/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages/py3-argon2-cffi-bindings-pyc/codemeta","maintainers":[{"uuid":"alpine@ptrcnull.me","login":null,"name":"Patrycja Rosa","email":"alpine@ptrcnull.me","url":"https://pkgs.alpinelinux.org/packages?maintainer=Patrycja Rosa","packages_count":492,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=Patrycja Rosa","role":null,"created_at":"2024-12-13T18:00:06.554Z","updated_at":"2024-12-13T18:00:06.554Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/maintainers/alpine@ptrcnull.me/packages"}],"registry":{"name":"alpine-v3.21","url":"https://pkgs.alpinelinux.org/packages?branch=v3.21","ecosystem":"alpine","default":false,"packages_count":25394,"maintainers_count":413,"namespaces_count":2,"keywords_count":3607,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1400},"icon_url":"https://github.com/alpinelinux.png","created_at":"2024-12-06T12:06:36.014Z","updated_at":"2026-08-24T05:06:22.358Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.21/namespaces"}},{"id":2643328,"name":"argon2-cffi-bindings","ecosystem":"pypi","description":"Low-level CFFI bindings for Argon2","homepage":null,"licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":["password","hash","hashing","security","bindings","cffi"],"namespace":null,"versions_count":4,"first_release_published_at":"2021-11-28T10:41:13.000Z","latest_release_published_at":"2026-08-20T07:32:43.000Z","latest_release_number":"26.1.0","last_synced_at":"2026-08-24T13:46:23.134Z","created_at":"2022-04-10T10:04:03.760Z","updated_at":"2026-08-24T13:46:23.135Z","registry_url":"https://pypi.org/project/argon2-cffi-bindings/","install_command":"pip install argon2-cffi-bindings --index-url https://pypi.org/simple","documentation_url":"https://argon2-cffi-bindings.readthedocs.io/","metadata":{"funding":"https://github.com/sponsors/hynek","documentation":null,"classifiers":["Development Status :: 5 - Production/Stable","Intended Audience :: Developers","Natural Language :: English","Operating System :: MacOS :: MacOS X","Operating System :: Microsoft :: Windows","Operating System :: POSIX","Operating System :: Unix","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.13","Programming Language :: Python :: 3.14","Programming Language :: Python :: 3.15","Programming Language :: Python :: Free Threading","Programming Language :: Python :: Implementation :: CPython","Programming Language :: Python :: Implementation :: PyPy","Topic :: Security","Topic :: Security :: Cryptography","Topic :: Software Development :: Libraries :: Python Modules"],"normalized_name":"argon2-cffi-bindings","project_status":null},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-06T06:07:34.000Z","size":263,"stargazers_count":20,"open_issues_count":3,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-08T10:44:08.120Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-06T06:08:18.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36414931,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-08T02:00:08.763Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hynek","name":"Hynek Schlawack","uuid":"41240","kind":"user","description":"","email":"hs@ox.cx","website":"https://hynek.me/about/","location":"Berlin","twitter":"hynek","company":"Variomedia AG","icon_url":"https://avatars.githubusercontent.com/u/41240?u=c77db9d353f9df8435a5bfcdaab2121c047f0456\u0026v=4","repositories_count":41,"last_synced_at":"2026-08-20T05:49:45.399Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/hynek","funding_links":["https://github.com/sponsors/hynek"],"total_stars":9746,"followers":1927,"following":6,"created_at":"2022-11-02T16:24:56.789Z","updated_at":"2026-08-20T05:49:45.593Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek/repositories"},"tags":[{"name":"25.1.0","sha":"66f5b2340ef25699504bcc0f08eadcbefaf219aa","kind":"tag","published_at":"2025-07-30T09:43:43.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/25.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/25.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@25.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0/manifests"},{"name":"21.2.0","sha":"2bf609f920d83a081a5787425b9eb1c95ecf6e0c","kind":"tag","published_at":"2021-12-01T08:44:02.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.2.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0/manifests"},{"name":"21.1.0","sha":"78d28409e22144f152bd408ccc2e2dd6efee2466","kind":"tag","published_at":"2021-11-28T10:18:23.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0/manifests"}]},"repo_metadata_updated_at":"2026-08-23T00:15:26.747Z","dependent_packages_count":72,"downloads":73462370,"downloads_period":"last-month","dependent_repos_count":11990,"rankings":{"downloads":0.08857328439262538,"dependent_repos_count":0.07962071586261807,"dependent_packages_count":0.2754343424338415,"stargazers_count":21.577840272538126,"forks_count":14.246900031247382,"docker_downloads_count":0.28552979205278584,"average":6.092316406421229},"purl":"pkg:pypi/argon2-cffi-bindings","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/pypi/argon2-cffi-bindings","docker_dependents_count":2785,"docker_downloads_count":629881778,"usage_url":"https://repos.ecosyste.ms/usage/pypi/argon2-cffi-bindings","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/pypi/argon2-cffi-bindings/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":true,"issue_metadata":{"last_synced_at":"2026-08-22T12:37:32.396Z","issues_count":14,"pull_requests_count":146,"avg_time_to_close_issue":3205857.0,"avg_time_to_close_pull_request":422966.4962406015,"issues_closed_count":9,"pull_requests_closed_count":133,"pull_request_authors_count":10,"issue_authors_count":14,"avg_comments_per_issue":3.642857142857143,"avg_comments_per_pull_request":0.726027397260274,"merged_pull_requests_count":127,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":6,"past_year_pull_requests_count":26,"past_year_avg_time_to_close_issue":6664892.0,"past_year_avg_time_to_close_pull_request":824065.4166666666,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":24,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":6.333333333333333,"past_year_avg_comments_per_pull_request":1.3076923076923077,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":21,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":41,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/argon2-cffi-bindings/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/argon2-cffi-bindings/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/argon2-cffi-bindings/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/argon2-cffi-bindings/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/argon2-cffi-bindings/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/argon2-cffi-bindings/codemeta","maintainers":[{"uuid":"hynek","login":"hynek","name":null,"email":null,"url":null,"packages_count":23,"html_url":"https://pypi.org/user/hynek/","role":null,"created_at":"2022-11-15T07:23:50.636Z","updated_at":"2022-11-15T07:23:50.636Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/hynek/packages"}],"registry":{"name":"pypi.org","url":"https://pypi.org","ecosystem":"pypi","default":true,"packages_count":930641,"maintainers_count":399816,"namespaces_count":0,"keywords_count":311995,"github":"pypi","metadata":{"funded_packages_count":58611,"rate_limit":2},"icon_url":"https://github.com/pypi.png","created_at":"2022-04-04T15:19:23.364Z","updated_at":"2026-08-25T05:06:24.344Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/namespaces"}},{"id":74862,"name":"py-argon2-cffi-bindings","ecosystem":"spack","description":"Low-level CFFI bindings for Argon2.\n","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"[]","normalized_licenses":["Other"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2022-04-05T09:22:18.623Z","latest_release_published_at":"2022-04-05T09:22:18.623Z","latest_release_number":"21.2.0","last_synced_at":"2026-08-24T13:46:25.821Z","created_at":"2022-04-05T09:22:18.596Z","updated_at":"2026-08-24T13:46:25.821Z","registry_url":"https://packages.spack.io/package.html?name=py-argon2-cffi-bindings","install_command":"spack install py-argon2-cffi-bindings","documentation_url":null,"metadata":{},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-06T06:07:34.000Z","size":263,"stargazers_count":20,"open_issues_count":3,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-08T10:44:08.120Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-06T06:08:18.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36414931,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-08T02:00:08.763Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hynek","name":"Hynek Schlawack","uuid":"41240","kind":"user","description":"","email":"hs@ox.cx","website":"https://hynek.me/about/","location":"Berlin","twitter":"hynek","company":"Variomedia AG","icon_url":"https://avatars.githubusercontent.com/u/41240?u=c77db9d353f9df8435a5bfcdaab2121c047f0456\u0026v=4","repositories_count":40,"last_synced_at":"2026-08-05T12:08:05.838Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/hynek","funding_links":["https://github.com/sponsors/hynek"],"total_stars":9713,"followers":1927,"following":6,"created_at":"2022-11-02T16:24:56.789Z","updated_at":"2026-08-05T12:08:05.940Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek/repositories"},"tags":[{"name":"25.1.0","sha":"66f5b2340ef25699504bcc0f08eadcbefaf219aa","kind":"tag","published_at":"2025-07-30T09:43:43.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/25.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/25.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@25.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0/manifests"},{"name":"21.2.0","sha":"2bf609f920d83a081a5787425b9eb1c95ecf6e0c","kind":"tag","published_at":"2021-12-01T08:44:02.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.2.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0/manifests"},{"name":"21.1.0","sha":"78d28409e22144f152bd408ccc2e2dd6efee2466","kind":"tag","published_at":"2021-11-28T10:18:23.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0/manifests"}]},"repo_metadata_updated_at":"2026-08-08T19:06:20.106Z","dependent_packages_count":1,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":28.06725024315687,"stargazers_count":28.928720300125054,"forks_count":28.386827844935393,"average":21.345699597054328},"purl":"pkg:spack/py-argon2-cffi-bindings","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/spack/py-argon2-cffi-bindings","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/spack/py-argon2-cffi-bindings","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/spack/py-argon2-cffi-bindings/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-08T05:37:05.092Z","issues_count":11,"pull_requests_count":145,"avg_time_to_close_issue":2202977.75,"avg_time_to_close_pull_request":402672.45454545453,"issues_closed_count":8,"pull_requests_closed_count":132,"pull_request_authors_count":10,"issue_authors_count":11,"avg_comments_per_issue":3.6363636363636362,"avg_comments_per_pull_request":0.6758620689655173,"merged_pull_requests_count":126,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":3,"past_year_pull_requests_count":25,"past_year_avg_time_to_close_issue":4382892.5,"past_year_avg_time_to_close_pull_request":725034.3478260869,"past_year_issues_closed_count":2,"past_year_pull_requests_closed_count":23,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":9.0,"past_year_avg_comments_per_pull_request":1.04,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":20,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":40,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/packages/py-argon2-cffi-bindings/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/packages/py-argon2-cffi-bindings/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/packages/py-argon2-cffi-bindings/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/packages/py-argon2-cffi-bindings/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/packages/py-argon2-cffi-bindings/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/packages/py-argon2-cffi-bindings/codemeta","maintainers":[{"uuid":"adamjstewart","login":"adamjstewart","name":null,"email":null,"url":"https://github.com/adamjstewart","packages_count":2153,"html_url":null,"role":null,"created_at":"2022-11-14T16:49:28.461Z","updated_at":"2022-11-14T16:49:28.461Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/maintainers/adamjstewart/packages"}],"registry":{"name":"spack.io","url":"https://packages.spack.io","ecosystem":"spack","default":true,"packages_count":9303,"maintainers_count":1032,"namespaces_count":0,"keywords_count":3991,"github":"spack","metadata":{"funded_packages_count":511},"icon_url":"https://github.com/spack.png","created_at":"2022-04-04T15:19:23.514Z","updated_at":"2026-08-25T05:07:25.244Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/namespaces"}},{"id":5282680,"name":"argon2-cffi-bindings","ecosystem":"conda","description":"argon2-cffi-bindings provides low-level CFFI bindings to the Argon2 password hashing algorithm including a vendored version of them.","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2022-04-09T10:33:42.000Z","latest_release_published_at":"2022-04-09T10:33:42.000Z","latest_release_number":"21.2.0","last_synced_at":"2026-04-01T13:32:01.082Z","created_at":"2022-10-03T15:38:05.319Z","updated_at":"2026-08-24T14:35:50.827Z","registry_url":"https://anaconda.org/conda-forge/argon2-cffi-bindings","install_command":"conda install -c conda-forge argon2-cffi-bindings","documentation_url":null,"metadata":{},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-20T08:06:46.000Z","size":285,"stargazers_count":20,"open_issues_count":4,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-23T14:40:54.963Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-20T08:09:08.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36862457,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-23T02:00:05.822Z","response_time":128,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hynek","name":"Hynek Schlawack","uuid":"41240","kind":"user","description":"","email":"hs@ox.cx","website":"https://hynek.me/about/","location":"Berlin","twitter":"hynek","company":"Variomedia AG","icon_url":"https://avatars.githubusercontent.com/u/41240?u=c77db9d353f9df8435a5bfcdaab2121c047f0456\u0026v=4","repositories_count":41,"last_synced_at":"2026-08-20T05:49:45.399Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/hynek","funding_links":["https://github.com/sponsors/hynek"],"total_stars":9746,"followers":1927,"following":6,"created_at":"2022-11-02T16:24:56.789Z","updated_at":"2026-08-20T05:49:45.593Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek/repositories"},"tags":[{"name":"26.1.0","sha":"fb50afcbb80aee5e87d6f8b1d15e7238321387c9","kind":"tag","published_at":"2026-08-20T07:07:16.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/26.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/26.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@26.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/26.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/26.1.0/manifests"},{"name":"25.1.0","sha":"66f5b2340ef25699504bcc0f08eadcbefaf219aa","kind":"tag","published_at":"2025-07-30T09:43:43.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/25.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/25.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@25.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0/manifests"},{"name":"21.2.0","sha":"2bf609f920d83a081a5787425b9eb1c95ecf6e0c","kind":"tag","published_at":"2021-12-01T08:44:02.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.2.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0/manifests"},{"name":"21.1.0","sha":"78d28409e22144f152bd408ccc2e2dd6efee2466","kind":"tag","published_at":"2021-11-28T10:18:23.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0/manifests"}]},"repo_metadata_updated_at":"2026-08-24T14:35:50.827Z","dependent_packages_count":4,"downloads":17284936,"downloads_period":"total","dependent_repos_count":242,"rankings":{"downloads":null,"dependent_repos_count":2.1158740456110587,"dependent_packages_count":12.500623783621936,"stargazers_count":59.60876291232098,"forks_count":56.469883726732874,"docker_downloads_count":null,"average":32.673786117071714},"purl":"pkg:conda/argon2-cffi-bindings?repository_url=https://conda-forge.org","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/conda/argon2-cffi-bindings","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/conda/argon2-cffi-bindings","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/conda/argon2-cffi-bindings/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-23T13:09:00.747Z","issues_count":14,"pull_requests_count":146,"avg_time_to_close_issue":3205857.0,"avg_time_to_close_pull_request":422966.4962406015,"issues_closed_count":9,"pull_requests_closed_count":133,"pull_request_authors_count":10,"issue_authors_count":14,"avg_comments_per_issue":3.7857142857142856,"avg_comments_per_pull_request":0.726027397260274,"merged_pull_requests_count":127,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":6,"past_year_pull_requests_count":26,"past_year_avg_time_to_close_issue":6664892.0,"past_year_avg_time_to_close_pull_request":824065.4166666666,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":24,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":6.666666666666667,"past_year_avg_comments_per_pull_request":1.3076923076923077,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":21,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":41,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages/argon2-cffi-bindings/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages/argon2-cffi-bindings/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages/argon2-cffi-bindings/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages/argon2-cffi-bindings/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages/argon2-cffi-bindings/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages/argon2-cffi-bindings/codemeta","maintainers":[],"registry":{"name":"conda-forge.org","url":"https://conda-forge.org","ecosystem":"conda","default":false,"packages_count":20636,"maintainers_count":0,"namespaces_count":0,"keywords_count":13549,"github":"conda-forge","metadata":{"kind":"conda-forge","key":"CondaForge","api":"https://conda.anaconda.org","funded_packages_count":2349},"icon_url":"https://github.com/conda-forge.png","created_at":"2022-10-03T15:37:08.743Z","updated_at":"2026-08-25T05:07:08.746Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/namespaces"}},{"id":12882711,"name":"python314Packages.argon2-cffi-bindings","ecosystem":"nixpkgs","description":"Low-level CFFI bindings for Argon2","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":["python"],"namespace":null,"versions_count":1,"first_release_published_at":"2026-01-27T06:14:21.095Z","latest_release_published_at":"2026-01-27T06:14:21.095Z","latest_release_number":"25.1.0","last_synced_at":"2026-03-07T11:25:30.677Z","created_at":"2026-01-27T06:14:20.766Z","updated_at":"2026-08-24T14:35:51.318Z","registry_url":"https://search.nixos.org/packages?channel=unstable\u0026query=python314Packages.argon2-cffi-bindings","install_command":"nix-env -iA nixpkgs.python314Packages.argon2-cffi-bindings","documentation_url":"https://github.com/NixOS/nixpkgs/blob/nixos-unstable/pkgs/development/python-modules/argon2-cffi-bindings/default.nix#L40","metadata":{"nix_attribute":"python3.14-argon2-cffi-bindings-25.1.0","position":"pkgs/development/python-modules/argon2-cffi-bindings/default.nix:40","platforms":["aarch64-linux","armv5tel-linux","armv6l-linux","armv7a-linux","armv7l-linux","i686-linux","loongarch64-linux","m68k-linux","microblaze-linux","microblazeel-linux","mips-linux","mips64-linux","mips64el-linux","mipsel-linux","powerpc-linux","powerpc64-linux","powerpc64le-linux","riscv32-linux","riscv64-linux","s390-linux","s390x-linux","x86_64-linux","x86_64-darwin","aarch64-darwin","aarch64-windows","x86_64-windows","i686-windows","i686-freebsd","x86_64-freebsd","aarch64-freebsd"],"broken":false,"insecure":false,"unfree":false,"outputs":["dist","out"],"upstream_ecosystem":"pypi","upstream_name":"argon2-cffi-bindings","upstream_purl":"pkg:pypi/argon2-cffi-bindings"},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-20T08:06:46.000Z","size":285,"stargazers_count":20,"open_issues_count":4,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-23T14:40:54.963Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-20T08:09:08.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36862457,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-23T02:00:05.822Z","response_time":128,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hynek","name":"Hynek Schlawack","uuid":"41240","kind":"user","description":"","email":"hs@ox.cx","website":"https://hynek.me/about/","location":"Berlin","twitter":"hynek","company":"Variomedia AG","icon_url":"https://avatars.githubusercontent.com/u/41240?u=c77db9d353f9df8435a5bfcdaab2121c047f0456\u0026v=4","repositories_count":41,"last_synced_at":"2026-08-20T05:49:45.399Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/hynek","funding_links":["https://github.com/sponsors/hynek"],"total_stars":9746,"followers":1927,"following":6,"created_at":"2022-11-02T16:24:56.789Z","updated_at":"2026-08-20T05:49:45.593Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek/repositories"},"tags":[{"name":"26.1.0","sha":"fb50afcbb80aee5e87d6f8b1d15e7238321387c9","kind":"tag","published_at":"2026-08-20T07:07:16.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/26.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/26.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@26.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/26.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/26.1.0/manifests"},{"name":"25.1.0","sha":"66f5b2340ef25699504bcc0f08eadcbefaf219aa","kind":"tag","published_at":"2025-07-30T09:43:43.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/25.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/25.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@25.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0/manifests"},{"name":"21.2.0","sha":"2bf609f920d83a081a5787425b9eb1c95ecf6e0c","kind":"tag","published_at":"2021-12-01T08:44:02.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.2.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0/manifests"},{"name":"21.1.0","sha":"78d28409e22144f152bd408ccc2e2dd6efee2466","kind":"tag","published_at":"2021-11-28T10:18:23.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0/manifests"}]},"repo_metadata_updated_at":"2026-08-24T14:35:51.318Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:nix/python314Packages.argon2-cffi-bindings?channel=unstable","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/nixpkgs/python314Packages.argon2-cffi-bindings","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/nixpkgs/python314Packages.argon2-cffi-bindings","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/nixpkgs/python314Packages.argon2-cffi-bindings/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-23T13:09:00.747Z","issues_count":14,"pull_requests_count":146,"avg_time_to_close_issue":3205857.0,"avg_time_to_close_pull_request":422966.4962406015,"issues_closed_count":9,"pull_requests_closed_count":133,"pull_request_authors_count":10,"issue_authors_count":14,"avg_comments_per_issue":3.7857142857142856,"avg_comments_per_pull_request":0.726027397260274,"merged_pull_requests_count":127,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":6,"past_year_pull_requests_count":26,"past_year_avg_time_to_close_issue":6664892.0,"past_year_avg_time_to_close_pull_request":824065.4166666666,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":24,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":6.666666666666667,"past_year_avg_comments_per_pull_request":1.3076923076923077,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":21,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":41,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/python314Packages.argon2-cffi-bindings/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/python314Packages.argon2-cffi-bindings/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/python314Packages.argon2-cffi-bindings/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/python314Packages.argon2-cffi-bindings/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/python314Packages.argon2-cffi-bindings/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages/python314Packages.argon2-cffi-bindings/codemeta","maintainers":[],"registry":{"name":"nixpkgs-unstable","url":"https://channels.nixos.org/nixos-unstable","ecosystem":"nixpkgs","default":true,"packages_count":153806,"maintainers_count":4905,"namespaces_count":0,"keywords_count":3244,"github":"NixOS","metadata":{"funded_packages_count":6032},"icon_url":"https://github.com/NixOS.png","created_at":"2026-01-25T22:30:52.762Z","updated_at":"2026-08-25T05:00:24.061Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/nixpkgs-unstable/namespaces"}},{"id":7778099,"name":"py3-argon2-cffi-bindings-pyc","ecosystem":"alpine","description":"Precompiled Python bytecode for py3-argon2-cffi-bindings","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2023-04-20T01:20:52.000Z","latest_release_published_at":"2023-04-20T01:20:52.000Z","latest_release_number":"21.2.0-r1","last_synced_at":"2026-03-07T19:51:26.135Z","created_at":"2023-05-22T14:16:48.104Z","updated_at":"2026-08-24T20:57:08.994Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.18/community/x86_64/py3-argon2-cffi-bindings-pyc","install_command":"apk add py3-argon2-cffi-bindings-pyc","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-20T08:06:46.000Z","size":285,"stargazers_count":20,"open_issues_count":4,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-23T14:40:54.963Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-20T08:09:08.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36862457,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-23T02:00:05.822Z","response_time":128,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hynek","name":"Hynek Schlawack","uuid":"41240","kind":"user","description":"","email":"hs@ox.cx","website":"https://hynek.me/about/","location":"Berlin","twitter":"hynek","company":"Variomedia AG","icon_url":"https://avatars.githubusercontent.com/u/41240?u=c77db9d353f9df8435a5bfcdaab2121c047f0456\u0026v=4","repositories_count":41,"last_synced_at":"2026-08-20T05:49:45.399Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/hynek","funding_links":["https://github.com/sponsors/hynek"],"total_stars":9746,"followers":1927,"following":6,"created_at":"2022-11-02T16:24:56.789Z","updated_at":"2026-08-20T05:49:45.593Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek/repositories"},"tags":[{"name":"26.1.0","sha":"fb50afcbb80aee5e87d6f8b1d15e7238321387c9","kind":"tag","published_at":"2026-08-20T07:07:16.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/26.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/26.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@26.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/26.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/26.1.0/manifests"},{"name":"25.1.0","sha":"66f5b2340ef25699504bcc0f08eadcbefaf219aa","kind":"tag","published_at":"2025-07-30T09:43:43.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/25.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/25.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@25.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0/manifests"},{"name":"21.2.0","sha":"2bf609f920d83a081a5787425b9eb1c95ecf6e0c","kind":"tag","published_at":"2021-12-01T08:44:02.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.2.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0/manifests"},{"name":"21.1.0","sha":"78d28409e22144f152bd408ccc2e2dd6efee2466","kind":"tag","published_at":"2021-11-28T10:18:23.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0/manifests"}]},"repo_metadata_updated_at":"2026-08-24T20:57:08.994Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":28.487357239040445,"forks_count":27.89387062989377,"docker_downloads_count":null,"average":14.095306967233554},"purl":"pkg:apk/alpine/py3-argon2-cffi-bindings-pyc?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.18","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-argon2-cffi-bindings-pyc","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-argon2-cffi-bindings-pyc","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-argon2-cffi-bindings-pyc/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-24T13:44:12.845Z","issues_count":14,"pull_requests_count":146,"avg_time_to_close_issue":3205857.0,"avg_time_to_close_pull_request":422966.4962406015,"issues_closed_count":9,"pull_requests_closed_count":133,"pull_request_authors_count":10,"issue_authors_count":14,"avg_comments_per_issue":3.7857142857142856,"avg_comments_per_pull_request":0.726027397260274,"merged_pull_requests_count":127,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":6,"past_year_pull_requests_count":26,"past_year_avg_time_to_close_issue":6664892.0,"past_year_avg_time_to_close_pull_request":824065.4166666666,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":24,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":6.666666666666667,"past_year_avg_comments_per_pull_request":1.3076923076923077,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":21,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":41,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/py3-argon2-cffi-bindings-pyc/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/py3-argon2-cffi-bindings-pyc/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/py3-argon2-cffi-bindings-pyc/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/py3-argon2-cffi-bindings-pyc/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/py3-argon2-cffi-bindings-pyc/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages/py3-argon2-cffi-bindings-pyc/codemeta","maintainers":[{"uuid":"alice@ayaya.dev","login":null,"name":"psykose","email":null,"url":"https://pkgs.alpinelinux.org/packages?maintainer=psykose","packages_count":493,"html_url":"https://pkgs.alpinelinux.org/packages?maintainer=psykose","role":null,"created_at":"2023-05-23T06:58:49.002Z","updated_at":"2023-05-23T06:58:49.002Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/maintainers/alice@ayaya.dev/packages"}],"registry":{"name":"alpine-v3.18","url":"https://pkgs.alpinelinux.org/packages?branch=v3.18","ecosystem":"alpine","default":false,"packages_count":20068,"maintainers_count":367,"namespaces_count":2,"keywords_count":3639,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":1238},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-05-22T10:43:30.622Z","updated_at":"2026-08-22T05:06:15.110Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.18/namespaces"}},{"id":14537704,"name":"security/py-argon2-cffi-bindings","ecosystem":"pkgsrc","description":"Low-level CFFI bindings for Argon2","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"mit","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":["security","python"],"namespace":"security","versions_count":1,"first_release_published_at":"2026-03-06T20:09:53.000Z","latest_release_published_at":"2026-03-06T20:09:53.000Z","latest_release_number":"25.1.0","last_synced_at":"2026-05-27T09:37:46.148Z","created_at":"2026-05-27T09:37:45.828Z","updated_at":"2026-08-25T06:21:21.510Z","registry_url":"https://pkgsrc.se/security/py-argon2-cffi-bindings","install_command":"pkg_add py311-argon2-cffi-bindings","documentation_url":"https://pkgsrc.se/security/py-argon2-cffi-bindings","metadata":{"pkg_slug":"py-argon2-cffi-bindings","pkgbase":"py311-argon2-cffi-bindings","machine_arch":"x86_64","opsys":"NetBSD","pkgname_latest":"py311-argon2-cffi-bindings-25.1.0"},"repo_metadata":{"id":40559156,"uuid":"432416228","full_name":"hynek/argon2-cffi-bindings","owner":"hynek","description":"Low-level Python CFFI Bindings for Argon2","archived":false,"fork":false,"pushed_at":"2026-08-20T08:06:46.000Z","size":285,"stargazers_count":20,"open_issues_count":4,"forks_count":20,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-08-23T14:40:54.963Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hynek.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":".github/CONTRIBUTING.md","funding":".github/FUNDING.yml","license":"LICENSE","code_of_conduct":".github/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":".github/SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null},"funding":{"github":"hynek","tidelift":"pypi/argon2-cffi-bindings","thanks_dev":"u/gh/hynek","custom":"https://hynek.me/say-thanks/"}},"created_at":"2021-11-27T09:15:15.000Z","updated_at":"2026-08-20T08:09:08.000Z","dependencies_parsed_at":"2026-08-08T05:48:09.077Z","dependency_job_id":null,"html_url":"https://github.com/hynek/argon2-cffi-bindings","commit_stats":{"total_commits":156,"total_committers":5,"mean_commits":31.2,"dds":0.5,"last_synced_commit":"6f4c56a184b34d17f5715a8a50163ddcd4805d16"},"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/hynek/argon2-cffi-bindings","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/sbom","scorecard":{"id":475118,"data":{"date":"2025-08-11","repo":{"name":"github.com/hynek/argon2-cffi-bindings","commit":"2195f58403ba544ef2d6e7d206121ea1d52ff3b9"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":7.3,"checks":[{"name":"Code-Review","score":0,"reason":"Found 1/21 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":10,"reason":"13 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: .github/SECURITY.md:1","Info: Found linked content: .github/SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: .github/SECURITY.md:1","Info: Found text in security policy: .github/SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Info: found token with 'none' permissions: .github/workflows/ci.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:9","Info: found token with 'none' permissions: .github/workflows/wheels.yml:1","Info: topLevel 'contents' permission set to 'read': .github/workflows/zizmor.yml:11","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/wheels.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/wheels.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/wheels.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/zizmor.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zizmor.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/hynek/argon2-cffi-bindings/zizmor.yml/main?enable=pin","Info:   0 out of  18 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   4 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (16) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T15:05:40.910Z","repository_id":40559156,"created_at":"2025-08-19T15:05:40.911Z","updated_at":"2025-08-19T15:05:40.911Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36862457,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-23T02:00:05.822Z","response_time":128,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"hynek","name":"Hynek Schlawack","uuid":"41240","kind":"user","description":"","email":"hs@ox.cx","website":"https://hynek.me/about/","location":"Berlin","twitter":"hynek","company":"Variomedia AG","icon_url":"https://avatars.githubusercontent.com/u/41240?u=c77db9d353f9df8435a5bfcdaab2121c047f0456\u0026v=4","repositories_count":41,"last_synced_at":"2026-08-20T05:49:45.399Z","metadata":{"has_sponsors_listing":true,"funding":null},"html_url":"https://github.com/hynek","funding_links":["https://github.com/sponsors/hynek"],"total_stars":9746,"followers":1927,"following":6,"created_at":"2022-11-02T16:24:56.789Z","updated_at":"2026-08-20T05:49:45.593Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hynek/repositories"},"tags":[{"name":"26.1.0","sha":"fb50afcbb80aee5e87d6f8b1d15e7238321387c9","kind":"tag","published_at":"2026-08-20T07:07:16.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/26.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/26.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@26.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/26.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/26.1.0/manifests"},{"name":"25.1.0","sha":"66f5b2340ef25699504bcc0f08eadcbefaf219aa","kind":"tag","published_at":"2025-07-30T09:43:43.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/25.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/25.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@25.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/25.1.0/manifests"},{"name":"21.2.0","sha":"2bf609f920d83a081a5787425b9eb1c95ecf6e0c","kind":"tag","published_at":"2021-12-01T08:44:02.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.2.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.2.0/manifests"},{"name":"21.1.0","sha":"78d28409e22144f152bd408ccc2e2dd6efee2466","kind":"tag","published_at":"2021-11-28T10:18:23.000Z","download_url":"https://codeload.github.com/hynek/argon2-cffi-bindings/tar.gz/21.1.0","html_url":"https://github.com/hynek/argon2-cffi-bindings/releases/tag/21.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/hynek/argon2-cffi-bindings@21.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/tags/21.1.0/manifests"}]},"repo_metadata_updated_at":"2026-08-25T06:21:21.509Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:pkgsrc/security/py-argon2-cffi-bindings?arch=x86_64\u0026os=NetBSD","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/pkgsrc/security/py-argon2-cffi-bindings","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/pkgsrc/security/py-argon2-cffi-bindings","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/pkgsrc/security/py-argon2-cffi-bindings/dependencies","status":null,"funding_links":["https://github.com/sponsors/hynek","https://tidelift.com/funding/github/pypi/argon2-cffi-bindings","https://thanks.dev/u/gh/hynek","https://hynek.me/say-thanks/"],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-24T13:44:12.845Z","issues_count":14,"pull_requests_count":146,"avg_time_to_close_issue":3205857.0,"avg_time_to_close_pull_request":422966.4962406015,"issues_closed_count":9,"pull_requests_closed_count":133,"pull_request_authors_count":10,"issue_authors_count":14,"avg_comments_per_issue":3.7857142857142856,"avg_comments_per_pull_request":0.726027397260274,"merged_pull_requests_count":127,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":6,"past_year_pull_requests_count":26,"past_year_avg_time_to_close_issue":6664892.0,"past_year_avg_time_to_close_pull_request":824065.4166666666,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":24,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":6.666666666666667,"past_year_avg_comments_per_pull_request":1.3076923076923077,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":21,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","maintainers":[{"login":"hynek","count":41,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}],"active_maintainers":[{"login":"hynek","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/packages/security%2Fpy-argon2-cffi-bindings/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/packages/security%2Fpy-argon2-cffi-bindings/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/packages/security%2Fpy-argon2-cffi-bindings/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/packages/security%2Fpy-argon2-cffi-bindings/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/packages/security%2Fpy-argon2-cffi-bindings/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/packages/security%2Fpy-argon2-cffi-bindings/codemeta","maintainers":[],"registry":{"name":"pkgsrc-netbsd-x86_64-10.1-all","url":"https://cdn.netbsd.org/pub/pkgsrc/packages/NetBSD/x86_64/10.1/All","ecosystem":"pkgsrc","default":true,"packages_count":19690,"maintainers_count":0,"namespaces_count":43,"keywords_count":368,"github":"pkgsrc","metadata":{"funded_packages_count":480},"icon_url":"https://github.com/pkgsrc.png","created_at":"2026-05-26T08:59:24.518Z","updated_at":"2026-08-25T05:00:19.652Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/namespaces"}},{"id":8676164,"name":"py3-argon2-cffi-bindings-pyc","ecosystem":"alpine","description":"Precompiled Python bytecode for py3-argon2-cffi-bindings","homepage":"https://github.com/hynek/argon2-cffi-bindings","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/hynek/argon2-cffi-bindings","keywords_array":[],"namespace":"community","versions_count":1,"first_release_published_at":"2023-07-29T09:00:08.000Z","latest_release_published_at":"2023-07-29T09:00:08.000Z","latest_release_number":"21.2.0-r2","last_synced_at":"2026-04-08T14:06:23.346Z","created_at":"2023-12-20T10:26:08.083Z","updated_at":"2026-04-08T14:06:23.346Z","registry_url":"https://pkgs.alpinelinux.org/package/v3.19/community/x86_64/py3-argon2-cffi-bindings-pyc","install_command":"apk add py3-argon2-cffi-bindings-pyc","documentation_url":null,"metadata":{"repository":"community","architecture":"x86_64"},"repo_metadata":{},"repo_metadata_updated_at":null,"dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:apk/alpine/py3-argon2-cffi-bindings-pyc?arch=x86_64\u0026repository_url=https://pkgs.alpinelinux.org/packages?branch=v3.19","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/alpine/py3-argon2-cffi-bindings-pyc","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/alpine/py3-argon2-cffi-bindings-pyc","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/alpine/py3-argon2-cffi-bindings-pyc/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/py3-argon2-cffi-bindings-pyc/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/py3-argon2-cffi-bindings-pyc/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/py3-argon2-cffi-bindings-pyc/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/py3-argon2-cffi-bindings-pyc/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/py3-argon2-cffi-bindings-pyc/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages/py3-argon2-cffi-bindings-pyc/codemeta","maintainers":[],"registry":{"name":"alpine-v3.19","url":"https://pkgs.alpinelinux.org/packages?branch=v3.19","ecosystem":"alpine","default":false,"packages_count":23031,"maintainers_count":392,"namespaces_count":2,"keywords_count":3176,"github":"alpinelinux","metadata":{"repos":["main","community"],"funded_packages_count":960},"icon_url":"https://github.com/alpinelinux.png","created_at":"2023-12-20T09:51:56.346Z","updated_at":"2026-08-25T05:07:15.581Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/alpine-v3.19/namespaces"}}],"commits":{"id":3040,"full_name":"hynek/argon2-cffi-bindings","default_branch":"main","total_commits":252,"total_committers":9,"total_bot_commits":78,"total_bot_committers":2,"mean_commits":28.0,"dds":0.33333333333333337,"past_year_total_commits":66,"past_year_total_committers":7,"past_year_total_bot_commits":20,"past_year_total_bot_committers":2,"past_year_mean_commits":9.428571428571429,"past_year_dds":0.36363636363636365,"last_synced_at":"2026-08-19T11:07:50.744Z","last_synced_commit":"04ace1a695f4a9df96283f84d697f3268bcbeb9d","created_at":"2023-03-07T09:15:55.920Z","updated_at":"2026-08-19T11:07:50.037Z","committers":[{"name":"Hynek Schlawack","email":"hs@ox.cx","login":"hynek","count":168},{"name":"pre-commit-ci[bot]","email":"66853113+pre-commit-ci[bot]","login":"pre-commit-ci[bot]","count":42},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":36},{"name":"Step Security Bot","email":"bot@stepsecurity.io","login":"step-security-bot","count":1},{"name":"Ronny Pfannschmidt","email":"opensource@ronnypfannschmidt.de","login":"RonnyPfannschmidt","count":1},{"name":"Julien Stephan","email":"stephan-julien@laposte.net","login":"justeph","count":1},{"name":"Hugo van Kemenade","email":"1324225+hugovk","login":"hugovk","count":1},{"name":"Finn Womack","email":"flan313@gmail.com","login":"finnagin","count":1},{"name":"Bruno Verachten","email":"gounthar@gmail.com","login":"gounthar","count":1}],"past_year_committers":[{"name":"Hynek Schlawack","email":"hs@ox.cx","login":"hynek","count":42},{"name":"pre-commit-ci[bot]","email":"66853113+pre-commit-ci[bot]","login":"pre-commit-ci[bot]","count":12},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":8},{"name":"Ronny Pfannschmidt","email":"opensource@ronnypfannschmidt.de","login":"RonnyPfannschmidt","count":1},{"name":"Julien Stephan","email":"stephan-julien@laposte.net","login":"justeph","count":1},{"name":"Hugo van Kemenade","email":"1324225+hugovk","login":"hugovk","count":1},{"name":"Bruno Verachten","email":"gounthar@gmail.com","login":"gounthar","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-08-20T00:00:10.776Z","repositories_count":6752313,"commits_count":978410056,"contributors_count":41242979,"owners_count":1359078,"committers_count":3353170,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"hynek/argon2-cffi-bindings","html_url":"https://github.com/hynek/argon2-cffi-bindings","last_synced_at":"2026-08-24T13:44:12.845Z","status":null,"issues_count":14,"pull_requests_count":146,"avg_time_to_close_issue":3205857.0,"avg_time_to_close_pull_request":422966.4962406015,"issues_closed_count":9,"pull_requests_closed_count":133,"pull_request_authors_count":10,"issue_authors_count":14,"avg_comments_per_issue":3.7857142857142856,"avg_comments_per_pull_request":0.726027397260274,"merged_pull_requests_count":127,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":6,"past_year_pull_requests_count":26,"past_year_avg_time_to_close_issue":6664892.0,"past_year_avg_time_to_close_pull_request":824065.4166666666,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":24,"past_year_pull_request_authors_count":7,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":6.666666666666667,"past_year_avg_comments_per_pull_request":1.3076923076923077,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":21,"created_at":"2023-05-10T11:05:26.619Z","updated_at":"2026-08-24T13:44:12.845Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/hynek%2Fargon2-cffi-bindings/issues","issue_labels_count":{"table":{}},"pull_request_labels_count":{"table":{"dependencies":44,"github_actions":7,"AI slop":1}},"issue_author_associations_count":{"table":{"NONE":10,"CONTRIBUTOR":3,"OWNER":1}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":102,"OWNER":40,"NONE":4}},"issue_authors":{"table":{"afi-dev":1,"ngoldbaum":1,"hynek":1,"WhiteSymmetry":1,"thebaptiste":1,"mcastillof":1,"chepo92":1,"justeph":1,"robsidiii":1,"ThomasWaldmann":1,"finnagin":1,"hinoue":1,"baseplate-admin":1,"pre-commit-ci[bot]":1}},"pull_request_authors":{"table":{"pre-commit-ci[bot]":51,"dependabot[bot]":44,"hynek":40,"ngoldbaum":2,"finnagin":2,"RonnyPfannschmidt":2,"tacaswell":2,"lphuc2250gma":1,"hugovk":1,"step-security-bot":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-08-25T00:00:09.459Z","repositories_count":16324715,"issues_count":42381630,"pull_requests_count":135850352,"authors_count":11519836,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{}},"past_year_pull_request_labels_count":{"table":{"dependencies":5,"github_actions":5,"AI slop":1}},"past_year_issue_author_associations_count":{"table":{"NONE":3,"CONTRIBUTOR":2,"OWNER":1}},"past_year_pull_request_author_associations_count":{"table":{"CONTRIBUTOR":17,"OWNER":8,"NONE":1}},"past_year_issue_authors":{"table":{"baseplate-admin":1,"hynek":1,"justeph":1,"ngoldbaum":1,"thebaptiste":1,"ThomasWaldmann":1}},"past_year_pull_request_authors":{"table":{"hynek":8,"pre-commit-ci[bot]":7,"dependabot[bot]":5,"ngoldbaum":2,"RonnyPfannschmidt":2,"hugovk":1,"lphuc2250gma":1}},"maintainers":[{"table":{"login":"hynek","count":41,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}}],"active_maintainers":[{"table":{"login":"hynek","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hynek"}}]}},"events":{"total":{"DeleteEvent":26,"PullRequestEvent":52,"ForkEvent":7,"IssuesEvent":3,"WatchEvent":7,"IssueCommentEvent":27,"PushEvent":88,"PullRequestReviewEvent":8,"PullRequestReviewCommentEvent":5,"CreateEvent":24},"last_year":{"DeleteEvent":12,"PullRequestEvent":19,"ForkEvent":2,"WatchEvent":4,"IssueCommentEvent":3,"PushEvent":39,"PullRequestReviewEvent":2,"PullRequestReviewCommentEvent":1,"CreateEvent":13}},"keywords":[],"dependencies":[{"ecosystem":"actions","filepath":".github/workflows/ci.yml","sha":null,"kind":"manifest","created_at":"2023-02-01T05:15:32.682Z","updated_at":"2023-02-01T05:15:32.682Z","repository_link":"https://github.com/hynek/argon2-cffi-bindings/blob/main/.github/workflows/ci.yml","dependencies":[{"id":7289885514,"package_name":"step-security/harden-runner","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7289885515,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7289885516,"package_name":"actions/setup-python","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false},{"id":7289885517,"package_name":"hynek/build-and-inspect-python-package","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/codeql-analysis.yml","sha":null,"kind":"manifest","created_at":"2023-02-01T05:15:32.710Z","updated_at":"2023-02-01T05:15:32.710Z","repository_link":"https://github.com/hynek/argon2-cffi-bindings/blob/main/.github/workflows/codeql-analysis.yml","dependencies":[{"id":7289885527,"package_name":"step-security/harden-runner","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7289885528,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7289885529,"package_name":"github/codeql-action/init","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7289885530,"package_name":"github/codeql-action/analyze","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/wheels.yml","sha":null,"kind":"manifest","created_at":"2023-02-01T05:15:32.758Z","updated_at":"2023-02-01T05:15:32.758Z","repository_link":"https://github.com/hynek/argon2-cffi-bindings/blob/main/.github/workflows/wheels.yml","dependencies":[{"id":7289886310,"package_name":"step-security/harden-runner","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7289886311,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":7289886312,"package_name":"docker/setup-qemu-action","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7289886313,"package_name":"pypa/cibuildwheel","ecosystem":"actions","requirements":"v2.11.4","direct":true,"kind":"composite","optional":false},{"id":7289886314,"package_name":"actions/upload-artifact","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"pypi","filepath":"pyproject.toml","sha":null,"kind":"manifest","created_at":"2023-10-01T16:39:21.155Z","updated_at":"2023-10-01T16:39:21.155Z","repository_link":"https://github.com/hynek/argon2-cffi-bindings/blob/main/pyproject.toml","dependencies":[{"id":14028728540,"package_name":"cffi","ecosystem":"pypi","requirements":"\u003e=1.0.1","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"pypi","filepath":"setup.py","sha":null,"kind":"manifest","created_at":"2023-10-01T16:39:22.581Z","updated_at":"2023-10-01T16:39:22.581Z","repository_link":"https://github.com/hynek/argon2-cffi-bindings/blob/main/setup.py","dependencies":[]},{"ecosystem":"actions","filepath":".github/workflows/zizmor.yml","sha":null,"kind":"manifest","created_at":"2026-08-08T05:48:08.775Z","updated_at":"2026-08-08T05:48:08.775Z","repository_link":"https://github.com/hynek/argon2-cffi-bindings/blob/main/.github/workflows/zizmor.yml","dependencies":[{"id":25940401666,"package_name":"actions/checkout","ecosystem":"actions","requirements":"3d3c42e5aac5ba805825da76410c181273ba90b1","direct":true,"kind":"composite","optional":false},{"id":25940401667,"package_name":"zizmorcore/zizmor-action","ecosystem":"actions","requirements":"3dc1ecc9bcb9e94e9b2c709687979e1298497054","direct":true,"kind":"composite","optional":false}]}],"score":25.77144843004995,"created_at":"2026-05-04T06:49:09.229Z","updated_at":"2026-08-25T14:12:48.951Z","avatar_url":"https://github.com/hynek.png","language":"C","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/371652","html_url":"https://summary.ecosyste.ms/projects/371652"}