{"id":371922,"url":"https://github.com/RDFLib/rdflib","last_synced_at":"2026-08-26T15:04:44.983Z","repository":{"id":2377038,"uuid":"3342046","full_name":"RDFLib/rdflib","owner":"RDFLib","description":"RDFLib is a Python library for working with RDF, a simple yet powerful language for representing information.","archived":false,"fork":false,"pushed_at":"2026-08-19T05:43:37.000Z","size":24602,"stargazers_count":2498,"open_issues_count":373,"forks_count":603,"subscribers_count":77,"default_branch":"main","last_synced_at":"2026-08-24T14:12:34.167Z","etag":null,"topics":["graph","json-ld","linked-data","n3","namespace","nquads","ntriples","parser","pypi","python","python-library","rdf","rdf-xml","rdflib","semantic-web","serializer","sparql","turtle","turtle-rdf","uri"],"latest_commit_sha":null,"homepage":"https://rdflib.readthedocs.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RDFLib.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"docs/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"docs/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":"CODEOWNERS","security":"docs/security_considerations.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2012-02-03T05:49:13.000Z","updated_at":"2026-08-24T10:20:48.000Z","dependencies_parsed_at":"2026-08-24T14:23:06.478Z","dependency_job_id":null,"html_url":"https://github.com/RDFLib/rdflib","commit_stats":{"total_commits":4206,"total_committers":192,"mean_commits":21.90625,"dds":0.7998097955301949,"last_synced_commit":"0ecc40009ae397c2798c0c08a2d751a1a9d2f8a7"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/RDFLib/rdflib","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/sbom","scorecard":{"id":116529,"data":{"date":"2025-08-11","repo":{"name":"github.com/RDFLib/rdflib","commit":"7a1023fa6f9ed059d104a8f924b50eb32d46a1e7"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":10,"reason":"14 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":8,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:36","Info: jobLevel 'packages' permission set to 'read': .github/workflows/docker-images.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:62","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test-report.yml:11","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/test-report.yml:12","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:121","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:156","Warn: no topLevel permission defined: .github/workflows/docker-images.yaml:1","Warn: no topLevel permission defined: .github/workflows/test-report.yml:1","Warn: no topLevel permission defined: .github/workflows/validate.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":6,"reason":"Found 13/21 approved changesets -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 7.1.4 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/114718987","Warn: release artifact 7.1.4 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/114718987"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile.devcontainer:1: pin your Docker image by updating mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04 to mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04@sha256:e57fdff274ed0bac0776490fa2644c242491bb21d4df7ad0bb79b433eac5168d","Warn: pipCommand not pinned by hash: Dockerfile.devcontainer:46-52","Warn: pipCommand not pinned by hash: docker/latest/Dockerfile:5-7","Warn: pipCommand not pinned by hash: docker/unstable/Dockerfile:6-7","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:49","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:74","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:78","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:145","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned","Info:   2 out of   3 containerImage dependencies pinned","Info:   1 out of   8 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-images.yaml:14"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-16T01:25:56.449Z","repository_id":2377038,"created_at":"2025-08-16T01:25:56.449Z","updated_at":"2025-08-16T01:25:56.449Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36886078,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-24T02:00:14.037Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"RDFLib","name":"RDFlib","uuid":"1401847","kind":"organization","description":"RDFlib, the GitHub organization, is a volunteer-maintained collection of Python tools for working with RDF data.","email":null,"website":"https://rdflib.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1401847?v=4","repositories_count":38,"last_synced_at":"2026-08-25T23:46:29.104Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/RDFLib","funding_links":[],"total_stars":4045,"followers":203,"following":0,"created_at":"2022-11-02T21:14:04.590Z","updated_at":"2026-08-25T23:46:29.117Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib/repositories"},"packages":[{"id":76201,"name":"py-rdflib","ecosystem":"spack","description":"RDFLib is a pure Python package for working with RDF. RDFLib contains\nmost things you need to work with RDF, including: parsers and\nserializers for RDF/XML, N3, NTriples, N-Quads, Turtle, TriX, Trig and\nJSON-LD (via a plugin). a Graph interface which can be backed by any one\nof a number of Store implementations store implementations for in-memory\nstorage and persistent storage on top of the Berkeley DB a SPARQL 1.1\nimplementation - supporting SPARQL 1.1 Queries and Update statements\n","homepage":"https://github.com/RDFLib/rdflib","licenses":"[]","normalized_licenses":["Other"],"repository_url":"https://github.com/RDFLib/rdflib","keywords_array":[],"namespace":null,"versions_count":7,"first_release_published_at":"2022-04-05T09:28:31.359Z","latest_release_published_at":"2026-05-06T08:02:13.486Z","latest_release_number":"7.6.0","last_synced_at":"2026-08-21T12:38:00.005Z","created_at":"2022-04-05T09:28:31.328Z","updated_at":"2026-08-21T12:38:00.005Z","registry_url":"https://packages.spack.io/package.html?name=py-rdflib","install_command":"spack install py-rdflib","documentation_url":null,"metadata":{},"repo_metadata":{"id":2377038,"uuid":"3342046","full_name":"RDFLib/rdflib","owner":"RDFLib","description":"RDFLib is a Python library for working with RDF, a simple yet powerful language for representing information.","archived":false,"fork":false,"pushed_at":"2026-08-05T05:44:39.000Z","size":23872,"stargazers_count":2486,"open_issues_count":376,"forks_count":599,"subscribers_count":77,"default_branch":"main","last_synced_at":"2026-08-09T11:25:24.343Z","etag":null,"topics":["graph","json-ld","linked-data","n3","namespace","nquads","ntriples","parser","pypi","python","python-library","rdf","rdf-xml","rdflib","semantic-web","serializer","sparql","turtle","turtle-rdf","uri"],"latest_commit_sha":null,"homepage":"https://rdflib.readthedocs.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RDFLib.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"docs/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"docs/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":"CODEOWNERS","security":"docs/security_considerations.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2012-02-03T05:49:13.000Z","updated_at":"2026-08-05T20:27:34.000Z","dependencies_parsed_at":"2023-01-16T18:31:12.523Z","dependency_job_id":"0230eed4-02cd-49b4-bbec-beb2992371e7","html_url":"https://github.com/RDFLib/rdflib","commit_stats":{"total_commits":4206,"total_committers":192,"mean_commits":21.90625,"dds":0.7998097955301949,"last_synced_commit":"0ecc40009ae397c2798c0c08a2d751a1a9d2f8a7"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/RDFLib/rdflib","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/sbom","scorecard":{"id":116529,"data":{"date":"2025-08-11","repo":{"name":"github.com/RDFLib/rdflib","commit":"7a1023fa6f9ed059d104a8f924b50eb32d46a1e7"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":10,"reason":"14 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":8,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:36","Info: jobLevel 'packages' permission set to 'read': .github/workflows/docker-images.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:62","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test-report.yml:11","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/test-report.yml:12","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:121","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:156","Warn: no topLevel permission defined: .github/workflows/docker-images.yaml:1","Warn: no topLevel permission defined: .github/workflows/test-report.yml:1","Warn: no topLevel permission defined: .github/workflows/validate.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":6,"reason":"Found 13/21 approved changesets -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 7.1.4 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/114718987","Warn: release artifact 7.1.4 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/114718987"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile.devcontainer:1: pin your Docker image by updating mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04 to mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04@sha256:e57fdff274ed0bac0776490fa2644c242491bb21d4df7ad0bb79b433eac5168d","Warn: pipCommand not pinned by hash: Dockerfile.devcontainer:46-52","Warn: pipCommand not pinned by hash: docker/latest/Dockerfile:5-7","Warn: pipCommand not pinned by hash: docker/unstable/Dockerfile:6-7","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:49","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:74","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:78","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:145","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned","Info:   2 out of   3 containerImage dependencies pinned","Info:   1 out of   8 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-images.yaml:14"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-16T01:25:56.449Z","repository_id":2377038,"created_at":"2025-08-16T01:25:56.449Z","updated_at":"2025-08-16T01:25:56.449Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36460895,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"RDFLib","name":"RDFlib","uuid":"1401847","kind":"organization","description":"RDFlib, the GitHub organization, is a volunteer-maintained collection of Python tools for working with RDF data.","email":null,"website":"https://rdflib.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1401847?v=4","repositories_count":38,"last_synced_at":"2025-06-18T07:02:14.861Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/RDFLib","funding_links":[],"total_stars":4045,"followers":159,"following":0,"created_at":"2022-11-02T21:14:04.590Z","updated_at":"2025-06-18T07:02:14.861Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-17T10:37:09.648Z","dependent_packages_count":10,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":5.516187300263999,"stargazers_count":5.363345838543838,"forks_count":4.0016673614005835,"average":3.720300125052105},"purl":"pkg:spack/py-rdflib","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/spack/py-rdflib","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/spack/py-rdflib","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/spack/py-rdflib/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-16T10:02:32.044Z","issues_count":282,"pull_requests_count":1063,"avg_time_to_close_issue":23665147.85714286,"avg_time_to_close_pull_request":1651532.8202115158,"issues_closed_count":84,"pull_requests_closed_count":851,"pull_request_authors_count":86,"issue_authors_count":154,"avg_comments_per_issue":2.7375886524822697,"avg_comments_per_pull_request":1.4694261523988712,"merged_pull_requests_count":623,"bot_issues_count":6,"bot_pull_requests_count":610,"past_year_issues_count":29,"past_year_pull_requests_count":95,"past_year_avg_time_to_close_issue":1062619.3333333333,"past_year_avg_time_to_close_pull_request":914978.9583333334,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":48,"past_year_pull_request_authors_count":22,"past_year_issue_authors_count":21,"past_year_avg_comments_per_issue":2.2413793103448274,"past_year_avg_comments_per_pull_request":1.1894736842105262,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":46,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/issues","maintainers":[{"login":"aucampia","count":132,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aucampia"},{"login":"nicholascar","count":54,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"},{"login":"gjhiggins","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gjhiggins"},{"login":"gromgull","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gromgull"},{"login":"joernhees","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joernhees"},{"login":"niklasl","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/niklasl"},{"login":"edsu","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/edsu"}],"active_maintainers":[{"login":"nicholascar","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/packages/py-rdflib/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/packages/py-rdflib/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/packages/py-rdflib/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/packages/py-rdflib/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/packages/py-rdflib/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/packages/py-rdflib/codemeta","maintainers":[{"uuid":"adamjstewart","login":"adamjstewart","name":null,"email":null,"url":"https://github.com/adamjstewart","packages_count":2155,"html_url":null,"role":null,"created_at":"2022-11-14T16:55:13.116Z","updated_at":"2022-11-14T16:55:13.116Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/maintainers/adamjstewart/packages"}],"registry":{"name":"spack.io","url":"https://packages.spack.io","ecosystem":"spack","default":true,"packages_count":9302,"maintainers_count":1032,"namespaces_count":0,"keywords_count":3955,"github":"spack","metadata":{"funded_packages_count":509},"icon_url":"https://github.com/spack.png","created_at":"2022-04-04T15:19:23.514Z","updated_at":"2026-08-22T05:06:19.396Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/spack.io/namespaces"}},{"id":2898344,"name":"rdflib","ecosystem":"pypi","description":"RDFLib is a Python library for working with RDF, a simple yet powerful language for representing information.","homepage":"https://github.com/RDFLib/rdflib","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/RDFLib/rdflib","keywords_array":[],"namespace":null,"versions_count":48,"first_release_published_at":"2020-04-04T02:40:14.000Z","latest_release_published_at":"2026-02-13T07:15:46.000Z","latest_release_number":"7.6.0","last_synced_at":"2026-08-21T12:38:33.148Z","created_at":"2022-04-10T12:26:13.307Z","updated_at":"2026-08-21T12:38:33.149Z","registry_url":"https://pypi.org/project/rdflib/","install_command":"pip install rdflib --index-url https://pypi.org/simple","documentation_url":"https://rdflib.readthedocs.org/","metadata":{"funding":null,"documentation":"https://rdflib.readthedocs.org/","classifiers":["License :: OSI Approved :: BSD License","Natural Language :: English","Operating System :: OS Independent","Programming Language :: Python","Programming Language :: Python :: 3","Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.13","Programming Language :: Python :: 3.14","Programming Language :: Python :: 3.8","Programming Language :: Python :: 3.9","Topic :: Software Development :: Libraries :: Python Modules"],"normalized_name":"rdflib","project_status":null},"repo_metadata":{"id":2377038,"uuid":"3342046","full_name":"RDFLib/rdflib","owner":"RDFLib","description":"RDFLib is a Python library for working with RDF, a simple yet powerful language for representing information.","archived":false,"fork":false,"pushed_at":"2026-08-14T09:50:05.000Z","size":24685,"stargazers_count":2495,"open_issues_count":364,"forks_count":602,"subscribers_count":78,"default_branch":"main","last_synced_at":"2026-08-17T10:36:20.379Z","etag":null,"topics":["graph","json-ld","linked-data","n3","namespace","nquads","ntriples","parser","pypi","python","python-library","rdf","rdf-xml","rdflib","semantic-web","serializer","sparql","turtle","turtle-rdf","uri"],"latest_commit_sha":null,"homepage":"https://rdflib.readthedocs.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RDFLib.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"docs/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"docs/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":"CODEOWNERS","security":"docs/security_considerations.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2012-02-03T05:49:13.000Z","updated_at":"2026-08-16T00:00:06.000Z","dependencies_parsed_at":"2026-08-17T10:46:01.267Z","dependency_job_id":null,"html_url":"https://github.com/RDFLib/rdflib","commit_stats":{"total_commits":4206,"total_committers":192,"mean_commits":21.90625,"dds":0.7998097955301949,"last_synced_commit":"0ecc40009ae397c2798c0c08a2d751a1a9d2f8a7"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/RDFLib/rdflib","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/sbom","scorecard":{"id":116529,"data":{"date":"2025-08-11","repo":{"name":"github.com/RDFLib/rdflib","commit":"7a1023fa6f9ed059d104a8f924b50eb32d46a1e7"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":10,"reason":"14 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":8,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:36","Info: jobLevel 'packages' permission set to 'read': .github/workflows/docker-images.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:62","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test-report.yml:11","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/test-report.yml:12","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:121","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:156","Warn: no topLevel permission defined: .github/workflows/docker-images.yaml:1","Warn: no topLevel permission defined: .github/workflows/test-report.yml:1","Warn: no topLevel permission defined: .github/workflows/validate.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":6,"reason":"Found 13/21 approved changesets -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 7.1.4 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/114718987","Warn: release artifact 7.1.4 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/114718987"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile.devcontainer:1: pin your Docker image by updating mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04 to mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04@sha256:e57fdff274ed0bac0776490fa2644c242491bb21d4df7ad0bb79b433eac5168d","Warn: pipCommand not pinned by hash: Dockerfile.devcontainer:46-52","Warn: pipCommand not pinned by hash: docker/latest/Dockerfile:5-7","Warn: pipCommand not pinned by hash: docker/unstable/Dockerfile:6-7","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:49","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:74","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:78","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:145","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned","Info:   2 out of   3 containerImage dependencies pinned","Info:   1 out of   8 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-images.yaml:14"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-16T01:25:56.449Z","repository_id":2377038,"created_at":"2025-08-16T01:25:56.449Z","updated_at":"2025-08-16T01:25:56.449Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36766136,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-18T02:00:06.197Z","response_time":52,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"RDFLib","name":"RDFlib","uuid":"1401847","kind":"organization","description":"RDFlib, the GitHub organization, is a volunteer-maintained collection of Python tools for working with RDF data.","email":null,"website":"https://rdflib.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1401847?v=4","repositories_count":38,"last_synced_at":"2025-06-18T07:02:14.861Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/RDFLib","funding_links":[],"total_stars":4045,"followers":159,"following":0,"created_at":"2022-11-02T21:14:04.590Z","updated_at":"2025-06-18T07:02:14.861Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib/repositories"},"tags":[{"name":"7.6.0","sha":"8b32146a0f9cb748c2068662e50d02b42fc86dfd","kind":"commit","published_at":"2026-02-13T07:11:35.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/7.6.0","html_url":"https://github.com/RDFLib/rdflib/releases/tag/7.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@7.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/7.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/7.6.0/manifests"},{"name":"7.5.0","sha":"689e8fd634615b5ff9a004f4905cdf24ca4821ab","kind":"commit","published_at":"2025-11-28T02:15:12.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/7.5.0","html_url":"https://github.com/RDFLib/rdflib/releases/tag/7.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@7.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/7.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/7.5.0/manifests"},{"name":"7.4.0","sha":"c2c94e50d696d4d890bb5fbd40feb3678ed331d5","kind":"commit","published_at":"2025-10-30T10:38:09.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/7.4.0","html_url":"https://github.com/RDFLib/rdflib/releases/tag/7.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@7.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/7.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/7.4.0/manifests"},{"name":"7.3.0","sha":"3b67ea708580e60fa0e5ce1f3a9e190c66f84428","kind":"commit","published_at":"2025-10-24T07:02:24.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/7.3.0","html_url":"https://github.com/RDFLib/rdflib/releases/tag/7.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@7.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/7.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/7.3.0/manifests"},{"name":"7.2.1","sha":"856c1af6b59f919d0d1230cb718c72f1415caf23","kind":"commit","published_at":"2025-09-19T02:23:52.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/7.2.1","html_url":"https://github.com/RDFLib/rdflib/releases/tag/7.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@7.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/7.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/7.2.1/manifests"},{"name":"7.2.0","sha":"19a0ccf014e2661aa04c2efde925f83ca6b54409","kind":"commit","published_at":"2025-09-18T23:37:11.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/7.2.0","html_url":"https://github.com/RDFLib/rdflib/releases/tag/7.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@7.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/7.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/7.2.0/manifests"},{"name":"7.1.4","sha":"95eda41ff7b40dd69e19b8791b7fe7b8c666f625","kind":"commit","published_at":"2025-03-29T02:19:21.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/7.1.4","html_url":"https://github.com/RDFLib/rdflib/releases/tag/7.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@7.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/7.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/7.1.4/manifests"},{"name":"7.1.3","sha":"006949a6c67f13947edf2a4c24cb6540b5256c7e","kind":"commit","published_at":"2025-01-18T04:32:32.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/7.1.3","html_url":"https://github.com/RDFLib/rdflib/releases/tag/7.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@7.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/7.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/7.1.3/manifests"},{"name":"7.1.2","sha":"46f22392d981336e929d83d21f82c2cf6fec2970","kind":"commit","published_at":"2025-01-10T12:59:57.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/7.1.2","html_url":"https://github.com/RDFLib/rdflib/releases/tag/7.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@7.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/7.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/7.1.2/manifests"},{"name":"7.1.1","sha":"eef28e07aa92c38aab5c099205da67b252c8170c","kind":"commit","published_at":"2024-10-28T00:44:39.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/7.1.1","html_url":"https://github.com/RDFLib/rdflib/releases/tag/7.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@7.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/7.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/7.1.1/manifests"},{"name":"7.1.0","sha":"ac03f378d83366097e601da366e588ab58c6e34f","kind":"commit","published_at":"2024-10-17T02:23:46.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/7.1.0","html_url":"https://github.com/RDFLib/rdflib/releases/tag/7.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@7.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/7.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/7.1.0/manifests"},{"name":"7.0.0","sha":"708aecdd7c5c771fb90937e0966ebe20dba66ea2","kind":"commit","published_at":"2023-08-01T21:09:22.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/7.0.0","html_url":"https://github.com/RDFLib/rdflib/releases/tag/7.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@7.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/7.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/7.0.0/manifests"},{"name":"6.3.2","sha":"0593c75753b0b80256d448d56328dbc3967cb055","kind":"commit","published_at":"2023-03-26T11:48:59.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/6.3.2","html_url":"https://github.com/RDFLib/rdflib/releases/tag/6.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@6.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/6.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/6.3.2/manifests"},{"name":"6.3.1","sha":"f3d31b002dda6d20247619b9606eff07039099df","kind":"commit","published_at":"2023-03-18T13:08:47.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/6.3.1","html_url":"https://github.com/RDFLib/rdflib/releases/tag/6.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@6.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/6.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/6.3.1/manifests"},{"name":"6.3.0","sha":"309848bda0098e8d5dc3dcec179d9ca0e2196455","kind":"commit","published_at":"2023-03-16T22:26:37.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/6.3.0","html_url":"https://github.com/RDFLib/rdflib/releases/tag/6.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@6.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/6.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/6.3.0/manifests"},{"name":"6.2.0","sha":"7395c57a56d0e06830c54d55ce5083a5be779a6b","kind":"commit","published_at":"2022-07-16T12:02:25.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/6.2.0","html_url":"https://github.com/RDFLib/rdflib/releases/tag/6.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@6.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/6.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/6.2.0/manifests"},{"name":"6.1.1","sha":"6ed2ef48ed38679bcdafe7cae250a2ef4b315e7b","kind":"commit","published_at":"2021-12-19T23:42:35.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/6.1.1","html_url":"https://github.com/RDFLib/rdflib/releases/tag/6.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@6.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/6.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/6.1.1/manifests"},{"name":"6.1.0","sha":"d508b9bed422734dac03de76c3f00831ec533e27","kind":"commit","published_at":"2021-12-19T22:29:42.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/6.1.0","html_url":"https://github.com/RDFLib/rdflib/releases/tag/6.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@6.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/6.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/6.1.0/manifests"},{"name":"6.0.2","sha":"d971a5d5026016598ccdaeae242ef11849a2d09f","kind":"commit","published_at":"2021-10-10T12:26:37.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/6.0.2","html_url":"https://github.com/RDFLib/rdflib/releases/tag/6.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@6.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/6.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/6.0.2/manifests"},{"name":"6.0.1","sha":"7985b210a6b2f6762ed15c63382a0a36b1b9e4cd","kind":"commit","published_at":"2021-09-17T12:03:36.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/6.0.1","html_url":"https://github.com/RDFLib/rdflib/releases/tag/6.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@6.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/6.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/6.0.1/manifests"},{"name":"6.0.0","sha":"17969dccdc6b182ef19c1a9e0b86a6585026aeab","kind":"commit","published_at":"2021-07-20T13:13:06.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/6.0.0","html_url":"https://github.com/RDFLib/rdflib/releases/tag/6.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@6.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/6.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/6.0.0/manifests"},{"name":"5.0.0","sha":"8c81df03e6cba46025b08e2dd2df6992ac196290","kind":"tag","published_at":"2020-04-18T04:45:17.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/5.0.0","html_url":"https://github.com/RDFLib/rdflib/releases/tag/5.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@5.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/5.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/5.0.0/manifests"},{"name":"4.2.2","sha":"2fb94c8736687c7d85c2ccd25cd3d3f9391b1c65","kind":"commit","published_at":"2017-01-29T16:51:48.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/4.2.2","html_url":"https://github.com/RDFLib/rdflib/releases/tag/4.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@4.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/4.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/4.2.2/manifests"},{"name":"4.2.1","sha":"c2f9725f385a85fd280b4cf30239748b24f5cc06","kind":"commit","published_at":"2015-08-12T14:48:58.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/4.2.1","html_url":"https://github.com/RDFLib/rdflib/releases/tag/4.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@4.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/4.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/4.2.1/manifests"},{"name":"4.2.0","sha":"5cfd4c824206667de3c38b97e5db566a32c1a377","kind":"commit","published_at":"2015-02-19T13:47:05.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/4.2.0","html_url":"https://github.com/RDFLib/rdflib/releases/tag/4.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@4.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/4.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/4.2.0/manifests"},{"name":"4.1.2","sha":"223bcf05f69a9413a62ba1a55e59187097ceb98d","kind":"tag","published_at":"2014-04-15T13:35:19.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/4.1.2","html_url":"https://github.com/RDFLib/rdflib/releases/tag/4.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@4.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/4.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/4.1.2/manifests"},{"name":"4.1.1","sha":"0ff0ca03358ac207f224f2a9c52cbc3326874b0d","kind":"tag","published_at":"2014-03-04T11:32:55.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/4.1.1","html_url":"https://github.com/RDFLib/rdflib/releases/tag/4.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@4.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/4.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/4.1.1/manifests"},{"name":"4.1.0","sha":"3741607fb1993baefc7ff48f035f55cb10c922de","kind":"tag","published_at":"2013-12-31T14:53:54.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/4.1.0","html_url":"https://github.com/RDFLib/rdflib/releases/tag/4.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@4.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/4.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/4.1.0/manifests"},{"name":"4.0.1","sha":"95c6e93b711f2a82d55fd2649682af9b565f79cd","kind":"tag","published_at":"2013-05-22T11:29:27.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/4.0.1","html_url":"https://github.com/RDFLib/rdflib/releases/tag/4.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@4.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/4.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/4.0.1/manifests"},{"name":"4.0","sha":"9ef1fe23f143aca302454bfa7c1834e93843d099","kind":"tag","published_at":"2013-05-16T17:00:48.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/4.0","html_url":"https://github.com/RDFLib/rdflib/releases/tag/4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/4.0/manifests"},{"name":"3.4.0","sha":"7e17a4ce20ec36d67d185c71d61113bd0b53159b","kind":"tag","published_at":"2013-03-04T13:50:11.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/3.4.0","html_url":"https://github.com/RDFLib/rdflib/releases/tag/3.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@3.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/3.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/3.4.0/manifests"},{"name":"3.2.3","sha":"05ca4e7825df4a400434a01857ae3c4a5b90cec2","kind":"tag","published_at":"2012-10-10T09:28:34.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/3.2.3","html_url":"https://github.com/RDFLib/rdflib/releases/tag/3.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@3.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/3.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/3.2.3/manifests"},{"name":"3.2.2","sha":"ab6d368d272f50c0f034ad32008f39fe5c8f1aba","kind":"tag","published_at":"2012-09-25T09:00:07.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/3.2.2","html_url":"https://github.com/RDFLib/rdflib/releases/tag/3.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@3.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/3.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/3.2.2/manifests"},{"name":"3.2.1","sha":"69344b7bb89cf2bef5972ffdb60b6e38e2894619","kind":"tag","published_at":"2012-04-24T13:52:57.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/3.2.1","html_url":"https://github.com/RDFLib/rdflib/releases/tag/3.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@3.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/3.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/3.2.1/manifests"},{"name":"3.2.0","sha":"742c490e35d0ab0e11e7000ed12194dadc062aab","kind":"commit","published_at":"2012-01-19T10:04:11.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/3.2.0","html_url":"https://github.com/RDFLib/rdflib/releases/tag/3.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@3.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/3.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/3.2.0/manifests"},{"name":"3.1.0","sha":"451780760e801d51288d62e131ce70137bd1d086","kind":"commit","published_at":"2011-01-31T06:20:59.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/3.1.0","html_url":"https://github.com/RDFLib/rdflib/releases/tag/3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@3.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/3.1.0/manifests"},{"name":"3.0.0","sha":"e45faf6771a2b21c76f1f8ba002d39d01551c175","kind":"commit","published_at":"2010-05-13T17:50:51.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/3.0.0","html_url":"https://github.com/RDFLib/rdflib/releases/tag/3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/3.0.0/manifests"},{"name":"2.4.0","sha":"0c1456556f8ad306c654f41a327b47ceec42609b","kind":"commit","published_at":"2007-04-04T19:56:31.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/2.4.0","html_url":"https://github.com/RDFLib/rdflib/releases/tag/2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/2.4.0/manifests"},{"name":"2.3.3","sha":"c5183b24f09831c8cb2fe4e0de36862294f789c6","kind":"commit","published_at":"2006-10-22T15:18:26.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/2.3.3","html_url":"https://github.com/RDFLib/rdflib/releases/tag/2.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@2.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/2.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/2.3.3/manifests"},{"name":"2.3.1","sha":"ddcc55550dd569a71f052fed408fedddf9c66f29","kind":"commit","published_at":"2006-03-02T19:40:26.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/2.3.1","html_url":"https://github.com/RDFLib/rdflib/releases/tag/2.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@2.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/2.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/2.3.1/manifests"},{"name":"2.3.0","sha":"88bbee5e93a1c136434fd521d561143cb2cd9d1c","kind":"commit","published_at":"2005-12-23T06:30:42.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/2.3.0","html_url":"https://github.com/RDFLib/rdflib/releases/tag/2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/2.3.0/manifests"},{"name":"2.0.6","sha":"d7850e3cb00b5e5f1aca9445fc754a346bbcb301","kind":"commit","published_at":"2005-03-19T05:41:51.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/2.0.6","html_url":"https://github.com/RDFLib/rdflib/releases/tag/2.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@2.0.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/2.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/2.0.6/manifests"},{"name":"release-2.0.6","sha":"d7850e3cb00b5e5f1aca9445fc754a346bbcb301","kind":"commit","published_at":"2005-03-19T05:41:51.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/release-2.0.6","html_url":"https://github.com/RDFLib/rdflib/releases/tag/release-2.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@release-2.0.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/release-2.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/release-2.0.6/manifests"},{"name":"initial_import_from_cvs","sha":"e847a388a108f7aa43cb0659365ca429b2cad5e9","kind":"commit","published_at":"2003-12-18T04:06:42.000Z","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/initial_import_from_cvs","html_url":"https://github.com/RDFLib/rdflib/releases/tag/initial_import_from_cvs","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/RDFLib/rdflib@initial_import_from_cvs","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/initial_import_from_cvs","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags/initial_import_from_cvs/manifests"}]},"repo_metadata_updated_at":"2026-08-20T19:59:08.137Z","dependent_packages_count":471,"downloads":17276749,"downloads_period":"last-month","dependent_repos_count":4363,"rankings":{"downloads":0.18454563232510407,"dependent_repos_count":0.15075023875116528,"dependent_packages_count":0.05335145890608624,"stargazers_count":1.5890345414223652,"forks_count":2.301504274737564,"docker_downloads_count":0.42851799604707813,"average":0.7846173570315605},"purl":"pkg:pypi/rdflib","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/pypi/rdflib","docker_dependents_count":407,"docker_downloads_count":77978175,"usage_url":"https://repos.ecosyste.ms/usage/pypi/rdflib","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/pypi/rdflib/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-20T12:03:10.845Z","issues_count":283,"pull_requests_count":1074,"avg_time_to_close_issue":23665147.85714286,"avg_time_to_close_pull_request":1656469.2892271662,"issues_closed_count":84,"pull_requests_closed_count":854,"pull_request_authors_count":87,"issue_authors_count":154,"avg_comments_per_issue":2.745583038869258,"avg_comments_per_pull_request":1.4599627560521415,"merged_pull_requests_count":623,"bot_issues_count":6,"bot_pull_requests_count":617,"past_year_issues_count":30,"past_year_pull_requests_count":101,"past_year_avg_time_to_close_issue":1062619.3333333333,"past_year_avg_time_to_close_pull_request":979156.7659574468,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":47,"past_year_pull_request_authors_count":23,"past_year_issue_authors_count":21,"past_year_avg_comments_per_issue":2.3333333333333335,"past_year_avg_comments_per_pull_request":1.108910891089109,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":49,"past_year_merged_pull_requests_count":29,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/issues","maintainers":[{"login":"aucampia","count":132,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aucampia"},{"login":"nicholascar","count":54,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"},{"login":"gjhiggins","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gjhiggins"},{"login":"gromgull","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gromgull"},{"login":"joernhees","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joernhees"},{"login":"niklasl","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/niklasl"},{"login":"edsu","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/edsu"}],"active_maintainers":[{"login":"nicholascar","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/rdflib/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/rdflib/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/rdflib/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/rdflib/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/rdflib/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/rdflib/codemeta","maintainers":[{"uuid":"iwan.aucamp","login":"iwan.aucamp","name":null,"email":null,"url":null,"packages_count":11,"html_url":"https://pypi.org/user/iwan.aucamp/","role":null,"created_at":"2023-02-04T04:46:58.265Z","updated_at":"2023-02-04T04:46:58.265Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/iwan.aucamp/packages"},{"uuid":"ncar","login":"ncar","name":null,"email":null,"url":null,"packages_count":19,"html_url":"https://pypi.org/user/ncar/","role":null,"created_at":"2023-02-04T04:46:58.171Z","updated_at":"2023-02-04T04:46:58.171Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/ncar/packages"},{"uuid":"ashleysommer","login":"ashleysommer","name":null,"email":null,"url":null,"packages_count":21,"html_url":"https://pypi.org/user/ashleysommer/","role":null,"created_at":"2023-02-04T04:46:58.149Z","updated_at":"2023-02-04T04:46:58.149Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/ashleysommer/packages"},{"uuid":"white_gecko","login":"white_gecko","name":null,"email":null,"url":null,"packages_count":12,"html_url":"https://pypi.org/user/white_gecko/","role":null,"created_at":"2023-02-04T04:46:58.331Z","updated_at":"2023-02-04T04:46:58.331Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/white_gecko/packages"}],"registry":{"name":"pypi.org","url":"https://pypi.org","ecosystem":"pypi","default":true,"packages_count":930043,"maintainers_count":399468,"namespaces_count":0,"keywords_count":311543,"github":"pypi","metadata":{"funded_packages_count":58281,"rate_limit":2},"icon_url":"https://github.com/pypi.png","created_at":"2022-04-04T15:19:23.364Z","updated_at":"2026-08-22T05:05:20.986Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/namespaces"}},{"id":14946739,"name":"github.com/rdflib/rdflib","ecosystem":"go","description":null,"homepage":null,"licenses":"bsd-3-clause","normalized_licenses":[],"repository_url":"https://github.com/rdflib/rdflib","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-08-11T12:59:14.000Z","latest_release_published_at":"2026-08-11T12:59:14.000Z","latest_release_number":"v0.0.0-20260811125914-282240b90b7d","last_synced_at":"2026-08-21T12:40:03.409Z","created_at":"2026-08-14T00:53:58.002Z","updated_at":"2026-08-21T12:40:03.409Z","registry_url":"https://pkg.go.dev/github.com/rdflib/rdflib","install_command":"go get github.com/rdflib/rdflib","documentation_url":"https://pkg.go.dev/github.com/rdflib/rdflib#section-documentation","metadata":{},"repo_metadata":{"id":2377038,"uuid":"3342046","full_name":"RDFLib/rdflib","owner":"RDFLib","description":"RDFLib is a Python library for working with RDF, a simple yet powerful language for representing information.","archived":false,"fork":false,"pushed_at":"2026-08-14T09:50:05.000Z","size":24685,"stargazers_count":2495,"open_issues_count":364,"forks_count":602,"subscribers_count":78,"default_branch":"main","last_synced_at":"2026-08-17T10:36:20.379Z","etag":null,"topics":["graph","json-ld","linked-data","n3","namespace","nquads","ntriples","parser","pypi","python","python-library","rdf","rdf-xml","rdflib","semantic-web","serializer","sparql","turtle","turtle-rdf","uri"],"latest_commit_sha":null,"homepage":"https://rdflib.readthedocs.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RDFLib.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"docs/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"docs/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":"CODEOWNERS","security":"docs/security_considerations.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2012-02-03T05:49:13.000Z","updated_at":"2026-08-16T00:00:06.000Z","dependencies_parsed_at":"2023-01-16T18:31:12.523Z","dependency_job_id":"f708f533-d307-4294-8486-a110f7bb88d7","html_url":"https://github.com/RDFLib/rdflib","commit_stats":{"total_commits":4206,"total_committers":192,"mean_commits":21.90625,"dds":0.7998097955301949,"last_synced_commit":"0ecc40009ae397c2798c0c08a2d751a1a9d2f8a7"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/RDFLib/rdflib","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/sbom","scorecard":{"id":116529,"data":{"date":"2025-08-11","repo":{"name":"github.com/RDFLib/rdflib","commit":"7a1023fa6f9ed059d104a8f924b50eb32d46a1e7"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":10,"reason":"14 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":8,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:36","Info: jobLevel 'packages' permission set to 'read': .github/workflows/docker-images.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:62","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test-report.yml:11","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/test-report.yml:12","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:121","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:156","Warn: no topLevel permission defined: .github/workflows/docker-images.yaml:1","Warn: no topLevel permission defined: .github/workflows/test-report.yml:1","Warn: no topLevel permission defined: .github/workflows/validate.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":6,"reason":"Found 13/21 approved changesets -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 7.1.4 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/114718987","Warn: release artifact 7.1.4 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/114718987"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile.devcontainer:1: pin your Docker image by updating mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04 to mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04@sha256:e57fdff274ed0bac0776490fa2644c242491bb21d4df7ad0bb79b433eac5168d","Warn: pipCommand not pinned by hash: Dockerfile.devcontainer:46-52","Warn: pipCommand not pinned by hash: docker/latest/Dockerfile:5-7","Warn: pipCommand not pinned by hash: docker/unstable/Dockerfile:6-7","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:49","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:74","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:78","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:145","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned","Info:   2 out of   3 containerImage dependencies pinned","Info:   1 out of   8 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-images.yaml:14"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-16T01:25:56.449Z","repository_id":2377038,"created_at":"2025-08-16T01:25:56.449Z","updated_at":"2025-08-16T01:25:56.449Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36739959,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-17T02:00:06.698Z","response_time":86,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"RDFLib","name":"RDFlib","uuid":"1401847","kind":"organization","description":"RDFlib, the GitHub organization, is a volunteer-maintained collection of Python tools for working with RDF data.","email":null,"website":"https://rdflib.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1401847?v=4","repositories_count":38,"last_synced_at":"2025-06-18T07:02:14.861Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/RDFLib","funding_links":[],"total_stars":4045,"followers":159,"following":0,"created_at":"2022-11-02T21:14:04.590Z","updated_at":"2025-06-18T07:02:14.861Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-17T10:37:09.607Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":4.78328514698273,"dependent_packages_count":4.482280635008168,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.632782890995449},"purl":"pkg:golang/github.com/rdflib/rdflib","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/rdflib/rdflib","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/rdflib/rdflib","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/rdflib/rdflib/dependencies","status":"removed","funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-16T10:02:32.044Z","issues_count":282,"pull_requests_count":1063,"avg_time_to_close_issue":23665147.85714286,"avg_time_to_close_pull_request":1651532.8202115158,"issues_closed_count":84,"pull_requests_closed_count":851,"pull_request_authors_count":86,"issue_authors_count":154,"avg_comments_per_issue":2.7375886524822697,"avg_comments_per_pull_request":1.4694261523988712,"merged_pull_requests_count":623,"bot_issues_count":6,"bot_pull_requests_count":610,"past_year_issues_count":29,"past_year_pull_requests_count":95,"past_year_avg_time_to_close_issue":1062619.3333333333,"past_year_avg_time_to_close_pull_request":914978.9583333334,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":48,"past_year_pull_request_authors_count":22,"past_year_issue_authors_count":21,"past_year_avg_comments_per_issue":2.2413793103448274,"past_year_avg_comments_per_pull_request":1.1894736842105262,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":46,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/issues","maintainers":[{"login":"aucampia","count":132,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aucampia"},{"login":"nicholascar","count":54,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"},{"login":"gjhiggins","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gjhiggins"},{"login":"gromgull","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gromgull"},{"login":"joernhees","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joernhees"},{"login":"niklasl","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/niklasl"},{"login":"edsu","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/edsu"}],"active_maintainers":[{"login":"nicholascar","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Frdflib%2Frdflib/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Frdflib%2Frdflib/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Frdflib%2Frdflib/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Frdflib%2Frdflib/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Frdflib%2Frdflib/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Frdflib%2Frdflib/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2281858,"maintainers_count":0,"namespaces_count":839461,"keywords_count":124729,"github":"golang","metadata":{"funded_packages_count":67494,"sync_missing_packages_cursor":{"timestamp":"2026-08-17T00:00:58.969562Z","path":"github.com/Tektoncd/operator","version":"v0.78.0"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-08-22T05:01:09.392Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14953383,"name":"github.com/RDFLib/rdflib","ecosystem":"go","description":null,"homepage":null,"licenses":"bsd-3-clause","normalized_licenses":[],"repository_url":"https://github.com/RDFLib/rdflib","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-08-11T12:59:14.000Z","latest_release_published_at":"2026-08-11T12:59:14.000Z","latest_release_number":"v0.0.0-20260811125914-282240b90b7d","last_synced_at":"2026-08-21T12:45:48.411Z","created_at":"2026-08-14T09:25:18.971Z","updated_at":"2026-08-21T12:45:48.411Z","registry_url":"https://pkg.go.dev/github.com/RDFLib/rdflib","install_command":"go get github.com/RDFLib/rdflib","documentation_url":"https://pkg.go.dev/github.com/RDFLib/rdflib#section-documentation","metadata":{},"repo_metadata":{"id":2377038,"uuid":"3342046","full_name":"RDFLib/rdflib","owner":"RDFLib","description":"RDFLib is a Python library for working with RDF, a simple yet powerful language for representing information.","archived":false,"fork":false,"pushed_at":"2026-08-05T05:44:39.000Z","size":23872,"stargazers_count":2486,"open_issues_count":376,"forks_count":599,"subscribers_count":77,"default_branch":"main","last_synced_at":"2026-08-09T11:25:24.343Z","etag":null,"topics":["graph","json-ld","linked-data","n3","namespace","nquads","ntriples","parser","pypi","python","python-library","rdf","rdf-xml","rdflib","semantic-web","serializer","sparql","turtle","turtle-rdf","uri"],"latest_commit_sha":null,"homepage":"https://rdflib.readthedocs.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RDFLib.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"docs/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"docs/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":"CODEOWNERS","security":"docs/security_considerations.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2012-02-03T05:49:13.000Z","updated_at":"2026-08-05T20:27:34.000Z","dependencies_parsed_at":"2023-01-16T18:31:12.523Z","dependency_job_id":"0230eed4-02cd-49b4-bbec-beb2992371e7","html_url":"https://github.com/RDFLib/rdflib","commit_stats":{"total_commits":4206,"total_committers":192,"mean_commits":21.90625,"dds":0.7998097955301949,"last_synced_commit":"0ecc40009ae397c2798c0c08a2d751a1a9d2f8a7"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/RDFLib/rdflib","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/sbom","scorecard":{"id":116529,"data":{"date":"2025-08-11","repo":{"name":"github.com/RDFLib/rdflib","commit":"7a1023fa6f9ed059d104a8f924b50eb32d46a1e7"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":10,"reason":"14 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":8,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:36","Info: jobLevel 'packages' permission set to 'read': .github/workflows/docker-images.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:62","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test-report.yml:11","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/test-report.yml:12","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:121","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:156","Warn: no topLevel permission defined: .github/workflows/docker-images.yaml:1","Warn: no topLevel permission defined: .github/workflows/test-report.yml:1","Warn: no topLevel permission defined: .github/workflows/validate.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":6,"reason":"Found 13/21 approved changesets -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 7.1.4 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/114718987","Warn: release artifact 7.1.4 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/114718987"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile.devcontainer:1: pin your Docker image by updating mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04 to mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04@sha256:e57fdff274ed0bac0776490fa2644c242491bb21d4df7ad0bb79b433eac5168d","Warn: pipCommand not pinned by hash: Dockerfile.devcontainer:46-52","Warn: pipCommand not pinned by hash: docker/latest/Dockerfile:5-7","Warn: pipCommand not pinned by hash: docker/unstable/Dockerfile:6-7","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:49","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:74","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:78","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:145","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned","Info:   2 out of   3 containerImage dependencies pinned","Info:   1 out of   8 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-images.yaml:14"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-16T01:25:56.449Z","repository_id":2377038,"created_at":"2025-08-16T01:25:56.449Z","updated_at":"2025-08-16T01:25:56.449Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36460895,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"RDFLib","name":"RDFlib","uuid":"1401847","kind":"organization","description":"RDFlib, the GitHub organization, is a volunteer-maintained collection of Python tools for working with RDF data.","email":null,"website":"https://rdflib.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1401847?v=4","repositories_count":38,"last_synced_at":"2025-06-18T07:02:14.861Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/RDFLib","funding_links":[],"total_stars":4045,"followers":159,"following":0,"created_at":"2022-11-02T21:14:04.590Z","updated_at":"2025-06-18T07:02:14.861Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-17T10:37:09.606Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":4.78328514698273,"dependent_packages_count":4.482280635008168,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.632782890995449},"purl":"pkg:golang/github.com/%21r%21d%21f%21lib/rdflib","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/RDFLib/rdflib","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/RDFLib/rdflib","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/RDFLib/rdflib/dependencies","status":"removed","funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-16T10:02:32.044Z","issues_count":282,"pull_requests_count":1063,"avg_time_to_close_issue":23665147.85714286,"avg_time_to_close_pull_request":1651532.8202115158,"issues_closed_count":84,"pull_requests_closed_count":851,"pull_request_authors_count":86,"issue_authors_count":154,"avg_comments_per_issue":2.7375886524822697,"avg_comments_per_pull_request":1.4694261523988712,"merged_pull_requests_count":623,"bot_issues_count":6,"bot_pull_requests_count":610,"past_year_issues_count":29,"past_year_pull_requests_count":95,"past_year_avg_time_to_close_issue":1062619.3333333333,"past_year_avg_time_to_close_pull_request":914978.9583333334,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":48,"past_year_pull_request_authors_count":22,"past_year_issue_authors_count":21,"past_year_avg_comments_per_issue":2.2413793103448274,"past_year_avg_comments_per_pull_request":1.1894736842105262,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":46,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/issues","maintainers":[{"login":"aucampia","count":132,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aucampia"},{"login":"nicholascar","count":54,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"},{"login":"gjhiggins","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gjhiggins"},{"login":"gromgull","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gromgull"},{"login":"joernhees","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joernhees"},{"login":"niklasl","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/niklasl"},{"login":"edsu","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/edsu"}],"active_maintainers":[{"login":"nicholascar","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FRDFLib%2Frdflib/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FRDFLib%2Frdflib/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FRDFLib%2Frdflib/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FRDFLib%2Frdflib/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FRDFLib%2Frdflib/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FRDFLib%2Frdflib/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2281858,"maintainers_count":0,"namespaces_count":839461,"keywords_count":124729,"github":"golang","metadata":{"funded_packages_count":67494,"sync_missing_packages_cursor":{"timestamp":"2026-08-17T00:00:58.969562Z","path":"github.com/Tektoncd/operator","version":"v0.78.0"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-08-22T05:01:09.392Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":13667981,"name":"rdflib","ecosystem":"debian","description":null,"homepage":"https://github.com/RDFLib/rdflib","licenses":"bsd-3-clause","normalized_licenses":[],"repository_url":"https://github.com/RDFLib/rdflib","keywords_array":["python"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T11:57:06.891Z","latest_release_published_at":"2026-02-12T11:57:06.891Z","latest_release_number":"7.1.1-3","last_synced_at":"2026-03-14T14:58:53.840Z","created_at":"2026-02-12T11:57:06.703Z","updated_at":"2026-08-17T10:37:09.615Z","registry_url":"https://tracker.debian.org/pkg/rdflib","install_command":"apt-get install rdflib","documentation_url":"https://packages.debian.org/trixie/rdflib","metadata":{"component":"main","architecture":"all","priority":"source","binary":"python3-rdflib, python-rdflib-doc, python-rdflib-tools","standards_version":"4.6.2","maintainer":"Debian Python Team \u003cteam+python@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-sequence-python3, dh-sequence-sphinxdoc \u003c!nodoc\u003e, python3-all, pybuild-plugin-pyproject, python3-poetry-core, python3-sphinx-autodoc-typehints \u003c!nodoc\u003e, python3-isodate, python3-pyparsing, python3-typing-extensions \u003c!nodoc\u003e, python3-myst-parser \u003c!nodoc\u003e, python3-doc \u003c!nodoc\u003e, python3-sphinx \u003c!nodoc\u003e, python3-sphinxcontrib.apidoc \u003c!nodoc\u003e, python3-lxml \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-networkx \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-html5rdf \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-pip \u003c!nocheck\u003e, python3-pytest \u003c!nocheck\u003e, python3-pytest-cov \u003c!nocheck\u003e, python3-bsddb3 \u003c!nocheck\u003e, python3-orjson [!i386] \u003c!nocheck\u003e","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":2377038,"uuid":"3342046","full_name":"RDFLib/rdflib","owner":"RDFLib","description":"RDFLib is a Python library for working with RDF, a simple yet powerful language for representing information.","archived":false,"fork":false,"pushed_at":"2026-08-05T05:44:39.000Z","size":23872,"stargazers_count":2486,"open_issues_count":376,"forks_count":599,"subscribers_count":77,"default_branch":"main","last_synced_at":"2026-08-09T11:25:24.343Z","etag":null,"topics":["graph","json-ld","linked-data","n3","namespace","nquads","ntriples","parser","pypi","python","python-library","rdf","rdf-xml","rdflib","semantic-web","serializer","sparql","turtle","turtle-rdf","uri"],"latest_commit_sha":null,"homepage":"https://rdflib.readthedocs.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RDFLib.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"docs/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"docs/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":"CODEOWNERS","security":"docs/security_considerations.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2012-02-03T05:49:13.000Z","updated_at":"2026-08-05T20:27:34.000Z","dependencies_parsed_at":"2023-01-16T18:31:12.523Z","dependency_job_id":"0230eed4-02cd-49b4-bbec-beb2992371e7","html_url":"https://github.com/RDFLib/rdflib","commit_stats":{"total_commits":4206,"total_committers":192,"mean_commits":21.90625,"dds":0.7998097955301949,"last_synced_commit":"0ecc40009ae397c2798c0c08a2d751a1a9d2f8a7"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/RDFLib/rdflib","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/sbom","scorecard":{"id":116529,"data":{"date":"2025-08-11","repo":{"name":"github.com/RDFLib/rdflib","commit":"7a1023fa6f9ed059d104a8f924b50eb32d46a1e7"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":10,"reason":"14 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":8,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:36","Info: jobLevel 'packages' permission set to 'read': .github/workflows/docker-images.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:62","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test-report.yml:11","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/test-report.yml:12","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:121","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:156","Warn: no topLevel permission defined: .github/workflows/docker-images.yaml:1","Warn: no topLevel permission defined: .github/workflows/test-report.yml:1","Warn: no topLevel permission defined: .github/workflows/validate.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":6,"reason":"Found 13/21 approved changesets -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 7.1.4 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/114718987","Warn: release artifact 7.1.4 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/114718987"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile.devcontainer:1: pin your Docker image by updating mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04 to mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04@sha256:e57fdff274ed0bac0776490fa2644c242491bb21d4df7ad0bb79b433eac5168d","Warn: pipCommand not pinned by hash: Dockerfile.devcontainer:46-52","Warn: pipCommand not pinned by hash: docker/latest/Dockerfile:5-7","Warn: pipCommand not pinned by hash: docker/unstable/Dockerfile:6-7","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:49","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:74","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:78","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:145","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned","Info:   2 out of   3 containerImage dependencies pinned","Info:   1 out of   8 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-images.yaml:14"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-16T01:25:56.449Z","repository_id":2377038,"created_at":"2025-08-16T01:25:56.449Z","updated_at":"2025-08-16T01:25:56.449Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36460895,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"RDFLib","name":"RDFlib","uuid":"1401847","kind":"organization","description":"RDFlib, the GitHub organization, is a volunteer-maintained collection of Python tools for working with RDF data.","email":null,"website":"https://rdflib.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1401847?v=4","repositories_count":38,"last_synced_at":"2025-06-18T07:02:14.861Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/RDFLib","funding_links":[],"total_stars":4045,"followers":159,"following":0,"created_at":"2022-11-02T21:14:04.590Z","updated_at":"2025-06-18T07:02:14.861Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-17T10:37:09.615Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/rdflib?arch=source\u0026distro=debian-13\u0026repository_url=https://packages.debian.org/trixie","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/rdflib","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/rdflib","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/rdflib/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-16T10:02:32.044Z","issues_count":282,"pull_requests_count":1063,"avg_time_to_close_issue":23665147.85714286,"avg_time_to_close_pull_request":1651532.8202115158,"issues_closed_count":84,"pull_requests_closed_count":851,"pull_request_authors_count":86,"issue_authors_count":154,"avg_comments_per_issue":2.7375886524822697,"avg_comments_per_pull_request":1.4694261523988712,"merged_pull_requests_count":623,"bot_issues_count":6,"bot_pull_requests_count":610,"past_year_issues_count":29,"past_year_pull_requests_count":95,"past_year_avg_time_to_close_issue":1062619.3333333333,"past_year_avg_time_to_close_pull_request":914978.9583333334,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":48,"past_year_pull_request_authors_count":22,"past_year_issue_authors_count":21,"past_year_avg_comments_per_issue":2.2413793103448274,"past_year_avg_comments_per_pull_request":1.1894736842105262,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":46,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/issues","maintainers":[{"login":"aucampia","count":132,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aucampia"},{"login":"nicholascar","count":54,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"},{"login":"gjhiggins","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gjhiggins"},{"login":"gromgull","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gromgull"},{"login":"joernhees","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joernhees"},{"login":"niklasl","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/niklasl"},{"login":"edsu","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/edsu"}],"active_maintainers":[{"login":"nicholascar","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/rdflib/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/rdflib/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/rdflib/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/rdflib/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/rdflib/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/rdflib/codemeta","maintainers":[],"registry":{"name":"debian-13","url":"https://packages.debian.org/trixie","ecosystem":"debian","default":false,"packages_count":38024,"maintainers_count":0,"namespaces_count":4,"keywords_count":1985,"github":"debian","metadata":{"codename":"trixie","funded_packages_count":1651},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:50.448Z","updated_at":"2026-08-22T05:04:48.554Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/namespaces"}},{"id":13604496,"name":"rdflib","ecosystem":"debian","description":null,"homepage":"https://github.com/RDFLib/rdflib","licenses":"bsd-3-clause","normalized_licenses":[],"repository_url":"https://github.com/RDFLib/rdflib","keywords_array":["python"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-11T11:14:17.392Z","latest_release_published_at":"2026-02-11T11:14:17.392Z","latest_release_number":"4.2.2-2","last_synced_at":"2026-03-13T19:01:17.410Z","created_at":"2026-02-11T11:14:17.195Z","updated_at":"2026-08-17T10:37:09.634Z","registry_url":"https://tracker.debian.org/pkg/rdflib","install_command":"apt-get install rdflib","documentation_url":"https://packages.debian.org/buster/rdflib","metadata":{"component":"main","architecture":"all","priority":"source","binary":"python-rdflib, python3-rdflib, python-rdflib-doc, python-rdflib-tools","standards_version":"4.3.0","maintainer":"Debian Python Modules Team \u003cpython-modules-team@lists.alioth.debian.org\u003e","build_depends":"debhelper (\u003e= 9.20141010), python3 (\u003e= 3.3.0-2), dh-python (\u003e= 1.20140128), python-all, python3-all, python-setuptools, python3-setuptools, python-pkg-resources, python3-pkg-resources, dpkg-dev (\u003e= 1.17.14), python-sphinx \u003c!nodoc\u003e, python-isodate \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-isodate \u003c!nocheck\u003e \u003c!nodoc\u003e, python-pyparsing \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-pyparsing \u003c!nocheck\u003e \u003c!nodoc\u003e, python-nose \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-nose \u003c!nocheck\u003e \u003c!nodoc\u003e, python-networkx \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-networkx \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-html5lib \u003c!nocheck\u003e \u003c!nodoc\u003e, python-html5lib \u003c!nocheck\u003e \u003c!nodoc\u003e, python-sparqlwrapper (\u003e= 1.7.6~) \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-sparqlwrapper (\u003e= 1.7.6~) \u003c!nocheck\u003e \u003c!nodoc\u003e, 2to3 \u003c!nocheck\u003e \u003c!nodoc\u003e, python-bsddb3 \u003c!nocheck\u003e, python3-bsddb3 \u003c!nocheck\u003e, python-rdflib-jsonld \u003c!nocheck\u003e, python3-rdflib-jsonld \u003c!nocheck\u003e","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":2377038,"uuid":"3342046","full_name":"RDFLib/rdflib","owner":"RDFLib","description":"RDFLib is a Python library for working with RDF, a simple yet powerful language for representing information.","archived":false,"fork":false,"pushed_at":"2026-08-05T05:44:39.000Z","size":23872,"stargazers_count":2486,"open_issues_count":376,"forks_count":599,"subscribers_count":77,"default_branch":"main","last_synced_at":"2026-08-09T11:25:24.343Z","etag":null,"topics":["graph","json-ld","linked-data","n3","namespace","nquads","ntriples","parser","pypi","python","python-library","rdf","rdf-xml","rdflib","semantic-web","serializer","sparql","turtle","turtle-rdf","uri"],"latest_commit_sha":null,"homepage":"https://rdflib.readthedocs.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RDFLib.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"docs/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"docs/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":"CODEOWNERS","security":"docs/security_considerations.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2012-02-03T05:49:13.000Z","updated_at":"2026-08-05T20:27:34.000Z","dependencies_parsed_at":"2023-01-16T18:31:12.523Z","dependency_job_id":"0230eed4-02cd-49b4-bbec-beb2992371e7","html_url":"https://github.com/RDFLib/rdflib","commit_stats":{"total_commits":4206,"total_committers":192,"mean_commits":21.90625,"dds":0.7998097955301949,"last_synced_commit":"0ecc40009ae397c2798c0c08a2d751a1a9d2f8a7"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/RDFLib/rdflib","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/sbom","scorecard":{"id":116529,"data":{"date":"2025-08-11","repo":{"name":"github.com/RDFLib/rdflib","commit":"7a1023fa6f9ed059d104a8f924b50eb32d46a1e7"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":10,"reason":"14 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":8,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:36","Info: jobLevel 'packages' permission set to 'read': .github/workflows/docker-images.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:62","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test-report.yml:11","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/test-report.yml:12","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:121","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:156","Warn: no topLevel permission defined: .github/workflows/docker-images.yaml:1","Warn: no topLevel permission defined: .github/workflows/test-report.yml:1","Warn: no topLevel permission defined: .github/workflows/validate.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":6,"reason":"Found 13/21 approved changesets -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 7.1.4 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/114718987","Warn: release artifact 7.1.4 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/114718987"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile.devcontainer:1: pin your Docker image by updating mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04 to mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04@sha256:e57fdff274ed0bac0776490fa2644c242491bb21d4df7ad0bb79b433eac5168d","Warn: pipCommand not pinned by hash: Dockerfile.devcontainer:46-52","Warn: pipCommand not pinned by hash: docker/latest/Dockerfile:5-7","Warn: pipCommand not pinned by hash: docker/unstable/Dockerfile:6-7","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:49","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:74","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:78","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:145","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned","Info:   2 out of   3 containerImage dependencies pinned","Info:   1 out of   8 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-images.yaml:14"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-16T01:25:56.449Z","repository_id":2377038,"created_at":"2025-08-16T01:25:56.449Z","updated_at":"2025-08-16T01:25:56.449Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36460895,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"RDFLib","name":"RDFlib","uuid":"1401847","kind":"organization","description":"RDFlib, the GitHub organization, is a volunteer-maintained collection of Python tools for working with RDF data.","email":null,"website":"https://rdflib.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1401847?v=4","repositories_count":38,"last_synced_at":"2025-06-18T07:02:14.861Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/RDFLib","funding_links":[],"total_stars":4045,"followers":159,"following":0,"created_at":"2022-11-02T21:14:04.590Z","updated_at":"2025-06-18T07:02:14.861Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-17T10:37:09.634Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/rdflib?arch=source\u0026distro=debian-10\u0026repository_url=https://packages.debian.org/buster","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/rdflib","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/rdflib","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/rdflib/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-16T10:02:32.044Z","issues_count":282,"pull_requests_count":1063,"avg_time_to_close_issue":23665147.85714286,"avg_time_to_close_pull_request":1651532.8202115158,"issues_closed_count":84,"pull_requests_closed_count":851,"pull_request_authors_count":86,"issue_authors_count":154,"avg_comments_per_issue":2.7375886524822697,"avg_comments_per_pull_request":1.4694261523988712,"merged_pull_requests_count":623,"bot_issues_count":6,"bot_pull_requests_count":610,"past_year_issues_count":29,"past_year_pull_requests_count":95,"past_year_avg_time_to_close_issue":1062619.3333333333,"past_year_avg_time_to_close_pull_request":914978.9583333334,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":48,"past_year_pull_request_authors_count":22,"past_year_issue_authors_count":21,"past_year_avg_comments_per_issue":2.2413793103448274,"past_year_avg_comments_per_pull_request":1.1894736842105262,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":46,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/issues","maintainers":[{"login":"aucampia","count":132,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aucampia"},{"login":"nicholascar","count":54,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"},{"login":"gjhiggins","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gjhiggins"},{"login":"gromgull","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gromgull"},{"login":"joernhees","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joernhees"},{"login":"niklasl","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/niklasl"},{"login":"edsu","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/edsu"}],"active_maintainers":[{"login":"nicholascar","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/rdflib/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/rdflib/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/rdflib/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/rdflib/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/rdflib/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/rdflib/codemeta","maintainers":[],"registry":{"name":"debian-10","url":"https://packages.debian.org/buster","ecosystem":"debian","default":false,"packages_count":28836,"maintainers_count":0,"namespaces_count":3,"keywords_count":903,"github":"debian","metadata":{"codename":"buster","mirror":"http://archive.debian.org/debian","funded_packages_count":593},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:50.156Z","updated_at":"2026-08-22T05:03:05.379Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/namespaces"}},{"id":12040459,"name":"rdflib-with-networkx","ecosystem":"conda","description":"RDFLib is a pure Python package for working with RDF. RDFLib contains most things you need to work with RDF, including parsers and serializers for RDF/XML, N3, NTriples, N-Quads, Turtle, TriX, Trig and JSON-LD a Graph interface which can be backed by any one of a number of Store implementations store implementations for in-memory, persistent on disk (Berkeley DB) and remote SPARQL endpoints a SPARQL 1.1 implementation - supporting SPARQL 1.1 Queries and Update statements SPARQL function extension mechanisms","homepage":"https://github.com/RDFLib/rdflib","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/RDFLib/rdflib","keywords_array":[],"namespace":null,"versions_count":3,"first_release_published_at":"2025-08-25T19:54:06.000Z","latest_release_published_at":"2026-08-07T13:12:33.000Z","latest_release_number":"7.6.0","last_synced_at":"2026-08-07T15:03:48.405Z","created_at":"2025-08-25T21:18:31.246Z","updated_at":"2026-08-17T10:37:09.547Z","registry_url":"https://anaconda.org/anaconda/rdflib-with-networkx","install_command":"conda install -c anaconda rdflib-with-networkx","documentation_url":null,"metadata":{},"repo_metadata":{"id":2377038,"uuid":"3342046","full_name":"RDFLib/rdflib","owner":"RDFLib","description":"RDFLib is a Python library for working with RDF, a simple yet powerful language for representing information.","archived":false,"fork":false,"pushed_at":"2026-08-05T05:44:39.000Z","size":23872,"stargazers_count":2486,"open_issues_count":376,"forks_count":599,"subscribers_count":77,"default_branch":"main","last_synced_at":"2026-08-09T11:25:24.343Z","etag":null,"topics":["graph","json-ld","linked-data","n3","namespace","nquads","ntriples","parser","pypi","python","python-library","rdf","rdf-xml","rdflib","semantic-web","serializer","sparql","turtle","turtle-rdf","uri"],"latest_commit_sha":null,"homepage":"https://rdflib.readthedocs.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RDFLib.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"docs/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"docs/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":"CODEOWNERS","security":"docs/security_considerations.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2012-02-03T05:49:13.000Z","updated_at":"2026-08-05T20:27:34.000Z","dependencies_parsed_at":"2023-01-16T18:31:12.523Z","dependency_job_id":"0230eed4-02cd-49b4-bbec-beb2992371e7","html_url":"https://github.com/RDFLib/rdflib","commit_stats":{"total_commits":4206,"total_committers":192,"mean_commits":21.90625,"dds":0.7998097955301949,"last_synced_commit":"0ecc40009ae397c2798c0c08a2d751a1a9d2f8a7"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/RDFLib/rdflib","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/sbom","scorecard":{"id":116529,"data":{"date":"2025-08-11","repo":{"name":"github.com/RDFLib/rdflib","commit":"7a1023fa6f9ed059d104a8f924b50eb32d46a1e7"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":10,"reason":"14 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":8,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:36","Info: jobLevel 'packages' permission set to 'read': .github/workflows/docker-images.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:62","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test-report.yml:11","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/test-report.yml:12","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:121","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:156","Warn: no topLevel permission defined: .github/workflows/docker-images.yaml:1","Warn: no topLevel permission defined: .github/workflows/test-report.yml:1","Warn: no topLevel permission defined: .github/workflows/validate.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":6,"reason":"Found 13/21 approved changesets -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 7.1.4 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/114718987","Warn: release artifact 7.1.4 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/114718987"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile.devcontainer:1: pin your Docker image by updating mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04 to mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04@sha256:e57fdff274ed0bac0776490fa2644c242491bb21d4df7ad0bb79b433eac5168d","Warn: pipCommand not pinned by hash: Dockerfile.devcontainer:46-52","Warn: pipCommand not pinned by hash: docker/latest/Dockerfile:5-7","Warn: pipCommand not pinned by hash: docker/unstable/Dockerfile:6-7","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:49","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:74","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:78","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:145","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned","Info:   2 out of   3 containerImage dependencies pinned","Info:   1 out of   8 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-images.yaml:14"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-16T01:25:56.449Z","repository_id":2377038,"created_at":"2025-08-16T01:25:56.449Z","updated_at":"2025-08-16T01:25:56.449Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36460895,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"RDFLib","name":"RDFlib","uuid":"1401847","kind":"organization","description":"RDFlib, the GitHub organization, is a volunteer-maintained collection of Python tools for working with RDF data.","email":null,"website":"https://rdflib.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1401847?v=4","repositories_count":38,"last_synced_at":"2025-06-18T07:02:14.861Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/RDFLib","funding_links":[],"total_stars":4045,"followers":159,"following":0,"created_at":"2022-11-02T21:14:04.590Z","updated_at":"2025-06-18T07:02:14.861Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-17T10:37:09.547Z","dependent_packages_count":0,"downloads":861,"downloads_period":"total","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":46.4861078683166,"dependent_packages_count":42.2834461825823,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":44.38477702544945},"purl":"pkg:conda/rdflib-with-networkx","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/conda/rdflib-with-networkx","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/conda/rdflib-with-networkx","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/conda/rdflib-with-networkx/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-16T10:02:32.044Z","issues_count":282,"pull_requests_count":1063,"avg_time_to_close_issue":23665147.85714286,"avg_time_to_close_pull_request":1651532.8202115158,"issues_closed_count":84,"pull_requests_closed_count":851,"pull_request_authors_count":86,"issue_authors_count":154,"avg_comments_per_issue":2.7375886524822697,"avg_comments_per_pull_request":1.4694261523988712,"merged_pull_requests_count":623,"bot_issues_count":6,"bot_pull_requests_count":610,"past_year_issues_count":29,"past_year_pull_requests_count":95,"past_year_avg_time_to_close_issue":1062619.3333333333,"past_year_avg_time_to_close_pull_request":914978.9583333334,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":48,"past_year_pull_request_authors_count":22,"past_year_issue_authors_count":21,"past_year_avg_comments_per_issue":2.2413793103448274,"past_year_avg_comments_per_pull_request":1.1894736842105262,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":46,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/issues","maintainers":[{"login":"aucampia","count":132,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aucampia"},{"login":"nicholascar","count":54,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"},{"login":"gjhiggins","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gjhiggins"},{"login":"gromgull","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gromgull"},{"login":"joernhees","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joernhees"},{"login":"niklasl","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/niklasl"},{"login":"edsu","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/edsu"}],"active_maintainers":[{"login":"nicholascar","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib-with-networkx/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib-with-networkx/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib-with-networkx/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib-with-networkx/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib-with-networkx/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib-with-networkx/codemeta","maintainers":[],"registry":{"name":"anaconda.org","url":"https://anaconda.org","ecosystem":"conda","default":true,"packages_count":5475,"maintainers_count":0,"namespaces_count":0,"keywords_count":3313,"github":"Anaconda","metadata":{"kind":"anaconda","key":"Main","api":"https://repo.ananconda.com","funded_packages_count":850},"icon_url":"https://github.com/Anaconda.png","created_at":"2022-10-03T15:37:08.736Z","updated_at":"2026-08-22T05:06:01.727Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/namespaces"}},{"id":13777793,"name":"rdflib","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/RDFLib/rdflib","licenses":"bsd-3-clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/RDFLib/rdflib","keywords_array":["universe/python"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-13T13:02:55.681Z","latest_release_published_at":"2026-02-13T13:02:55.681Z","latest_release_number":"6.1.1-1","last_synced_at":"2026-03-13T13:35:00.814Z","created_at":"2026-02-13T13:02:55.530Z","updated_at":"2026-08-17T10:37:09.669Z","registry_url":"https://launchpad.net/ubuntu/+source/rdflib","install_command":"apt-get install rdflib","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"python3-rdflib, python-rdflib-doc, python-rdflib-tools","standards_version":"4.6.0","maintainer":"Debian Python Team \u003cteam+python@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-python, python3-all, python3-setuptools, python3-pkg-resources, python3-lib2to3, python3-sphinx \u003c!nodoc\u003e, python3-sphinxcontrib.apidoc \u003c!nodoc\u003e, python3-isodate \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-pyparsing \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-networkx \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-html5lib \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-sparqlwrapper \u003c!nocheck\u003e \u003c!nodoc\u003e, 2to3 \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-pytest \u003c!nocheck\u003e, python3-pytest-subtests \u003c!nocheck\u003e, python3-bsddb3 \u003c!nocheck\u003e, python3-rdflib-jsonld \u003c!nocheck\u003e","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":2377038,"uuid":"3342046","full_name":"RDFLib/rdflib","owner":"RDFLib","description":"RDFLib is a Python library for working with RDF, a simple yet powerful language for representing information.","archived":false,"fork":false,"pushed_at":"2026-08-05T05:44:39.000Z","size":23872,"stargazers_count":2486,"open_issues_count":376,"forks_count":599,"subscribers_count":77,"default_branch":"main","last_synced_at":"2026-08-09T11:25:24.343Z","etag":null,"topics":["graph","json-ld","linked-data","n3","namespace","nquads","ntriples","parser","pypi","python","python-library","rdf","rdf-xml","rdflib","semantic-web","serializer","sparql","turtle","turtle-rdf","uri"],"latest_commit_sha":null,"homepage":"https://rdflib.readthedocs.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RDFLib.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"docs/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"docs/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":"CODEOWNERS","security":"docs/security_considerations.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2012-02-03T05:49:13.000Z","updated_at":"2026-08-05T20:27:34.000Z","dependencies_parsed_at":"2023-01-16T18:31:12.523Z","dependency_job_id":"0230eed4-02cd-49b4-bbec-beb2992371e7","html_url":"https://github.com/RDFLib/rdflib","commit_stats":{"total_commits":4206,"total_committers":192,"mean_commits":21.90625,"dds":0.7998097955301949,"last_synced_commit":"0ecc40009ae397c2798c0c08a2d751a1a9d2f8a7"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/RDFLib/rdflib","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/sbom","scorecard":{"id":116529,"data":{"date":"2025-08-11","repo":{"name":"github.com/RDFLib/rdflib","commit":"7a1023fa6f9ed059d104a8f924b50eb32d46a1e7"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":10,"reason":"14 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":8,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:36","Info: jobLevel 'packages' permission set to 'read': .github/workflows/docker-images.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:62","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test-report.yml:11","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/test-report.yml:12","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:121","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:156","Warn: no topLevel permission defined: .github/workflows/docker-images.yaml:1","Warn: no topLevel permission defined: .github/workflows/test-report.yml:1","Warn: no topLevel permission defined: .github/workflows/validate.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":6,"reason":"Found 13/21 approved changesets -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 7.1.4 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/114718987","Warn: release artifact 7.1.4 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/114718987"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile.devcontainer:1: pin your Docker image by updating mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04 to mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04@sha256:e57fdff274ed0bac0776490fa2644c242491bb21d4df7ad0bb79b433eac5168d","Warn: pipCommand not pinned by hash: Dockerfile.devcontainer:46-52","Warn: pipCommand not pinned by hash: docker/latest/Dockerfile:5-7","Warn: pipCommand not pinned by hash: docker/unstable/Dockerfile:6-7","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:49","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:74","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:78","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:145","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned","Info:   2 out of   3 containerImage dependencies pinned","Info:   1 out of   8 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-images.yaml:14"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-16T01:25:56.449Z","repository_id":2377038,"created_at":"2025-08-16T01:25:56.449Z","updated_at":"2025-08-16T01:25:56.449Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36460895,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"RDFLib","name":"RDFlib","uuid":"1401847","kind":"organization","description":"RDFlib, the GitHub organization, is a volunteer-maintained collection of Python tools for working with RDF data.","email":null,"website":"https://rdflib.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1401847?v=4","repositories_count":38,"last_synced_at":"2025-06-18T07:02:14.861Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/RDFLib","funding_links":[],"total_stars":4045,"followers":159,"following":0,"created_at":"2022-11-02T21:14:04.590Z","updated_at":"2025-06-18T07:02:14.861Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-17T10:37:09.669Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/rdflib?arch=source\u0026distro=ubuntu-22.04\u0026repository_url=https://launchpad.net/ubuntu/jammy","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/rdflib","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/rdflib","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/rdflib/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-16T10:02:32.044Z","issues_count":282,"pull_requests_count":1063,"avg_time_to_close_issue":23665147.85714286,"avg_time_to_close_pull_request":1651532.8202115158,"issues_closed_count":84,"pull_requests_closed_count":851,"pull_request_authors_count":86,"issue_authors_count":154,"avg_comments_per_issue":2.7375886524822697,"avg_comments_per_pull_request":1.4694261523988712,"merged_pull_requests_count":623,"bot_issues_count":6,"bot_pull_requests_count":610,"past_year_issues_count":29,"past_year_pull_requests_count":95,"past_year_avg_time_to_close_issue":1062619.3333333333,"past_year_avg_time_to_close_pull_request":914978.9583333334,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":48,"past_year_pull_request_authors_count":22,"past_year_issue_authors_count":21,"past_year_avg_comments_per_issue":2.2413793103448274,"past_year_avg_comments_per_pull_request":1.1894736842105262,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":46,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/issues","maintainers":[{"login":"aucampia","count":132,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aucampia"},{"login":"nicholascar","count":54,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"},{"login":"gjhiggins","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gjhiggins"},{"login":"gromgull","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gromgull"},{"login":"joernhees","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joernhees"},{"login":"niklasl","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/niklasl"},{"login":"edsu","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/edsu"}],"active_maintainers":[{"login":"nicholascar","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/rdflib/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/rdflib/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/rdflib/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/rdflib/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/rdflib/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/rdflib/codemeta","maintainers":[],"registry":{"name":"ubuntu-22.04","url":"https://launchpad.net/ubuntu/jammy","ecosystem":"ubuntu","default":false,"packages_count":34289,"maintainers_count":0,"namespaces_count":4,"keywords_count":1498,"github":"ubuntu","metadata":{"codename":"jammy","funded_packages_count":945},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:46.486Z","updated_at":"2026-08-22T05:05:40.818Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/namespaces"}},{"id":12040458,"name":"rdflib-with-all","ecosystem":"conda","description":"RDFLib is a pure Python package for working with RDF. RDFLib contains most things you need to work with RDF, including parsers and serializers for RDF/XML, N3, NTriples, N-Quads, Turtle, TriX, Trig and JSON-LD a Graph interface which can be backed by any one of a number of Store implementations store implementations for in-memory, persistent on disk (Berkeley DB) and remote SPARQL endpoints a SPARQL 1.1 implementation - supporting SPARQL 1.1 Queries and Update statements SPARQL function extension mechanisms","homepage":"https://github.com/RDFLib/rdflib","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/RDFLib/rdflib","keywords_array":[],"namespace":null,"versions_count":3,"first_release_published_at":"2025-08-25T19:54:18.000Z","latest_release_published_at":"2026-08-07T13:12:43.000Z","latest_release_number":"7.6.0","last_synced_at":"2026-08-07T15:03:47.095Z","created_at":"2025-08-25T21:18:31.238Z","updated_at":"2026-08-17T10:37:09.429Z","registry_url":"https://anaconda.org/anaconda/rdflib-with-all","install_command":"conda install -c anaconda rdflib-with-all","documentation_url":null,"metadata":{},"repo_metadata":{"id":2377038,"uuid":"3342046","full_name":"RDFLib/rdflib","owner":"RDFLib","description":"RDFLib is a Python library for working with RDF, a simple yet powerful language for representing information.","archived":false,"fork":false,"pushed_at":"2026-08-05T05:44:39.000Z","size":23872,"stargazers_count":2486,"open_issues_count":376,"forks_count":599,"subscribers_count":77,"default_branch":"main","last_synced_at":"2026-08-09T11:25:24.343Z","etag":null,"topics":["graph","json-ld","linked-data","n3","namespace","nquads","ntriples","parser","pypi","python","python-library","rdf","rdf-xml","rdflib","semantic-web","serializer","sparql","turtle","turtle-rdf","uri"],"latest_commit_sha":null,"homepage":"https://rdflib.readthedocs.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RDFLib.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"docs/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"docs/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":"CODEOWNERS","security":"docs/security_considerations.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2012-02-03T05:49:13.000Z","updated_at":"2026-08-05T20:27:34.000Z","dependencies_parsed_at":"2023-01-16T18:31:12.523Z","dependency_job_id":"0230eed4-02cd-49b4-bbec-beb2992371e7","html_url":"https://github.com/RDFLib/rdflib","commit_stats":{"total_commits":4206,"total_committers":192,"mean_commits":21.90625,"dds":0.7998097955301949,"last_synced_commit":"0ecc40009ae397c2798c0c08a2d751a1a9d2f8a7"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/RDFLib/rdflib","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/sbom","scorecard":{"id":116529,"data":{"date":"2025-08-11","repo":{"name":"github.com/RDFLib/rdflib","commit":"7a1023fa6f9ed059d104a8f924b50eb32d46a1e7"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":10,"reason":"14 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":8,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:36","Info: jobLevel 'packages' permission set to 'read': .github/workflows/docker-images.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:62","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test-report.yml:11","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/test-report.yml:12","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:121","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:156","Warn: no topLevel permission defined: .github/workflows/docker-images.yaml:1","Warn: no topLevel permission defined: .github/workflows/test-report.yml:1","Warn: no topLevel permission defined: .github/workflows/validate.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":6,"reason":"Found 13/21 approved changesets -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 7.1.4 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/114718987","Warn: release artifact 7.1.4 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/114718987"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile.devcontainer:1: pin your Docker image by updating mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04 to mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04@sha256:e57fdff274ed0bac0776490fa2644c242491bb21d4df7ad0bb79b433eac5168d","Warn: pipCommand not pinned by hash: Dockerfile.devcontainer:46-52","Warn: pipCommand not pinned by hash: docker/latest/Dockerfile:5-7","Warn: pipCommand not pinned by hash: docker/unstable/Dockerfile:6-7","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:49","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:74","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:78","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:145","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned","Info:   2 out of   3 containerImage dependencies pinned","Info:   1 out of   8 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-images.yaml:14"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-16T01:25:56.449Z","repository_id":2377038,"created_at":"2025-08-16T01:25:56.449Z","updated_at":"2025-08-16T01:25:56.449Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36460895,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"RDFLib","name":"RDFlib","uuid":"1401847","kind":"organization","description":"RDFlib, the GitHub organization, is a volunteer-maintained collection of Python tools for working with RDF data.","email":null,"website":"https://rdflib.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1401847?v=4","repositories_count":38,"last_synced_at":"2025-06-18T07:02:14.861Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/RDFLib","funding_links":[],"total_stars":4045,"followers":159,"following":0,"created_at":"2022-11-02T21:14:04.590Z","updated_at":"2025-06-18T07:02:14.861Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-17T10:37:09.429Z","dependent_packages_count":0,"downloads":858,"downloads_period":"total","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":46.4861078683166,"dependent_packages_count":42.2834461825823,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":44.38477702544945},"purl":"pkg:conda/rdflib-with-all","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/conda/rdflib-with-all","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/conda/rdflib-with-all","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/conda/rdflib-with-all/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-16T10:02:32.044Z","issues_count":282,"pull_requests_count":1063,"avg_time_to_close_issue":23665147.85714286,"avg_time_to_close_pull_request":1651532.8202115158,"issues_closed_count":84,"pull_requests_closed_count":851,"pull_request_authors_count":86,"issue_authors_count":154,"avg_comments_per_issue":2.7375886524822697,"avg_comments_per_pull_request":1.4694261523988712,"merged_pull_requests_count":623,"bot_issues_count":6,"bot_pull_requests_count":610,"past_year_issues_count":29,"past_year_pull_requests_count":95,"past_year_avg_time_to_close_issue":1062619.3333333333,"past_year_avg_time_to_close_pull_request":914978.9583333334,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":48,"past_year_pull_request_authors_count":22,"past_year_issue_authors_count":21,"past_year_avg_comments_per_issue":2.2413793103448274,"past_year_avg_comments_per_pull_request":1.1894736842105262,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":46,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/issues","maintainers":[{"login":"aucampia","count":132,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aucampia"},{"login":"nicholascar","count":54,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"},{"login":"gjhiggins","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gjhiggins"},{"login":"gromgull","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gromgull"},{"login":"joernhees","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joernhees"},{"login":"niklasl","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/niklasl"},{"login":"edsu","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/edsu"}],"active_maintainers":[{"login":"nicholascar","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib-with-all/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib-with-all/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib-with-all/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib-with-all/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib-with-all/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib-with-all/codemeta","maintainers":[],"registry":{"name":"anaconda.org","url":"https://anaconda.org","ecosystem":"conda","default":true,"packages_count":5475,"maintainers_count":0,"namespaces_count":0,"keywords_count":3313,"github":"Anaconda","metadata":{"kind":"anaconda","key":"Main","api":"https://repo.ananconda.com","funded_packages_count":850},"icon_url":"https://github.com/Anaconda.png","created_at":"2022-10-03T15:37:08.736Z","updated_at":"2026-08-22T05:06:01.727Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/namespaces"}},{"id":13950805,"name":"python-rdflib","ecosystem":"guix","description":"Python RDF library","homepage":"https://github.com/RDFLib/rdflib","licenses":"(license:non-copyleft \"file://LICENSE\"\n                                   \"See LICENSE in the distribution.\")","normalized_licenses":["AAL"],"repository_url":"https://github.com/RDFLib/rdflib","keywords_array":[],"namespace":null,"versions_count":2,"first_release_published_at":"2026-03-02T19:02:54.280Z","latest_release_published_at":"2026-03-02T19:02:54.280Z","latest_release_number":"7.1.1","last_synced_at":"2026-04-27T16:22:16.311Z","created_at":"2026-03-02T19:02:53.882Z","updated_at":"2026-08-17T10:37:09.561Z","registry_url":"https://packages.guix.gnu.org/packages/python-rdflib/7.1.1/","install_command":"guix install python-rdflib","documentation_url":"https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/rdf.scm#n362","metadata":{"location":"gnu/packages/rdf.scm:362","variable_name":"python-rdflib"},"repo_metadata":{"id":2377038,"uuid":"3342046","full_name":"RDFLib/rdflib","owner":"RDFLib","description":"RDFLib is a Python library for working with RDF, a simple yet powerful language for representing information.","archived":false,"fork":false,"pushed_at":"2026-08-05T05:44:39.000Z","size":23872,"stargazers_count":2486,"open_issues_count":376,"forks_count":599,"subscribers_count":77,"default_branch":"main","last_synced_at":"2026-08-09T11:25:24.343Z","etag":null,"topics":["graph","json-ld","linked-data","n3","namespace","nquads","ntriples","parser","pypi","python","python-library","rdf","rdf-xml","rdflib","semantic-web","serializer","sparql","turtle","turtle-rdf","uri"],"latest_commit_sha":null,"homepage":"https://rdflib.readthedocs.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RDFLib.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"docs/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"docs/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":"CODEOWNERS","security":"docs/security_considerations.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2012-02-03T05:49:13.000Z","updated_at":"2026-08-05T20:27:34.000Z","dependencies_parsed_at":"2023-01-16T18:31:12.523Z","dependency_job_id":"0230eed4-02cd-49b4-bbec-beb2992371e7","html_url":"https://github.com/RDFLib/rdflib","commit_stats":{"total_commits":4206,"total_committers":192,"mean_commits":21.90625,"dds":0.7998097955301949,"last_synced_commit":"0ecc40009ae397c2798c0c08a2d751a1a9d2f8a7"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/RDFLib/rdflib","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/sbom","scorecard":{"id":116529,"data":{"date":"2025-08-11","repo":{"name":"github.com/RDFLib/rdflib","commit":"7a1023fa6f9ed059d104a8f924b50eb32d46a1e7"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":10,"reason":"14 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":8,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:36","Info: jobLevel 'packages' permission set to 'read': .github/workflows/docker-images.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:62","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test-report.yml:11","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/test-report.yml:12","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:121","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:156","Warn: no topLevel permission defined: .github/workflows/docker-images.yaml:1","Warn: no topLevel permission defined: .github/workflows/test-report.yml:1","Warn: no topLevel permission defined: .github/workflows/validate.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":6,"reason":"Found 13/21 approved changesets -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 7.1.4 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/114718987","Warn: release artifact 7.1.4 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/114718987"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile.devcontainer:1: pin your Docker image by updating mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04 to mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04@sha256:e57fdff274ed0bac0776490fa2644c242491bb21d4df7ad0bb79b433eac5168d","Warn: pipCommand not pinned by hash: Dockerfile.devcontainer:46-52","Warn: pipCommand not pinned by hash: docker/latest/Dockerfile:5-7","Warn: pipCommand not pinned by hash: docker/unstable/Dockerfile:6-7","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:49","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:74","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:78","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:145","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned","Info:   2 out of   3 containerImage dependencies pinned","Info:   1 out of   8 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-images.yaml:14"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-16T01:25:56.449Z","repository_id":2377038,"created_at":"2025-08-16T01:25:56.449Z","updated_at":"2025-08-16T01:25:56.449Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36460895,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"RDFLib","name":"RDFlib","uuid":"1401847","kind":"organization","description":"RDFlib, the GitHub organization, is a volunteer-maintained collection of Python tools for working with RDF data.","email":null,"website":"https://rdflib.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1401847?v=4","repositories_count":38,"last_synced_at":"2025-06-18T07:02:14.861Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/RDFLib","funding_links":[],"total_stars":4045,"followers":159,"following":0,"created_at":"2022-11-02T21:14:04.590Z","updated_at":"2025-06-18T07:02:14.861Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-17T10:37:09.560Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:guix/python-rdflib","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/guix/python-rdflib","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/guix/python-rdflib","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/guix/python-rdflib/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-16T10:02:32.044Z","issues_count":282,"pull_requests_count":1063,"avg_time_to_close_issue":23665147.85714286,"avg_time_to_close_pull_request":1651532.8202115158,"issues_closed_count":84,"pull_requests_closed_count":851,"pull_request_authors_count":86,"issue_authors_count":154,"avg_comments_per_issue":2.7375886524822697,"avg_comments_per_pull_request":1.4694261523988712,"merged_pull_requests_count":623,"bot_issues_count":6,"bot_pull_requests_count":610,"past_year_issues_count":29,"past_year_pull_requests_count":95,"past_year_avg_time_to_close_issue":1062619.3333333333,"past_year_avg_time_to_close_pull_request":914978.9583333334,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":48,"past_year_pull_request_authors_count":22,"past_year_issue_authors_count":21,"past_year_avg_comments_per_issue":2.2413793103448274,"past_year_avg_comments_per_pull_request":1.1894736842105262,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":46,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/issues","maintainers":[{"login":"aucampia","count":132,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aucampia"},{"login":"nicholascar","count":54,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"},{"login":"gjhiggins","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gjhiggins"},{"login":"gromgull","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gromgull"},{"login":"joernhees","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joernhees"},{"login":"niklasl","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/niklasl"},{"login":"edsu","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/edsu"}],"active_maintainers":[{"login":"nicholascar","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/python-rdflib/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/python-rdflib/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/python-rdflib/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/python-rdflib/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/python-rdflib/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/python-rdflib/codemeta","maintainers":[],"registry":{"name":"guix","url":"https://guix.gnu.org","ecosystem":"guix","default":true,"packages_count":32302,"maintainers_count":0,"namespaces_count":0,"keywords_count":1654,"github":"guix-mirror","metadata":{"funded_packages_count":1199},"icon_url":"https://github.com/guix-mirror.png","created_at":"2026-03-02T16:23:46.981Z","updated_at":"2026-08-22T05:04:53.021Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/guix/namespaces"}},{"id":14513084,"name":"dev-python/rdflib","ecosystem":"gentoo","description":"RDF library containing a triple store and parser/serializer","homepage":"https://github.com/RDFLib/rdflib/","licenses":"BSD","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/RDFLib/rdflib","keywords_array":["~alpha","amd64","arm","arm64","~hppa","~loong","~mips","ppc","ppc64","~riscv","~sparc","x86"],"namespace":"dev-python","versions_count":1,"first_release_published_at":"2026-05-11T16:39:47.000Z","latest_release_published_at":"2026-05-11T16:39:47.000Z","latest_release_number":"7.6.0","last_synced_at":"2026-05-27T02:37:36.996Z","created_at":"2026-05-27T02:37:36.633Z","updated_at":"2026-08-17T10:37:09.570Z","registry_url":"https://packages.gentoo.org/packages/dev-python/rdflib","install_command":"emerge dev-python/rdflib","documentation_url":"https://packages.gentoo.org/packages/dev-python/rdflib","metadata":{"category":"dev-python","slot":"0","eapi":"8","inherit":"distutils-r1","iuse":"examples sqlite test python_targets_python3_11 python_targets_python3_12 python_targets_python3_13 python_targets_python3_14"},"repo_metadata":{"id":2377038,"uuid":"3342046","full_name":"RDFLib/rdflib","owner":"RDFLib","description":"RDFLib is a Python library for working with RDF, a simple yet powerful language for representing information.","archived":false,"fork":false,"pushed_at":"2026-08-05T05:44:39.000Z","size":23872,"stargazers_count":2486,"open_issues_count":376,"forks_count":599,"subscribers_count":77,"default_branch":"main","last_synced_at":"2026-08-09T11:25:24.343Z","etag":null,"topics":["graph","json-ld","linked-data","n3","namespace","nquads","ntriples","parser","pypi","python","python-library","rdf","rdf-xml","rdflib","semantic-web","serializer","sparql","turtle","turtle-rdf","uri"],"latest_commit_sha":null,"homepage":"https://rdflib.readthedocs.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RDFLib.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"docs/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"docs/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":"CODEOWNERS","security":"docs/security_considerations.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2012-02-03T05:49:13.000Z","updated_at":"2026-08-05T20:27:34.000Z","dependencies_parsed_at":"2023-01-16T18:31:12.523Z","dependency_job_id":"0230eed4-02cd-49b4-bbec-beb2992371e7","html_url":"https://github.com/RDFLib/rdflib","commit_stats":{"total_commits":4206,"total_committers":192,"mean_commits":21.90625,"dds":0.7998097955301949,"last_synced_commit":"0ecc40009ae397c2798c0c08a2d751a1a9d2f8a7"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/RDFLib/rdflib","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/sbom","scorecard":{"id":116529,"data":{"date":"2025-08-11","repo":{"name":"github.com/RDFLib/rdflib","commit":"7a1023fa6f9ed059d104a8f924b50eb32d46a1e7"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":10,"reason":"14 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":8,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:36","Info: jobLevel 'packages' permission set to 'read': .github/workflows/docker-images.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:62","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test-report.yml:11","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/test-report.yml:12","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:121","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:156","Warn: no topLevel permission defined: .github/workflows/docker-images.yaml:1","Warn: no topLevel permission defined: .github/workflows/test-report.yml:1","Warn: no topLevel permission defined: .github/workflows/validate.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":6,"reason":"Found 13/21 approved changesets -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 7.1.4 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/114718987","Warn: release artifact 7.1.4 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/114718987"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile.devcontainer:1: pin your Docker image by updating mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04 to mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04@sha256:e57fdff274ed0bac0776490fa2644c242491bb21d4df7ad0bb79b433eac5168d","Warn: pipCommand not pinned by hash: Dockerfile.devcontainer:46-52","Warn: pipCommand not pinned by hash: docker/latest/Dockerfile:5-7","Warn: pipCommand not pinned by hash: docker/unstable/Dockerfile:6-7","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:49","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:74","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:78","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:145","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned","Info:   2 out of   3 containerImage dependencies pinned","Info:   1 out of   8 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-images.yaml:14"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-16T01:25:56.449Z","repository_id":2377038,"created_at":"2025-08-16T01:25:56.449Z","updated_at":"2025-08-16T01:25:56.449Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36460895,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"RDFLib","name":"RDFlib","uuid":"1401847","kind":"organization","description":"RDFlib, the GitHub organization, is a volunteer-maintained collection of Python tools for working with RDF data.","email":null,"website":"https://rdflib.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1401847?v=4","repositories_count":38,"last_synced_at":"2025-06-18T07:02:14.861Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/RDFLib","funding_links":[],"total_stars":4045,"followers":159,"following":0,"created_at":"2022-11-02T21:14:04.590Z","updated_at":"2025-06-18T07:02:14.861Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-17T10:37:09.570Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:gentoo/dev-python/rdflib","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/gentoo/dev-python/rdflib","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/gentoo/dev-python/rdflib","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/gentoo/dev-python/rdflib/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-16T10:02:32.044Z","issues_count":282,"pull_requests_count":1063,"avg_time_to_close_issue":23665147.85714286,"avg_time_to_close_pull_request":1651532.8202115158,"issues_closed_count":84,"pull_requests_closed_count":851,"pull_request_authors_count":86,"issue_authors_count":154,"avg_comments_per_issue":2.7375886524822697,"avg_comments_per_pull_request":1.4694261523988712,"merged_pull_requests_count":623,"bot_issues_count":6,"bot_pull_requests_count":610,"past_year_issues_count":29,"past_year_pull_requests_count":95,"past_year_avg_time_to_close_issue":1062619.3333333333,"past_year_avg_time_to_close_pull_request":914978.9583333334,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":48,"past_year_pull_request_authors_count":22,"past_year_issue_authors_count":21,"past_year_avg_comments_per_issue":2.2413793103448274,"past_year_avg_comments_per_pull_request":1.1894736842105262,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":46,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/issues","maintainers":[{"login":"aucampia","count":132,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aucampia"},{"login":"nicholascar","count":54,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"},{"login":"gjhiggins","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gjhiggins"},{"login":"gromgull","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gromgull"},{"login":"joernhees","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joernhees"},{"login":"niklasl","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/niklasl"},{"login":"edsu","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/edsu"}],"active_maintainers":[{"login":"nicholascar","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/packages/dev-python%2Frdflib/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/packages/dev-python%2Frdflib/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/packages/dev-python%2Frdflib/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/packages/dev-python%2Frdflib/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/packages/dev-python%2Frdflib/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/packages/dev-python%2Frdflib/codemeta","maintainers":[],"registry":{"name":"gentoo-portage","url":"https://packages.gentoo.org/","ecosystem":"gentoo","default":true,"packages_count":19521,"maintainers_count":0,"namespaces_count":174,"keywords_count":1054,"github":"gentoo","metadata":{"snapshot_url":"https://distfiles.gentoo.org/snapshots/portage-latest.tar.xz","funded_packages_count":605},"icon_url":"https://github.com/gentoo.png","created_at":"2026-05-26T08:59:24.155Z","updated_at":"2026-08-22T05:04:55.321Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/gentoo-portage/namespaces"}},{"id":14540208,"name":"textproc/py-rdflib","ecosystem":"pkgsrc","description":"Python library for working with RDF","homepage":"https://github.com/RDFLib/rdflib","licenses":"2-clause-bsd","normalized_licenses":["MulanPSL-2.0"],"repository_url":"https://github.com/RDFLib/rdflib","keywords_array":["textproc","python"],"namespace":"textproc","versions_count":1,"first_release_published_at":"2026-03-06T21:12:50.000Z","latest_release_published_at":"2026-03-06T21:12:50.000Z","latest_release_number":"7.6.0","last_synced_at":"2026-05-27T10:23:11.065Z","created_at":"2026-05-27T10:23:10.714Z","updated_at":"2026-08-17T10:37:09.607Z","registry_url":"https://pkgsrc.se/textproc/py-rdflib","install_command":"pkg_add py314-rdflib","documentation_url":"https://pkgsrc.se/textproc/py-rdflib","metadata":{"pkg_slug":"py-rdflib","pkgbase":"py311-rdflib","machine_arch":"x86_64","opsys":"NetBSD","pkgname_latest":"py311-rdflib-7.6.0"},"repo_metadata":{"id":2377038,"uuid":"3342046","full_name":"RDFLib/rdflib","owner":"RDFLib","description":"RDFLib is a Python library for working with RDF, a simple yet powerful language for representing information.","archived":false,"fork":false,"pushed_at":"2026-08-05T05:44:39.000Z","size":23872,"stargazers_count":2486,"open_issues_count":376,"forks_count":599,"subscribers_count":77,"default_branch":"main","last_synced_at":"2026-08-09T11:25:24.343Z","etag":null,"topics":["graph","json-ld","linked-data","n3","namespace","nquads","ntriples","parser","pypi","python","python-library","rdf","rdf-xml","rdflib","semantic-web","serializer","sparql","turtle","turtle-rdf","uri"],"latest_commit_sha":null,"homepage":"https://rdflib.readthedocs.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RDFLib.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"docs/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"docs/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":"CODEOWNERS","security":"docs/security_considerations.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2012-02-03T05:49:13.000Z","updated_at":"2026-08-05T20:27:34.000Z","dependencies_parsed_at":"2023-01-16T18:31:12.523Z","dependency_job_id":"0230eed4-02cd-49b4-bbec-beb2992371e7","html_url":"https://github.com/RDFLib/rdflib","commit_stats":{"total_commits":4206,"total_committers":192,"mean_commits":21.90625,"dds":0.7998097955301949,"last_synced_commit":"0ecc40009ae397c2798c0c08a2d751a1a9d2f8a7"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/RDFLib/rdflib","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/sbom","scorecard":{"id":116529,"data":{"date":"2025-08-11","repo":{"name":"github.com/RDFLib/rdflib","commit":"7a1023fa6f9ed059d104a8f924b50eb32d46a1e7"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":10,"reason":"14 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":8,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:36","Info: jobLevel 'packages' permission set to 'read': .github/workflows/docker-images.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:62","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test-report.yml:11","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/test-report.yml:12","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:121","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:156","Warn: no topLevel permission defined: .github/workflows/docker-images.yaml:1","Warn: no topLevel permission defined: .github/workflows/test-report.yml:1","Warn: no topLevel permission defined: .github/workflows/validate.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":6,"reason":"Found 13/21 approved changesets -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 7.1.4 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/114718987","Warn: release artifact 7.1.4 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/114718987"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile.devcontainer:1: pin your Docker image by updating mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04 to mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04@sha256:e57fdff274ed0bac0776490fa2644c242491bb21d4df7ad0bb79b433eac5168d","Warn: pipCommand not pinned by hash: Dockerfile.devcontainer:46-52","Warn: pipCommand not pinned by hash: docker/latest/Dockerfile:5-7","Warn: pipCommand not pinned by hash: docker/unstable/Dockerfile:6-7","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:49","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:74","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:78","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:145","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned","Info:   2 out of   3 containerImage dependencies pinned","Info:   1 out of   8 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-images.yaml:14"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-16T01:25:56.449Z","repository_id":2377038,"created_at":"2025-08-16T01:25:56.449Z","updated_at":"2025-08-16T01:25:56.449Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36460895,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"RDFLib","name":"RDFlib","uuid":"1401847","kind":"organization","description":"RDFlib, the GitHub organization, is a volunteer-maintained collection of Python tools for working with RDF data.","email":null,"website":"https://rdflib.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1401847?v=4","repositories_count":38,"last_synced_at":"2025-06-18T07:02:14.861Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/RDFLib","funding_links":[],"total_stars":4045,"followers":159,"following":0,"created_at":"2022-11-02T21:14:04.590Z","updated_at":"2025-06-18T07:02:14.861Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-17T10:37:09.607Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:pkgsrc/textproc/py-rdflib?arch=x86_64\u0026os=NetBSD","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/pkgsrc/textproc/py-rdflib","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/pkgsrc/textproc/py-rdflib","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/pkgsrc/textproc/py-rdflib/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-16T10:02:32.044Z","issues_count":282,"pull_requests_count":1063,"avg_time_to_close_issue":23665147.85714286,"avg_time_to_close_pull_request":1651532.8202115158,"issues_closed_count":84,"pull_requests_closed_count":851,"pull_request_authors_count":86,"issue_authors_count":154,"avg_comments_per_issue":2.7375886524822697,"avg_comments_per_pull_request":1.4694261523988712,"merged_pull_requests_count":623,"bot_issues_count":6,"bot_pull_requests_count":610,"past_year_issues_count":29,"past_year_pull_requests_count":95,"past_year_avg_time_to_close_issue":1062619.3333333333,"past_year_avg_time_to_close_pull_request":914978.9583333334,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":48,"past_year_pull_request_authors_count":22,"past_year_issue_authors_count":21,"past_year_avg_comments_per_issue":2.2413793103448274,"past_year_avg_comments_per_pull_request":1.1894736842105262,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":46,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/issues","maintainers":[{"login":"aucampia","count":132,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aucampia"},{"login":"nicholascar","count":54,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"},{"login":"gjhiggins","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gjhiggins"},{"login":"gromgull","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gromgull"},{"login":"joernhees","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joernhees"},{"login":"niklasl","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/niklasl"},{"login":"edsu","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/edsu"}],"active_maintainers":[{"login":"nicholascar","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/packages/textproc%2Fpy-rdflib/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/packages/textproc%2Fpy-rdflib/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/packages/textproc%2Fpy-rdflib/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/packages/textproc%2Fpy-rdflib/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/packages/textproc%2Fpy-rdflib/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/packages/textproc%2Fpy-rdflib/codemeta","maintainers":[],"registry":{"name":"pkgsrc-netbsd-x86_64-10.1-all","url":"https://cdn.netbsd.org/pub/pkgsrc/packages/NetBSD/x86_64/10.1/All","ecosystem":"pkgsrc","default":true,"packages_count":19690,"maintainers_count":0,"namespaces_count":43,"keywords_count":368,"github":"pkgsrc","metadata":{"funded_packages_count":469},"icon_url":"https://github.com/pkgsrc.png","created_at":"2026-05-26T08:59:24.518Z","updated_at":"2026-08-22T05:00:17.841Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/pkgsrc-netbsd-x86_64-10.1-all/namespaces"}},{"id":12040455,"name":"rdflib","ecosystem":"conda","description":"RDFLib is a pure Python package for working with RDF. RDFLib contains most things you need to work with RDF, including parsers and serializers for RDF/XML, N3, NTriples, N-Quads, Turtle, TriX, Trig and JSON-LD a Graph interface which can be backed by any one of a number of Store implementations store implementations for in-memory, persistent on disk (Berkeley DB) and remote SPARQL endpoints a SPARQL 1.1 implementation - supporting SPARQL 1.1 Queries and Update statements SPARQL function extension mechanisms","homepage":"https://github.com/RDFLib/rdflib","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/RDFLib/rdflib","keywords_array":[],"namespace":null,"versions_count":3,"first_release_published_at":"2025-08-25T19:53:44.000Z","latest_release_published_at":"2026-08-07T13:12:10.000Z","latest_release_number":"7.6.0","last_synced_at":"2026-08-07T15:03:46.471Z","created_at":"2025-08-25T21:18:30.327Z","updated_at":"2026-08-17T10:37:09.611Z","registry_url":"https://anaconda.org/anaconda/rdflib","install_command":"conda install -c anaconda rdflib","documentation_url":null,"metadata":{},"repo_metadata":{"id":2377038,"uuid":"3342046","full_name":"RDFLib/rdflib","owner":"RDFLib","description":"RDFLib is a Python library for working with RDF, a simple yet powerful language for representing information.","archived":false,"fork":false,"pushed_at":"2026-08-05T05:44:39.000Z","size":23872,"stargazers_count":2486,"open_issues_count":376,"forks_count":599,"subscribers_count":77,"default_branch":"main","last_synced_at":"2026-08-09T11:25:24.343Z","etag":null,"topics":["graph","json-ld","linked-data","n3","namespace","nquads","ntriples","parser","pypi","python","python-library","rdf","rdf-xml","rdflib","semantic-web","serializer","sparql","turtle","turtle-rdf","uri"],"latest_commit_sha":null,"homepage":"https://rdflib.readthedocs.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RDFLib.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"docs/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"docs/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":"CODEOWNERS","security":"docs/security_considerations.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2012-02-03T05:49:13.000Z","updated_at":"2026-08-05T20:27:34.000Z","dependencies_parsed_at":"2023-01-16T18:31:12.523Z","dependency_job_id":"0230eed4-02cd-49b4-bbec-beb2992371e7","html_url":"https://github.com/RDFLib/rdflib","commit_stats":{"total_commits":4206,"total_committers":192,"mean_commits":21.90625,"dds":0.7998097955301949,"last_synced_commit":"0ecc40009ae397c2798c0c08a2d751a1a9d2f8a7"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/RDFLib/rdflib","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/sbom","scorecard":{"id":116529,"data":{"date":"2025-08-11","repo":{"name":"github.com/RDFLib/rdflib","commit":"7a1023fa6f9ed059d104a8f924b50eb32d46a1e7"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":10,"reason":"14 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":8,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:36","Info: jobLevel 'packages' permission set to 'read': .github/workflows/docker-images.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:62","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test-report.yml:11","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/test-report.yml:12","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:121","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:156","Warn: no topLevel permission defined: .github/workflows/docker-images.yaml:1","Warn: no topLevel permission defined: .github/workflows/test-report.yml:1","Warn: no topLevel permission defined: .github/workflows/validate.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":6,"reason":"Found 13/21 approved changesets -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 7.1.4 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/114718987","Warn: release artifact 7.1.4 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/114718987"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile.devcontainer:1: pin your Docker image by updating mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04 to mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04@sha256:e57fdff274ed0bac0776490fa2644c242491bb21d4df7ad0bb79b433eac5168d","Warn: pipCommand not pinned by hash: Dockerfile.devcontainer:46-52","Warn: pipCommand not pinned by hash: docker/latest/Dockerfile:5-7","Warn: pipCommand not pinned by hash: docker/unstable/Dockerfile:6-7","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:49","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:74","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:78","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:145","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned","Info:   2 out of   3 containerImage dependencies pinned","Info:   1 out of   8 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-images.yaml:14"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-16T01:25:56.449Z","repository_id":2377038,"created_at":"2025-08-16T01:25:56.449Z","updated_at":"2025-08-16T01:25:56.449Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36460895,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"RDFLib","name":"RDFlib","uuid":"1401847","kind":"organization","description":"RDFlib, the GitHub organization, is a volunteer-maintained collection of Python tools for working with RDF data.","email":null,"website":"https://rdflib.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1401847?v=4","repositories_count":38,"last_synced_at":"2025-06-18T07:02:14.861Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/RDFLib","funding_links":[],"total_stars":4045,"followers":159,"following":0,"created_at":"2022-11-02T21:14:04.590Z","updated_at":"2025-06-18T07:02:14.861Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-17T10:37:09.611Z","dependent_packages_count":0,"downloads":926,"downloads_period":"total","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":46.4861078683166,"dependent_packages_count":42.2834461825823,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":44.38477702544945},"purl":"pkg:conda/rdflib","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/conda/rdflib","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/conda/rdflib","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/conda/rdflib/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-16T10:02:32.044Z","issues_count":282,"pull_requests_count":1063,"avg_time_to_close_issue":23665147.85714286,"avg_time_to_close_pull_request":1651532.8202115158,"issues_closed_count":84,"pull_requests_closed_count":851,"pull_request_authors_count":86,"issue_authors_count":154,"avg_comments_per_issue":2.7375886524822697,"avg_comments_per_pull_request":1.4694261523988712,"merged_pull_requests_count":623,"bot_issues_count":6,"bot_pull_requests_count":610,"past_year_issues_count":29,"past_year_pull_requests_count":95,"past_year_avg_time_to_close_issue":1062619.3333333333,"past_year_avg_time_to_close_pull_request":914978.9583333334,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":48,"past_year_pull_request_authors_count":22,"past_year_issue_authors_count":21,"past_year_avg_comments_per_issue":2.2413793103448274,"past_year_avg_comments_per_pull_request":1.1894736842105262,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":46,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/issues","maintainers":[{"login":"aucampia","count":132,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aucampia"},{"login":"nicholascar","count":54,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"},{"login":"gjhiggins","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gjhiggins"},{"login":"gromgull","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gromgull"},{"login":"joernhees","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joernhees"},{"login":"niklasl","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/niklasl"},{"login":"edsu","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/edsu"}],"active_maintainers":[{"login":"nicholascar","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib/codemeta","maintainers":[],"registry":{"name":"anaconda.org","url":"https://anaconda.org","ecosystem":"conda","default":true,"packages_count":5475,"maintainers_count":0,"namespaces_count":0,"keywords_count":3313,"github":"Anaconda","metadata":{"kind":"anaconda","key":"Main","api":"https://repo.ananconda.com","funded_packages_count":850},"icon_url":"https://github.com/Anaconda.png","created_at":"2022-10-03T15:37:08.736Z","updated_at":"2026-08-22T05:06:01.727Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/namespaces"}},{"id":13711272,"name":"rdflib","ecosystem":"debian","description":null,"homepage":"https://github.com/RDFLib/rdflib","licenses":"bsd-3-clause","normalized_licenses":[],"repository_url":"https://github.com/RDFLib/rdflib","keywords_array":["python"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T23:16:41.995Z","latest_release_published_at":"2026-02-12T23:16:41.995Z","latest_release_number":"6.1.1-1","last_synced_at":"2026-03-13T03:27:59.840Z","created_at":"2026-02-12T23:16:41.770Z","updated_at":"2026-08-17T10:37:09.621Z","registry_url":"https://tracker.debian.org/pkg/rdflib","install_command":"apt-get install rdflib","documentation_url":"https://packages.debian.org/bookworm/rdflib","metadata":{"component":"main","architecture":"all","priority":"source","binary":"python3-rdflib, python-rdflib-doc, python-rdflib-tools","standards_version":"4.6.0","maintainer":"Debian Python Team \u003cteam+python@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-python, python3-all, python3-setuptools, python3-pkg-resources, python3-lib2to3, python3-sphinx \u003c!nodoc\u003e, python3-sphinxcontrib.apidoc \u003c!nodoc\u003e, python3-isodate \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-pyparsing \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-networkx \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-html5lib \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-sparqlwrapper \u003c!nocheck\u003e \u003c!nodoc\u003e, 2to3 \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-pytest \u003c!nocheck\u003e, python3-pytest-subtests \u003c!nocheck\u003e, python3-bsddb3 \u003c!nocheck\u003e, python3-rdflib-jsonld \u003c!nocheck\u003e","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":2377038,"uuid":"3342046","full_name":"RDFLib/rdflib","owner":"RDFLib","description":"RDFLib is a Python library for working with RDF, a simple yet powerful language for representing information.","archived":false,"fork":false,"pushed_at":"2026-08-05T05:44:39.000Z","size":23872,"stargazers_count":2486,"open_issues_count":376,"forks_count":599,"subscribers_count":77,"default_branch":"main","last_synced_at":"2026-08-09T11:25:24.343Z","etag":null,"topics":["graph","json-ld","linked-data","n3","namespace","nquads","ntriples","parser","pypi","python","python-library","rdf","rdf-xml","rdflib","semantic-web","serializer","sparql","turtle","turtle-rdf","uri"],"latest_commit_sha":null,"homepage":"https://rdflib.readthedocs.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RDFLib.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"docs/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"docs/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":"CODEOWNERS","security":"docs/security_considerations.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2012-02-03T05:49:13.000Z","updated_at":"2026-08-05T20:27:34.000Z","dependencies_parsed_at":"2023-01-16T18:31:12.523Z","dependency_job_id":"0230eed4-02cd-49b4-bbec-beb2992371e7","html_url":"https://github.com/RDFLib/rdflib","commit_stats":{"total_commits":4206,"total_committers":192,"mean_commits":21.90625,"dds":0.7998097955301949,"last_synced_commit":"0ecc40009ae397c2798c0c08a2d751a1a9d2f8a7"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/RDFLib/rdflib","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/sbom","scorecard":{"id":116529,"data":{"date":"2025-08-11","repo":{"name":"github.com/RDFLib/rdflib","commit":"7a1023fa6f9ed059d104a8f924b50eb32d46a1e7"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":10,"reason":"14 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":8,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:36","Info: jobLevel 'packages' permission set to 'read': .github/workflows/docker-images.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:62","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test-report.yml:11","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/test-report.yml:12","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:121","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:156","Warn: no topLevel permission defined: .github/workflows/docker-images.yaml:1","Warn: no topLevel permission defined: .github/workflows/test-report.yml:1","Warn: no topLevel permission defined: .github/workflows/validate.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":6,"reason":"Found 13/21 approved changesets -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 7.1.4 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/114718987","Warn: release artifact 7.1.4 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/114718987"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile.devcontainer:1: pin your Docker image by updating mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04 to mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04@sha256:e57fdff274ed0bac0776490fa2644c242491bb21d4df7ad0bb79b433eac5168d","Warn: pipCommand not pinned by hash: Dockerfile.devcontainer:46-52","Warn: pipCommand not pinned by hash: docker/latest/Dockerfile:5-7","Warn: pipCommand not pinned by hash: docker/unstable/Dockerfile:6-7","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:49","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:74","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:78","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:145","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned","Info:   2 out of   3 containerImage dependencies pinned","Info:   1 out of   8 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-images.yaml:14"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-16T01:25:56.449Z","repository_id":2377038,"created_at":"2025-08-16T01:25:56.449Z","updated_at":"2025-08-16T01:25:56.449Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36460895,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"RDFLib","name":"RDFlib","uuid":"1401847","kind":"organization","description":"RDFlib, the GitHub organization, is a volunteer-maintained collection of Python tools for working with RDF data.","email":null,"website":"https://rdflib.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1401847?v=4","repositories_count":38,"last_synced_at":"2025-06-18T07:02:14.861Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/RDFLib","funding_links":[],"total_stars":4045,"followers":159,"following":0,"created_at":"2022-11-02T21:14:04.590Z","updated_at":"2025-06-18T07:02:14.861Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-17T10:37:09.621Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/rdflib?arch=source\u0026distro=debian-12","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/rdflib","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/rdflib","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/rdflib/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-16T10:02:32.044Z","issues_count":282,"pull_requests_count":1063,"avg_time_to_close_issue":23665147.85714286,"avg_time_to_close_pull_request":1651532.8202115158,"issues_closed_count":84,"pull_requests_closed_count":851,"pull_request_authors_count":86,"issue_authors_count":154,"avg_comments_per_issue":2.7375886524822697,"avg_comments_per_pull_request":1.4694261523988712,"merged_pull_requests_count":623,"bot_issues_count":6,"bot_pull_requests_count":610,"past_year_issues_count":29,"past_year_pull_requests_count":95,"past_year_avg_time_to_close_issue":1062619.3333333333,"past_year_avg_time_to_close_pull_request":914978.9583333334,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":48,"past_year_pull_request_authors_count":22,"past_year_issue_authors_count":21,"past_year_avg_comments_per_issue":2.2413793103448274,"past_year_avg_comments_per_pull_request":1.1894736842105262,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":46,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/issues","maintainers":[{"login":"aucampia","count":132,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aucampia"},{"login":"nicholascar","count":54,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"},{"login":"gjhiggins","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gjhiggins"},{"login":"gromgull","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gromgull"},{"login":"joernhees","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joernhees"},{"login":"niklasl","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/niklasl"},{"login":"edsu","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/edsu"}],"active_maintainers":[{"login":"nicholascar","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/rdflib/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/rdflib/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/rdflib/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/rdflib/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/rdflib/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/rdflib/codemeta","maintainers":[],"registry":{"name":"debian-12","url":"https://packages.debian.org/bookworm","ecosystem":"debian","default":true,"packages_count":34734,"maintainers_count":0,"namespaces_count":4,"keywords_count":2650,"github":"debian","metadata":{"codename":"bookworm","funded_packages_count":1211},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:49.459Z","updated_at":"2026-08-22T05:05:48.195Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/namespaces"}},{"id":13529526,"name":"rdflib","ecosystem":"debian","description":null,"homepage":"https://github.com/RDFLib/rdflib","licenses":"bsd-3-clause","normalized_licenses":[],"repository_url":"https://github.com/RDFLib/rdflib","keywords_array":["python"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-10T23:21:45.693Z","latest_release_published_at":"2026-02-10T23:21:45.693Z","latest_release_number":"5.0.0-1.1","last_synced_at":"2026-03-14T06:19:36.905Z","created_at":"2026-02-10T23:21:45.491Z","updated_at":"2026-08-17T10:37:09.649Z","registry_url":"https://tracker.debian.org/pkg/rdflib","install_command":"apt-get install rdflib","documentation_url":"https://packages.debian.org/bullseye/rdflib","metadata":{"component":"main","architecture":"all","priority":"source","binary":"python3-rdflib, python-rdflib-doc, python-rdflib-tools","standards_version":"4.4.1","maintainer":"Debian Python Team \u003cteam+python@tracker.debian.org\u003e","build_depends":"debhelper (\u003e= 10), python3 (\u003e= 3.3.0-2), dh-python (\u003e= 1.20140128), python3-all, python3-setuptools, python3-pkg-resources, python3-lib2to3, dpkg-dev (\u003e= 1.17.14), python3-sphinx \u003c!nodoc\u003e, python3-sphinxcontrib.apidoc \u003c!nodoc\u003e, python3-isodate \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-pyparsing \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-nose \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-networkx \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-html5lib \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-sparqlwrapper (\u003e= 1.7.6~) \u003c!nocheck\u003e \u003c!nodoc\u003e, 2to3 \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-bsddb3 \u003c!nocheck\u003e, python3-rdflib-jsonld \u003c!nocheck\u003e","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":2377038,"uuid":"3342046","full_name":"RDFLib/rdflib","owner":"RDFLib","description":"RDFLib is a Python library for working with RDF, a simple yet powerful language for representing information.","archived":false,"fork":false,"pushed_at":"2026-08-05T05:44:39.000Z","size":23872,"stargazers_count":2486,"open_issues_count":376,"forks_count":599,"subscribers_count":77,"default_branch":"main","last_synced_at":"2026-08-09T11:25:24.343Z","etag":null,"topics":["graph","json-ld","linked-data","n3","namespace","nquads","ntriples","parser","pypi","python","python-library","rdf","rdf-xml","rdflib","semantic-web","serializer","sparql","turtle","turtle-rdf","uri"],"latest_commit_sha":null,"homepage":"https://rdflib.readthedocs.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RDFLib.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"docs/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"docs/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":"CODEOWNERS","security":"docs/security_considerations.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2012-02-03T05:49:13.000Z","updated_at":"2026-08-05T20:27:34.000Z","dependencies_parsed_at":"2023-01-16T18:31:12.523Z","dependency_job_id":"0230eed4-02cd-49b4-bbec-beb2992371e7","html_url":"https://github.com/RDFLib/rdflib","commit_stats":{"total_commits":4206,"total_committers":192,"mean_commits":21.90625,"dds":0.7998097955301949,"last_synced_commit":"0ecc40009ae397c2798c0c08a2d751a1a9d2f8a7"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/RDFLib/rdflib","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/sbom","scorecard":{"id":116529,"data":{"date":"2025-08-11","repo":{"name":"github.com/RDFLib/rdflib","commit":"7a1023fa6f9ed059d104a8f924b50eb32d46a1e7"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":10,"reason":"14 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":8,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:36","Info: jobLevel 'packages' permission set to 'read': .github/workflows/docker-images.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:62","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test-report.yml:11","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/test-report.yml:12","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:121","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:156","Warn: no topLevel permission defined: .github/workflows/docker-images.yaml:1","Warn: no topLevel permission defined: .github/workflows/test-report.yml:1","Warn: no topLevel permission defined: .github/workflows/validate.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":6,"reason":"Found 13/21 approved changesets -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 7.1.4 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/114718987","Warn: release artifact 7.1.4 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/114718987"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile.devcontainer:1: pin your Docker image by updating mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04 to mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04@sha256:e57fdff274ed0bac0776490fa2644c242491bb21d4df7ad0bb79b433eac5168d","Warn: pipCommand not pinned by hash: Dockerfile.devcontainer:46-52","Warn: pipCommand not pinned by hash: docker/latest/Dockerfile:5-7","Warn: pipCommand not pinned by hash: docker/unstable/Dockerfile:6-7","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:49","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:74","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:78","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:145","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned","Info:   2 out of   3 containerImage dependencies pinned","Info:   1 out of   8 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-images.yaml:14"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-16T01:25:56.449Z","repository_id":2377038,"created_at":"2025-08-16T01:25:56.449Z","updated_at":"2025-08-16T01:25:56.449Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36460895,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"RDFLib","name":"RDFlib","uuid":"1401847","kind":"organization","description":"RDFlib, the GitHub organization, is a volunteer-maintained collection of Python tools for working with RDF data.","email":null,"website":"https://rdflib.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1401847?v=4","repositories_count":38,"last_synced_at":"2025-06-18T07:02:14.861Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/RDFLib","funding_links":[],"total_stars":4045,"followers":159,"following":0,"created_at":"2022-11-02T21:14:04.590Z","updated_at":"2025-06-18T07:02:14.861Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-17T10:37:09.649Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/rdflib?arch=source\u0026distro=debian-11\u0026repository_url=https://packages.debian.org/bullseye","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/rdflib","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/rdflib","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/rdflib/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-16T10:02:32.044Z","issues_count":282,"pull_requests_count":1063,"avg_time_to_close_issue":23665147.85714286,"avg_time_to_close_pull_request":1651532.8202115158,"issues_closed_count":84,"pull_requests_closed_count":851,"pull_request_authors_count":86,"issue_authors_count":154,"avg_comments_per_issue":2.7375886524822697,"avg_comments_per_pull_request":1.4694261523988712,"merged_pull_requests_count":623,"bot_issues_count":6,"bot_pull_requests_count":610,"past_year_issues_count":29,"past_year_pull_requests_count":95,"past_year_avg_time_to_close_issue":1062619.3333333333,"past_year_avg_time_to_close_pull_request":914978.9583333334,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":48,"past_year_pull_request_authors_count":22,"past_year_issue_authors_count":21,"past_year_avg_comments_per_issue":2.2413793103448274,"past_year_avg_comments_per_pull_request":1.1894736842105262,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":46,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/issues","maintainers":[{"login":"aucampia","count":132,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aucampia"},{"login":"nicholascar","count":54,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"},{"login":"gjhiggins","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gjhiggins"},{"login":"gromgull","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gromgull"},{"login":"joernhees","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joernhees"},{"login":"niklasl","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/niklasl"},{"login":"edsu","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/edsu"}],"active_maintainers":[{"login":"nicholascar","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/rdflib/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/rdflib/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/rdflib/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/rdflib/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/rdflib/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/rdflib/codemeta","maintainers":[],"registry":{"name":"debian-11","url":"https://packages.debian.org/bullseye","ecosystem":"debian","default":false,"packages_count":31268,"maintainers_count":0,"namespaces_count":3,"keywords_count":759,"github":"debian","metadata":{"codename":"bullseye","funded_packages_count":776},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:49.702Z","updated_at":"2026-08-22T05:05:49.308Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/namespaces"}},{"id":13750326,"name":"rdflib","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/RDFLib/rdflib","licenses":"bsd-3-clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/RDFLib/rdflib","keywords_array":["universe/python"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-13T07:04:12.392Z","latest_release_published_at":"2026-02-13T07:04:12.392Z","latest_release_number":"4.2.2-5","last_synced_at":"2026-03-13T20:20:41.769Z","created_at":"2026-02-13T07:04:11.045Z","updated_at":"2026-08-17T10:37:09.668Z","registry_url":"https://launchpad.net/ubuntu/+source/rdflib","install_command":"apt-get install rdflib","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"python3-rdflib, python-rdflib-doc, python-rdflib-tools","standards_version":"4.4.1","maintainer":"Debian Python Modules Team \u003cpython-modules-team@lists.alioth.debian.org\u003e","build_depends":"debhelper (\u003e= 9.20141010), python3 (\u003e= 3.3.0-2), dh-python (\u003e= 1.20140128), python3-all, python3-setuptools, python3-pkg-resources, python3-lib2to3, dpkg-dev (\u003e= 1.17.14), python3-sphinx \u003c!nodoc\u003e, python3-isodate \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-pyparsing \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-nose \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-networkx \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-html5lib \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-sparqlwrapper (\u003e= 1.7.6~) \u003c!nocheck\u003e \u003c!nodoc\u003e, 2to3 \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-bsddb3 \u003c!nocheck\u003e, python3-rdflib-jsonld \u003c!nocheck\u003e","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":2377038,"uuid":"3342046","full_name":"RDFLib/rdflib","owner":"RDFLib","description":"RDFLib is a Python library for working with RDF, a simple yet powerful language for representing information.","archived":false,"fork":false,"pushed_at":"2026-08-05T05:44:39.000Z","size":23872,"stargazers_count":2486,"open_issues_count":376,"forks_count":599,"subscribers_count":77,"default_branch":"main","last_synced_at":"2026-08-09T11:25:24.343Z","etag":null,"topics":["graph","json-ld","linked-data","n3","namespace","nquads","ntriples","parser","pypi","python","python-library","rdf","rdf-xml","rdflib","semantic-web","serializer","sparql","turtle","turtle-rdf","uri"],"latest_commit_sha":null,"homepage":"https://rdflib.readthedocs.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RDFLib.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"docs/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"docs/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":"CODEOWNERS","security":"docs/security_considerations.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2012-02-03T05:49:13.000Z","updated_at":"2026-08-05T20:27:34.000Z","dependencies_parsed_at":"2023-01-16T18:31:12.523Z","dependency_job_id":"0230eed4-02cd-49b4-bbec-beb2992371e7","html_url":"https://github.com/RDFLib/rdflib","commit_stats":{"total_commits":4206,"total_committers":192,"mean_commits":21.90625,"dds":0.7998097955301949,"last_synced_commit":"0ecc40009ae397c2798c0c08a2d751a1a9d2f8a7"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/RDFLib/rdflib","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/sbom","scorecard":{"id":116529,"data":{"date":"2025-08-11","repo":{"name":"github.com/RDFLib/rdflib","commit":"7a1023fa6f9ed059d104a8f924b50eb32d46a1e7"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":10,"reason":"14 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":8,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:36","Info: jobLevel 'packages' permission set to 'read': .github/workflows/docker-images.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:62","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test-report.yml:11","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/test-report.yml:12","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:121","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:156","Warn: no topLevel permission defined: .github/workflows/docker-images.yaml:1","Warn: no topLevel permission defined: .github/workflows/test-report.yml:1","Warn: no topLevel permission defined: .github/workflows/validate.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":6,"reason":"Found 13/21 approved changesets -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 7.1.4 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/114718987","Warn: release artifact 7.1.4 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/114718987"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile.devcontainer:1: pin your Docker image by updating mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04 to mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04@sha256:e57fdff274ed0bac0776490fa2644c242491bb21d4df7ad0bb79b433eac5168d","Warn: pipCommand not pinned by hash: Dockerfile.devcontainer:46-52","Warn: pipCommand not pinned by hash: docker/latest/Dockerfile:5-7","Warn: pipCommand not pinned by hash: docker/unstable/Dockerfile:6-7","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:49","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:74","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:78","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:145","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned","Info:   2 out of   3 containerImage dependencies pinned","Info:   1 out of   8 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-images.yaml:14"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-16T01:25:56.449Z","repository_id":2377038,"created_at":"2025-08-16T01:25:56.449Z","updated_at":"2025-08-16T01:25:56.449Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36460895,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"RDFLib","name":"RDFlib","uuid":"1401847","kind":"organization","description":"RDFlib, the GitHub organization, is a volunteer-maintained collection of Python tools for working with RDF data.","email":null,"website":"https://rdflib.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1401847?v=4","repositories_count":38,"last_synced_at":"2025-06-18T07:02:14.861Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/RDFLib","funding_links":[],"total_stars":4045,"followers":159,"following":0,"created_at":"2022-11-02T21:14:04.590Z","updated_at":"2025-06-18T07:02:14.861Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-17T10:37:09.668Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/rdflib?arch=source\u0026distro=ubuntu-20.04\u0026repository_url=https://launchpad.net/ubuntu/focal","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/rdflib","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/rdflib","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/rdflib/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-16T10:02:32.044Z","issues_count":282,"pull_requests_count":1063,"avg_time_to_close_issue":23665147.85714286,"avg_time_to_close_pull_request":1651532.8202115158,"issues_closed_count":84,"pull_requests_closed_count":851,"pull_request_authors_count":86,"issue_authors_count":154,"avg_comments_per_issue":2.7375886524822697,"avg_comments_per_pull_request":1.4694261523988712,"merged_pull_requests_count":623,"bot_issues_count":6,"bot_pull_requests_count":610,"past_year_issues_count":29,"past_year_pull_requests_count":95,"past_year_avg_time_to_close_issue":1062619.3333333333,"past_year_avg_time_to_close_pull_request":914978.9583333334,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":48,"past_year_pull_request_authors_count":22,"past_year_issue_authors_count":21,"past_year_avg_comments_per_issue":2.2413793103448274,"past_year_avg_comments_per_pull_request":1.1894736842105262,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":46,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/issues","maintainers":[{"login":"aucampia","count":132,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aucampia"},{"login":"nicholascar","count":54,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"},{"login":"gjhiggins","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gjhiggins"},{"login":"gromgull","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gromgull"},{"login":"joernhees","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joernhees"},{"login":"niklasl","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/niklasl"},{"login":"edsu","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/edsu"}],"active_maintainers":[{"login":"nicholascar","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/rdflib/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/rdflib/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/rdflib/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/rdflib/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/rdflib/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/rdflib/codemeta","maintainers":[],"registry":{"name":"ubuntu-20.04","url":"https://launchpad.net/ubuntu/focal","ecosystem":"ubuntu","default":false,"packages_count":30789,"maintainers_count":0,"namespaces_count":4,"keywords_count":1429,"github":"ubuntu","metadata":{"codename":"focal","funded_packages_count":732},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:47.233Z","updated_at":"2026-08-22T05:05:46.544Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/namespaces"}},{"id":13465993,"name":"rdflib","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/RDFLib/rdflib","licenses":"bsd-3-clause","normalized_licenses":[],"repository_url":"https://github.com/RDFLib/rdflib","keywords_array":["universe/python"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-09T15:43:19.574Z","latest_release_published_at":"2026-02-09T15:43:19.574Z","latest_release_number":"7.0.0-1","last_synced_at":"2026-03-09T16:06:27.613Z","created_at":"2026-02-09T15:43:19.285Z","updated_at":"2026-08-17T10:37:09.667Z","registry_url":"https://launchpad.net/ubuntu/+source/rdflib","install_command":"apt-get install rdflib","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"python3-rdflib, python-rdflib-doc, python-rdflib-tools","standards_version":"4.6.2","maintainer":"Debian Python Team \u003cteam+python@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-sequence-python3, python3-all, pybuild-plugin-pyproject, python3-poetry-core, python3-sphinx-autodoc-typehints \u003c!nodoc\u003e, python3-myst-parser \u003c!nodoc\u003e, python3-doc \u003c!nodoc\u003e, python3-sphinx \u003c!nodoc\u003e, python3-sphinxcontrib.apidoc \u003c!nodoc\u003e, python3-isodate \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-pyparsing \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-lxml \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-networkx \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-html5lib \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-sparqlwrapper \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-pip \u003c!nocheck\u003e, python3-pytest \u003c!nocheck\u003e, python3-pytest-cov \u003c!nocheck\u003e, python3-bsddb3 \u003c!nocheck\u003e","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":2377038,"uuid":"3342046","full_name":"RDFLib/rdflib","owner":"RDFLib","description":"RDFLib is a Python library for working with RDF, a simple yet powerful language for representing information.","archived":false,"fork":false,"pushed_at":"2026-08-05T05:44:39.000Z","size":23872,"stargazers_count":2486,"open_issues_count":376,"forks_count":599,"subscribers_count":77,"default_branch":"main","last_synced_at":"2026-08-09T11:25:24.343Z","etag":null,"topics":["graph","json-ld","linked-data","n3","namespace","nquads","ntriples","parser","pypi","python","python-library","rdf","rdf-xml","rdflib","semantic-web","serializer","sparql","turtle","turtle-rdf","uri"],"latest_commit_sha":null,"homepage":"https://rdflib.readthedocs.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RDFLib.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"docs/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"docs/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":"CODEOWNERS","security":"docs/security_considerations.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2012-02-03T05:49:13.000Z","updated_at":"2026-08-05T20:27:34.000Z","dependencies_parsed_at":"2023-01-16T18:31:12.523Z","dependency_job_id":"0230eed4-02cd-49b4-bbec-beb2992371e7","html_url":"https://github.com/RDFLib/rdflib","commit_stats":{"total_commits":4206,"total_committers":192,"mean_commits":21.90625,"dds":0.7998097955301949,"last_synced_commit":"0ecc40009ae397c2798c0c08a2d751a1a9d2f8a7"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/RDFLib/rdflib","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/sbom","scorecard":{"id":116529,"data":{"date":"2025-08-11","repo":{"name":"github.com/RDFLib/rdflib","commit":"7a1023fa6f9ed059d104a8f924b50eb32d46a1e7"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":10,"reason":"14 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":8,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:36","Info: jobLevel 'packages' permission set to 'read': .github/workflows/docker-images.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:62","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test-report.yml:11","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/test-report.yml:12","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:121","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:156","Warn: no topLevel permission defined: .github/workflows/docker-images.yaml:1","Warn: no topLevel permission defined: .github/workflows/test-report.yml:1","Warn: no topLevel permission defined: .github/workflows/validate.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":6,"reason":"Found 13/21 approved changesets -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 7.1.4 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/114718987","Warn: release artifact 7.1.4 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/114718987"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile.devcontainer:1: pin your Docker image by updating mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04 to mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04@sha256:e57fdff274ed0bac0776490fa2644c242491bb21d4df7ad0bb79b433eac5168d","Warn: pipCommand not pinned by hash: Dockerfile.devcontainer:46-52","Warn: pipCommand not pinned by hash: docker/latest/Dockerfile:5-7","Warn: pipCommand not pinned by hash: docker/unstable/Dockerfile:6-7","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:49","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:74","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:78","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:145","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned","Info:   2 out of   3 containerImage dependencies pinned","Info:   1 out of   8 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-images.yaml:14"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-16T01:25:56.449Z","repository_id":2377038,"created_at":"2025-08-16T01:25:56.449Z","updated_at":"2025-08-16T01:25:56.449Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36460895,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"RDFLib","name":"RDFlib","uuid":"1401847","kind":"organization","description":"RDFlib, the GitHub organization, is a volunteer-maintained collection of Python tools for working with RDF data.","email":null,"website":"https://rdflib.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1401847?v=4","repositories_count":38,"last_synced_at":"2025-06-18T07:02:14.861Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/RDFLib","funding_links":[],"total_stars":4045,"followers":159,"following":0,"created_at":"2022-11-02T21:14:04.590Z","updated_at":"2025-06-18T07:02:14.861Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-17T10:37:09.667Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/rdflib?arch=source\u0026distro=ubuntu-24.10\u0026repository_url=https://launchpad.net/ubuntu/oracular","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/rdflib","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/rdflib","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/rdflib/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-16T10:02:32.044Z","issues_count":282,"pull_requests_count":1063,"avg_time_to_close_issue":23665147.85714286,"avg_time_to_close_pull_request":1651532.8202115158,"issues_closed_count":84,"pull_requests_closed_count":851,"pull_request_authors_count":86,"issue_authors_count":154,"avg_comments_per_issue":2.7375886524822697,"avg_comments_per_pull_request":1.4694261523988712,"merged_pull_requests_count":623,"bot_issues_count":6,"bot_pull_requests_count":610,"past_year_issues_count":29,"past_year_pull_requests_count":95,"past_year_avg_time_to_close_issue":1062619.3333333333,"past_year_avg_time_to_close_pull_request":914978.9583333334,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":48,"past_year_pull_request_authors_count":22,"past_year_issue_authors_count":21,"past_year_avg_comments_per_issue":2.2413793103448274,"past_year_avg_comments_per_pull_request":1.1894736842105262,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":46,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/issues","maintainers":[{"login":"aucampia","count":132,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aucampia"},{"login":"nicholascar","count":54,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"},{"login":"gjhiggins","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gjhiggins"},{"login":"gromgull","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gromgull"},{"login":"joernhees","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joernhees"},{"login":"niklasl","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/niklasl"},{"login":"edsu","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/edsu"}],"active_maintainers":[{"login":"nicholascar","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/rdflib/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/rdflib/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/rdflib/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/rdflib/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/rdflib/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/rdflib/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.10","url":"https://launchpad.net/ubuntu/oracular","ecosystem":"ubuntu","default":false,"packages_count":38437,"maintainers_count":0,"namespaces_count":4,"keywords_count":1440,"github":"ubuntu","metadata":{"codename":"oracular","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":1278},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.028Z","updated_at":"2026-08-22T05:04:50.434Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/namespaces"}},{"id":13565558,"name":"rdflib","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/RDFLib/rdflib","licenses":"bsd-3-clause","normalized_licenses":[],"repository_url":"https://github.com/RDFLib/rdflib","keywords_array":["universe/python"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-11T06:27:43.412Z","latest_release_published_at":"2026-02-11T06:27:43.412Z","latest_release_number":"6.1.1-1","last_synced_at":"2026-03-11T14:09:16.990Z","created_at":"2026-02-11T06:27:43.239Z","updated_at":"2026-08-17T10:37:09.714Z","registry_url":"https://launchpad.net/ubuntu/+source/rdflib","install_command":"apt-get install rdflib","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"python3-rdflib, python-rdflib-doc, python-rdflib-tools","standards_version":"4.6.0","maintainer":"Debian Python Team \u003cteam+python@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-python, python3-all, python3-setuptools, python3-pkg-resources, python3-lib2to3, python3-sphinx \u003c!nodoc\u003e, python3-sphinxcontrib.apidoc \u003c!nodoc\u003e, python3-isodate \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-pyparsing \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-networkx \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-html5lib \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-sparqlwrapper \u003c!nocheck\u003e \u003c!nodoc\u003e, 2to3 \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-pytest \u003c!nocheck\u003e, python3-pytest-subtests \u003c!nocheck\u003e, python3-bsddb3 \u003c!nocheck\u003e, python3-rdflib-jsonld \u003c!nocheck\u003e","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":2377038,"uuid":"3342046","full_name":"RDFLib/rdflib","owner":"RDFLib","description":"RDFLib is a Python library for working with RDF, a simple yet powerful language for representing information.","archived":false,"fork":false,"pushed_at":"2026-08-05T05:44:39.000Z","size":23872,"stargazers_count":2486,"open_issues_count":376,"forks_count":599,"subscribers_count":77,"default_branch":"main","last_synced_at":"2026-08-09T11:25:24.343Z","etag":null,"topics":["graph","json-ld","linked-data","n3","namespace","nquads","ntriples","parser","pypi","python","python-library","rdf","rdf-xml","rdflib","semantic-web","serializer","sparql","turtle","turtle-rdf","uri"],"latest_commit_sha":null,"homepage":"https://rdflib.readthedocs.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RDFLib.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"docs/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"docs/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":"CODEOWNERS","security":"docs/security_considerations.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2012-02-03T05:49:13.000Z","updated_at":"2026-08-05T20:27:34.000Z","dependencies_parsed_at":"2023-01-16T18:31:12.523Z","dependency_job_id":"0230eed4-02cd-49b4-bbec-beb2992371e7","html_url":"https://github.com/RDFLib/rdflib","commit_stats":{"total_commits":4206,"total_committers":192,"mean_commits":21.90625,"dds":0.7998097955301949,"last_synced_commit":"0ecc40009ae397c2798c0c08a2d751a1a9d2f8a7"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/RDFLib/rdflib","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/sbom","scorecard":{"id":116529,"data":{"date":"2025-08-11","repo":{"name":"github.com/RDFLib/rdflib","commit":"7a1023fa6f9ed059d104a8f924b50eb32d46a1e7"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":10,"reason":"14 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":8,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:36","Info: jobLevel 'packages' permission set to 'read': .github/workflows/docker-images.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:62","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test-report.yml:11","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/test-report.yml:12","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:121","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:156","Warn: no topLevel permission defined: .github/workflows/docker-images.yaml:1","Warn: no topLevel permission defined: .github/workflows/test-report.yml:1","Warn: no topLevel permission defined: .github/workflows/validate.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":6,"reason":"Found 13/21 approved changesets -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 7.1.4 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/114718987","Warn: release artifact 7.1.4 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/114718987"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile.devcontainer:1: pin your Docker image by updating mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04 to mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04@sha256:e57fdff274ed0bac0776490fa2644c242491bb21d4df7ad0bb79b433eac5168d","Warn: pipCommand not pinned by hash: Dockerfile.devcontainer:46-52","Warn: pipCommand not pinned by hash: docker/latest/Dockerfile:5-7","Warn: pipCommand not pinned by hash: docker/unstable/Dockerfile:6-7","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:49","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:74","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:78","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:145","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned","Info:   2 out of   3 containerImage dependencies pinned","Info:   1 out of   8 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-images.yaml:14"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-16T01:25:56.449Z","repository_id":2377038,"created_at":"2025-08-16T01:25:56.449Z","updated_at":"2025-08-16T01:25:56.449Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36460895,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"RDFLib","name":"RDFlib","uuid":"1401847","kind":"organization","description":"RDFlib, the GitHub organization, is a volunteer-maintained collection of Python tools for working with RDF data.","email":null,"website":"https://rdflib.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1401847?v=4","repositories_count":38,"last_synced_at":"2025-06-18T07:02:14.861Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/RDFLib","funding_links":[],"total_stars":4045,"followers":159,"following":0,"created_at":"2022-11-02T21:14:04.590Z","updated_at":"2025-06-18T07:02:14.861Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-17T10:37:09.714Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/rdflib?arch=source\u0026distro=ubuntu-23.04\u0026repository_url=https://launchpad.net/ubuntu/lunar","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/rdflib","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/rdflib","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/rdflib/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-16T10:02:32.044Z","issues_count":282,"pull_requests_count":1063,"avg_time_to_close_issue":23665147.85714286,"avg_time_to_close_pull_request":1651532.8202115158,"issues_closed_count":84,"pull_requests_closed_count":851,"pull_request_authors_count":86,"issue_authors_count":154,"avg_comments_per_issue":2.7375886524822697,"avg_comments_per_pull_request":1.4694261523988712,"merged_pull_requests_count":623,"bot_issues_count":6,"bot_pull_requests_count":610,"past_year_issues_count":29,"past_year_pull_requests_count":95,"past_year_avg_time_to_close_issue":1062619.3333333333,"past_year_avg_time_to_close_pull_request":914978.9583333334,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":48,"past_year_pull_request_authors_count":22,"past_year_issue_authors_count":21,"past_year_avg_comments_per_issue":2.2413793103448274,"past_year_avg_comments_per_pull_request":1.1894736842105262,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":46,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/issues","maintainers":[{"login":"aucampia","count":132,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aucampia"},{"login":"nicholascar","count":54,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"},{"login":"gjhiggins","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gjhiggins"},{"login":"gromgull","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gromgull"},{"login":"joernhees","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joernhees"},{"login":"niklasl","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/niklasl"},{"login":"edsu","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/edsu"}],"active_maintainers":[{"login":"nicholascar","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/rdflib/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/rdflib/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/rdflib/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/rdflib/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/rdflib/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/rdflib/codemeta","maintainers":[],"registry":{"name":"ubuntu-23.04","url":"https://launchpad.net/ubuntu/lunar","ecosystem":"ubuntu","default":false,"packages_count":36116,"maintainers_count":0,"namespaces_count":4,"keywords_count":1000,"github":"ubuntu","metadata":{"codename":"lunar","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":1073},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:49.117Z","updated_at":"2026-08-22T05:05:45.471Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/namespaces"}},{"id":13405889,"name":"rdflib","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/RDFLib/rdflib","licenses":"bsd-3-clause","normalized_licenses":[],"repository_url":"https://github.com/RDFLib/rdflib","keywords_array":["universe/python"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-06T14:17:26.516Z","latest_release_published_at":"2026-02-06T14:17:26.516Z","latest_release_number":"6.1.1-3","last_synced_at":"2026-03-06T14:25:01.255Z","created_at":"2026-02-06T14:17:26.106Z","updated_at":"2026-08-17T10:37:09.601Z","registry_url":"https://launchpad.net/ubuntu/+source/rdflib","install_command":"apt-get install rdflib","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"python3-rdflib, python-rdflib-doc, python-rdflib-tools","standards_version":"4.6.2","maintainer":"Debian Python Team \u003cteam+python@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-sequence-python3, python3-all, python3-setuptools, python3-pkg-resources, python3-lib2to3, python3-doc \u003c!nodoc\u003e, python3-sphinx \u003c!nodoc\u003e, python3-sphinxcontrib.apidoc \u003c!nodoc\u003e, python3-isodate \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-pyparsing \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-networkx \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-html5lib \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-sparqlwrapper \u003c!nocheck\u003e \u003c!nodoc\u003e, 2to3 \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-pytest \u003c!nocheck\u003e, python3-pytest-subtests \u003c!nocheck\u003e, python3-bsddb3 \u003c!nocheck\u003e","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":2377038,"uuid":"3342046","full_name":"RDFLib/rdflib","owner":"RDFLib","description":"RDFLib is a Python library for working with RDF, a simple yet powerful language for representing information.","archived":false,"fork":false,"pushed_at":"2026-08-05T05:44:39.000Z","size":23872,"stargazers_count":2486,"open_issues_count":376,"forks_count":599,"subscribers_count":77,"default_branch":"main","last_synced_at":"2026-08-09T11:25:24.343Z","etag":null,"topics":["graph","json-ld","linked-data","n3","namespace","nquads","ntriples","parser","pypi","python","python-library","rdf","rdf-xml","rdflib","semantic-web","serializer","sparql","turtle","turtle-rdf","uri"],"latest_commit_sha":null,"homepage":"https://rdflib.readthedocs.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RDFLib.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"docs/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"docs/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":"CODEOWNERS","security":"docs/security_considerations.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2012-02-03T05:49:13.000Z","updated_at":"2026-08-05T20:27:34.000Z","dependencies_parsed_at":"2023-01-16T18:31:12.523Z","dependency_job_id":"0230eed4-02cd-49b4-bbec-beb2992371e7","html_url":"https://github.com/RDFLib/rdflib","commit_stats":{"total_commits":4206,"total_committers":192,"mean_commits":21.90625,"dds":0.7998097955301949,"last_synced_commit":"0ecc40009ae397c2798c0c08a2d751a1a9d2f8a7"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/RDFLib/rdflib","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/sbom","scorecard":{"id":116529,"data":{"date":"2025-08-11","repo":{"name":"github.com/RDFLib/rdflib","commit":"7a1023fa6f9ed059d104a8f924b50eb32d46a1e7"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":10,"reason":"14 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":8,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:36","Info: jobLevel 'packages' permission set to 'read': .github/workflows/docker-images.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:62","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test-report.yml:11","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/test-report.yml:12","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:121","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:156","Warn: no topLevel permission defined: .github/workflows/docker-images.yaml:1","Warn: no topLevel permission defined: .github/workflows/test-report.yml:1","Warn: no topLevel permission defined: .github/workflows/validate.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":6,"reason":"Found 13/21 approved changesets -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 7.1.4 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/114718987","Warn: release artifact 7.1.4 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/114718987"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile.devcontainer:1: pin your Docker image by updating mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04 to mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04@sha256:e57fdff274ed0bac0776490fa2644c242491bb21d4df7ad0bb79b433eac5168d","Warn: pipCommand not pinned by hash: Dockerfile.devcontainer:46-52","Warn: pipCommand not pinned by hash: docker/latest/Dockerfile:5-7","Warn: pipCommand not pinned by hash: docker/unstable/Dockerfile:6-7","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:49","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:74","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:78","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:145","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned","Info:   2 out of   3 containerImage dependencies pinned","Info:   1 out of   8 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-images.yaml:14"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-16T01:25:56.449Z","repository_id":2377038,"created_at":"2025-08-16T01:25:56.449Z","updated_at":"2025-08-16T01:25:56.449Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36460895,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"RDFLib","name":"RDFlib","uuid":"1401847","kind":"organization","description":"RDFlib, the GitHub organization, is a volunteer-maintained collection of Python tools for working with RDF data.","email":null,"website":"https://rdflib.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1401847?v=4","repositories_count":38,"last_synced_at":"2025-06-18T07:02:14.861Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/RDFLib","funding_links":[],"total_stars":4045,"followers":159,"following":0,"created_at":"2022-11-02T21:14:04.590Z","updated_at":"2025-06-18T07:02:14.861Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-17T10:37:09.601Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/rdflib?arch=source\u0026distro=ubuntu-24.04","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/rdflib","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/rdflib","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/rdflib/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-16T10:02:32.044Z","issues_count":282,"pull_requests_count":1063,"avg_time_to_close_issue":23665147.85714286,"avg_time_to_close_pull_request":1651532.8202115158,"issues_closed_count":84,"pull_requests_closed_count":851,"pull_request_authors_count":86,"issue_authors_count":154,"avg_comments_per_issue":2.7375886524822697,"avg_comments_per_pull_request":1.4694261523988712,"merged_pull_requests_count":623,"bot_issues_count":6,"bot_pull_requests_count":610,"past_year_issues_count":29,"past_year_pull_requests_count":95,"past_year_avg_time_to_close_issue":1062619.3333333333,"past_year_avg_time_to_close_pull_request":914978.9583333334,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":48,"past_year_pull_request_authors_count":22,"past_year_issue_authors_count":21,"past_year_avg_comments_per_issue":2.2413793103448274,"past_year_avg_comments_per_pull_request":1.1894736842105262,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":46,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/issues","maintainers":[{"login":"aucampia","count":132,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aucampia"},{"login":"nicholascar","count":54,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"},{"login":"gjhiggins","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gjhiggins"},{"login":"gromgull","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gromgull"},{"login":"joernhees","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joernhees"},{"login":"niklasl","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/niklasl"},{"login":"edsu","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/edsu"}],"active_maintainers":[{"login":"nicholascar","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/rdflib/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/rdflib/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/rdflib/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/rdflib/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/rdflib/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/rdflib/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.04","url":"https://launchpad.net/ubuntu/noble","ecosystem":"ubuntu","default":true,"packages_count":37306,"maintainers_count":0,"namespaces_count":4,"keywords_count":1697,"github":"ubuntu","metadata":{"codename":"noble","funded_packages_count":1210},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:45.928Z","updated_at":"2026-08-22T05:05:42.400Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/namespaces"}},{"id":13803218,"name":"rdflib","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/RDFLib/rdflib","licenses":"bsd-3-clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/RDFLib/rdflib","keywords_array":["universe/python"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-13T18:00:05.725Z","latest_release_published_at":"2026-02-13T18:00:05.725Z","latest_release_number":"6.1.1-2","last_synced_at":"2026-03-13T18:27:01.791Z","created_at":"2026-02-13T18:00:05.509Z","updated_at":"2026-08-17T10:37:09.687Z","registry_url":"https://launchpad.net/ubuntu/+source/rdflib","install_command":"apt-get install rdflib","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"python3-rdflib, python-rdflib-doc, python-rdflib-tools","standards_version":"4.6.2","maintainer":"Debian Python Team \u003cteam+python@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-python, python3-all, python3-setuptools, python3-pkg-resources, python3-lib2to3, python3-doc \u003c!nodoc\u003e, python3-sphinx \u003c!nodoc\u003e, python3-sphinxcontrib.apidoc \u003c!nodoc\u003e, python3-isodate \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-pyparsing \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-networkx \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-html5lib \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-sparqlwrapper \u003c!nocheck\u003e \u003c!nodoc\u003e, 2to3 \u003c!nocheck\u003e \u003c!nodoc\u003e, python3-pytest \u003c!nocheck\u003e, python3-pytest-subtests \u003c!nocheck\u003e, python3-bsddb3 \u003c!nocheck\u003e, python3-rdflib-jsonld \u003c!nocheck\u003e","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":2377038,"uuid":"3342046","full_name":"RDFLib/rdflib","owner":"RDFLib","description":"RDFLib is a Python library for working with RDF, a simple yet powerful language for representing information.","archived":false,"fork":false,"pushed_at":"2026-08-05T05:44:39.000Z","size":23872,"stargazers_count":2486,"open_issues_count":376,"forks_count":599,"subscribers_count":77,"default_branch":"main","last_synced_at":"2026-08-09T11:25:24.343Z","etag":null,"topics":["graph","json-ld","linked-data","n3","namespace","nquads","ntriples","parser","pypi","python","python-library","rdf","rdf-xml","rdflib","semantic-web","serializer","sparql","turtle","turtle-rdf","uri"],"latest_commit_sha":null,"homepage":"https://rdflib.readthedocs.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RDFLib.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"docs/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"docs/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":"CODEOWNERS","security":"docs/security_considerations.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2012-02-03T05:49:13.000Z","updated_at":"2026-08-05T20:27:34.000Z","dependencies_parsed_at":"2023-01-16T18:31:12.523Z","dependency_job_id":"0230eed4-02cd-49b4-bbec-beb2992371e7","html_url":"https://github.com/RDFLib/rdflib","commit_stats":{"total_commits":4206,"total_committers":192,"mean_commits":21.90625,"dds":0.7998097955301949,"last_synced_commit":"0ecc40009ae397c2798c0c08a2d751a1a9d2f8a7"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/RDFLib/rdflib","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/sbom","scorecard":{"id":116529,"data":{"date":"2025-08-11","repo":{"name":"github.com/RDFLib/rdflib","commit":"7a1023fa6f9ed059d104a8f924b50eb32d46a1e7"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":10,"reason":"14 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":8,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:36","Info: jobLevel 'packages' permission set to 'read': .github/workflows/docker-images.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:62","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test-report.yml:11","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/test-report.yml:12","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:121","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:156","Warn: no topLevel permission defined: .github/workflows/docker-images.yaml:1","Warn: no topLevel permission defined: .github/workflows/test-report.yml:1","Warn: no topLevel permission defined: .github/workflows/validate.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":6,"reason":"Found 13/21 approved changesets -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 7.1.4 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/114718987","Warn: release artifact 7.1.4 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/114718987"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile.devcontainer:1: pin your Docker image by updating mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04 to mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04@sha256:e57fdff274ed0bac0776490fa2644c242491bb21d4df7ad0bb79b433eac5168d","Warn: pipCommand not pinned by hash: Dockerfile.devcontainer:46-52","Warn: pipCommand not pinned by hash: docker/latest/Dockerfile:5-7","Warn: pipCommand not pinned by hash: docker/unstable/Dockerfile:6-7","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:49","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:74","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:78","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:145","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned","Info:   2 out of   3 containerImage dependencies pinned","Info:   1 out of   8 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-images.yaml:14"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-16T01:25:56.449Z","repository_id":2377038,"created_at":"2025-08-16T01:25:56.449Z","updated_at":"2025-08-16T01:25:56.449Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36460895,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"RDFLib","name":"RDFlib","uuid":"1401847","kind":"organization","description":"RDFlib, the GitHub organization, is a volunteer-maintained collection of Python tools for working with RDF data.","email":null,"website":"https://rdflib.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1401847?v=4","repositories_count":38,"last_synced_at":"2025-06-18T07:02:14.861Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/RDFLib","funding_links":[],"total_stars":4045,"followers":159,"following":0,"created_at":"2022-11-02T21:14:04.590Z","updated_at":"2025-06-18T07:02:14.861Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-17T10:37:09.687Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":0.5320210148300858,"forks_count":0.2926115581565472,"docker_downloads_count":null,"average":0.20615814324665827},"purl":"pkg:deb/ubuntu/rdflib?arch=source\u0026distro=ubuntu-23.10\u0026repository_url=https://launchpad.net/ubuntu/mantic","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/rdflib","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/rdflib","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/rdflib/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-16T10:02:32.044Z","issues_count":282,"pull_requests_count":1063,"avg_time_to_close_issue":23665147.85714286,"avg_time_to_close_pull_request":1651532.8202115158,"issues_closed_count":84,"pull_requests_closed_count":851,"pull_request_authors_count":86,"issue_authors_count":154,"avg_comments_per_issue":2.7375886524822697,"avg_comments_per_pull_request":1.4694261523988712,"merged_pull_requests_count":623,"bot_issues_count":6,"bot_pull_requests_count":610,"past_year_issues_count":29,"past_year_pull_requests_count":95,"past_year_avg_time_to_close_issue":1062619.3333333333,"past_year_avg_time_to_close_pull_request":914978.9583333334,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":48,"past_year_pull_request_authors_count":22,"past_year_issue_authors_count":21,"past_year_avg_comments_per_issue":2.2413793103448274,"past_year_avg_comments_per_pull_request":1.1894736842105262,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":46,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/issues","maintainers":[{"login":"aucampia","count":132,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aucampia"},{"login":"nicholascar","count":54,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"},{"login":"gjhiggins","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gjhiggins"},{"login":"gromgull","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gromgull"},{"login":"joernhees","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joernhees"},{"login":"niklasl","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/niklasl"},{"login":"edsu","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/edsu"}],"active_maintainers":[{"login":"nicholascar","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/rdflib/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/rdflib/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/rdflib/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/rdflib/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/rdflib/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/rdflib/codemeta","maintainers":[],"registry":{"name":"ubuntu-23.10","url":"https://launchpad.net/ubuntu/mantic","ecosystem":"ubuntu","default":false,"packages_count":36642,"maintainers_count":0,"namespaces_count":4,"keywords_count":2213,"github":"ubuntu","metadata":{"codename":"mantic","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":1308},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.636Z","updated_at":"2026-08-22T05:05:44.018Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/namespaces"}},{"id":12040456,"name":"rdflib-with-orjson","ecosystem":"conda","description":"RDFLib is a pure Python package for working with RDF. RDFLib contains most things you need to work with RDF, including parsers and serializers for RDF/XML, N3, NTriples, N-Quads, Turtle, TriX, Trig and JSON-LD a Graph interface which can be backed by any one of a number of Store implementations store implementations for in-memory, persistent on disk (Berkeley DB) and remote SPARQL endpoints a SPARQL 1.1 implementation - supporting SPARQL 1.1 Queries and Update statements SPARQL function extension mechanisms","homepage":"https://github.com/RDFLib/rdflib","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/RDFLib/rdflib","keywords_array":[],"namespace":null,"versions_count":3,"first_release_published_at":"2025-08-25T19:54:12.000Z","latest_release_published_at":"2026-08-07T13:12:38.000Z","latest_release_number":"7.6.0","last_synced_at":"2026-08-07T15:03:49.026Z","created_at":"2025-08-25T21:18:31.225Z","updated_at":"2026-08-17T10:37:09.668Z","registry_url":"https://anaconda.org/anaconda/rdflib-with-orjson","install_command":"conda install -c anaconda rdflib-with-orjson","documentation_url":null,"metadata":{},"repo_metadata":{"id":2377038,"uuid":"3342046","full_name":"RDFLib/rdflib","owner":"RDFLib","description":"RDFLib is a Python library for working with RDF, a simple yet powerful language for representing information.","archived":false,"fork":false,"pushed_at":"2026-08-05T05:44:39.000Z","size":23872,"stargazers_count":2486,"open_issues_count":376,"forks_count":599,"subscribers_count":77,"default_branch":"main","last_synced_at":"2026-08-09T11:25:24.343Z","etag":null,"topics":["graph","json-ld","linked-data","n3","namespace","nquads","ntriples","parser","pypi","python","python-library","rdf","rdf-xml","rdflib","semantic-web","serializer","sparql","turtle","turtle-rdf","uri"],"latest_commit_sha":null,"homepage":"https://rdflib.readthedocs.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RDFLib.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"docs/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"docs/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":"CODEOWNERS","security":"docs/security_considerations.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2012-02-03T05:49:13.000Z","updated_at":"2026-08-05T20:27:34.000Z","dependencies_parsed_at":"2023-01-16T18:31:12.523Z","dependency_job_id":"0230eed4-02cd-49b4-bbec-beb2992371e7","html_url":"https://github.com/RDFLib/rdflib","commit_stats":{"total_commits":4206,"total_committers":192,"mean_commits":21.90625,"dds":0.7998097955301949,"last_synced_commit":"0ecc40009ae397c2798c0c08a2d751a1a9d2f8a7"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/RDFLib/rdflib","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/sbom","scorecard":{"id":116529,"data":{"date":"2025-08-11","repo":{"name":"github.com/RDFLib/rdflib","commit":"7a1023fa6f9ed059d104a8f924b50eb32d46a1e7"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":10,"reason":"14 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":8,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:36","Info: jobLevel 'packages' permission set to 'read': .github/workflows/docker-images.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:62","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test-report.yml:11","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/test-report.yml:12","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:121","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:156","Warn: no topLevel permission defined: .github/workflows/docker-images.yaml:1","Warn: no topLevel permission defined: .github/workflows/test-report.yml:1","Warn: no topLevel permission defined: .github/workflows/validate.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":6,"reason":"Found 13/21 approved changesets -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 7.1.4 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/114718987","Warn: release artifact 7.1.4 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/114718987"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile.devcontainer:1: pin your Docker image by updating mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04 to mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04@sha256:e57fdff274ed0bac0776490fa2644c242491bb21d4df7ad0bb79b433eac5168d","Warn: pipCommand not pinned by hash: Dockerfile.devcontainer:46-52","Warn: pipCommand not pinned by hash: docker/latest/Dockerfile:5-7","Warn: pipCommand not pinned by hash: docker/unstable/Dockerfile:6-7","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:49","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:74","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:78","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:145","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned","Info:   2 out of   3 containerImage dependencies pinned","Info:   1 out of   8 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-images.yaml:14"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-16T01:25:56.449Z","repository_id":2377038,"created_at":"2025-08-16T01:25:56.449Z","updated_at":"2025-08-16T01:25:56.449Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36460895,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"RDFLib","name":"RDFlib","uuid":"1401847","kind":"organization","description":"RDFlib, the GitHub organization, is a volunteer-maintained collection of Python tools for working with RDF data.","email":null,"website":"https://rdflib.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1401847?v=4","repositories_count":38,"last_synced_at":"2025-06-18T07:02:14.861Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/RDFLib","funding_links":[],"total_stars":4045,"followers":159,"following":0,"created_at":"2022-11-02T21:14:04.590Z","updated_at":"2025-06-18T07:02:14.861Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-17T10:37:09.668Z","dependent_packages_count":0,"downloads":858,"downloads_period":"total","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":46.4861078683166,"dependent_packages_count":42.2834461825823,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":44.38477702544945},"purl":"pkg:conda/rdflib-with-orjson","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/conda/rdflib-with-orjson","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/conda/rdflib-with-orjson","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/conda/rdflib-with-orjson/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-16T10:02:32.044Z","issues_count":282,"pull_requests_count":1063,"avg_time_to_close_issue":23665147.85714286,"avg_time_to_close_pull_request":1651532.8202115158,"issues_closed_count":84,"pull_requests_closed_count":851,"pull_request_authors_count":86,"issue_authors_count":154,"avg_comments_per_issue":2.7375886524822697,"avg_comments_per_pull_request":1.4694261523988712,"merged_pull_requests_count":623,"bot_issues_count":6,"bot_pull_requests_count":610,"past_year_issues_count":29,"past_year_pull_requests_count":95,"past_year_avg_time_to_close_issue":1062619.3333333333,"past_year_avg_time_to_close_pull_request":914978.9583333334,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":48,"past_year_pull_request_authors_count":22,"past_year_issue_authors_count":21,"past_year_avg_comments_per_issue":2.2413793103448274,"past_year_avg_comments_per_pull_request":1.1894736842105262,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":46,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/issues","maintainers":[{"login":"aucampia","count":132,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aucampia"},{"login":"nicholascar","count":54,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"},{"login":"gjhiggins","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gjhiggins"},{"login":"gromgull","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gromgull"},{"login":"joernhees","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joernhees"},{"login":"niklasl","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/niklasl"},{"login":"edsu","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/edsu"}],"active_maintainers":[{"login":"nicholascar","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib-with-orjson/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib-with-orjson/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib-with-orjson/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib-with-orjson/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib-with-orjson/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib-with-orjson/codemeta","maintainers":[],"registry":{"name":"anaconda.org","url":"https://anaconda.org","ecosystem":"conda","default":true,"packages_count":5475,"maintainers_count":0,"namespaces_count":0,"keywords_count":3313,"github":"Anaconda","metadata":{"kind":"anaconda","key":"Main","api":"https://repo.ananconda.com","funded_packages_count":850},"icon_url":"https://github.com/Anaconda.png","created_at":"2022-10-03T15:37:08.736Z","updated_at":"2026-08-22T05:06:01.727Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/namespaces"}},{"id":12040457,"name":"rdflib-with-lxml","ecosystem":"conda","description":"RDFLib is a pure Python package for working with RDF. RDFLib contains most things you need to work with RDF, including parsers and serializers for RDF/XML, N3, NTriples, N-Quads, Turtle, TriX, Trig and JSON-LD a Graph interface which can be backed by any one of a number of Store implementations store implementations for in-memory, persistent on disk (Berkeley DB) and remote SPARQL endpoints a SPARQL 1.1 implementation - supporting SPARQL 1.1 Queries and Update statements SPARQL function extension mechanisms","homepage":"https://github.com/RDFLib/rdflib","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/RDFLib/rdflib","keywords_array":[],"namespace":null,"versions_count":3,"first_release_published_at":"2025-08-25T19:54:00.000Z","latest_release_published_at":"2026-08-07T13:12:28.000Z","latest_release_number":"7.6.0","last_synced_at":"2026-08-07T15:03:47.757Z","created_at":"2025-08-25T21:18:31.237Z","updated_at":"2026-08-17T10:37:09.539Z","registry_url":"https://anaconda.org/anaconda/rdflib-with-lxml","install_command":"conda install -c anaconda rdflib-with-lxml","documentation_url":null,"metadata":{},"repo_metadata":{"id":2377038,"uuid":"3342046","full_name":"RDFLib/rdflib","owner":"RDFLib","description":"RDFLib is a Python library for working with RDF, a simple yet powerful language for representing information.","archived":false,"fork":false,"pushed_at":"2026-08-05T05:44:39.000Z","size":23872,"stargazers_count":2486,"open_issues_count":376,"forks_count":599,"subscribers_count":77,"default_branch":"main","last_synced_at":"2026-08-09T11:25:24.343Z","etag":null,"topics":["graph","json-ld","linked-data","n3","namespace","nquads","ntriples","parser","pypi","python","python-library","rdf","rdf-xml","rdflib","semantic-web","serializer","sparql","turtle","turtle-rdf","uri"],"latest_commit_sha":null,"homepage":"https://rdflib.readthedocs.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RDFLib.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"docs/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"docs/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":"CODEOWNERS","security":"docs/security_considerations.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2012-02-03T05:49:13.000Z","updated_at":"2026-08-05T20:27:34.000Z","dependencies_parsed_at":"2023-01-16T18:31:12.523Z","dependency_job_id":"0230eed4-02cd-49b4-bbec-beb2992371e7","html_url":"https://github.com/RDFLib/rdflib","commit_stats":{"total_commits":4206,"total_committers":192,"mean_commits":21.90625,"dds":0.7998097955301949,"last_synced_commit":"0ecc40009ae397c2798c0c08a2d751a1a9d2f8a7"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/RDFLib/rdflib","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/sbom","scorecard":{"id":116529,"data":{"date":"2025-08-11","repo":{"name":"github.com/RDFLib/rdflib","commit":"7a1023fa6f9ed059d104a8f924b50eb32d46a1e7"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":10,"reason":"14 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":8,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:36","Info: jobLevel 'packages' permission set to 'read': .github/workflows/docker-images.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:62","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test-report.yml:11","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/test-report.yml:12","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:121","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:156","Warn: no topLevel permission defined: .github/workflows/docker-images.yaml:1","Warn: no topLevel permission defined: .github/workflows/test-report.yml:1","Warn: no topLevel permission defined: .github/workflows/validate.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":6,"reason":"Found 13/21 approved changesets -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 7.1.4 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/114718987","Warn: release artifact 7.1.4 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/114718987"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile.devcontainer:1: pin your Docker image by updating mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04 to mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04@sha256:e57fdff274ed0bac0776490fa2644c242491bb21d4df7ad0bb79b433eac5168d","Warn: pipCommand not pinned by hash: Dockerfile.devcontainer:46-52","Warn: pipCommand not pinned by hash: docker/latest/Dockerfile:5-7","Warn: pipCommand not pinned by hash: docker/unstable/Dockerfile:6-7","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:49","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:74","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:78","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:145","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned","Info:   2 out of   3 containerImage dependencies pinned","Info:   1 out of   8 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-images.yaml:14"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-16T01:25:56.449Z","repository_id":2377038,"created_at":"2025-08-16T01:25:56.449Z","updated_at":"2025-08-16T01:25:56.449Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36460895,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"RDFLib","name":"RDFlib","uuid":"1401847","kind":"organization","description":"RDFlib, the GitHub organization, is a volunteer-maintained collection of Python tools for working with RDF data.","email":null,"website":"https://rdflib.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1401847?v=4","repositories_count":38,"last_synced_at":"2025-06-18T07:02:14.861Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/RDFLib","funding_links":[],"total_stars":4045,"followers":159,"following":0,"created_at":"2022-11-02T21:14:04.590Z","updated_at":"2025-06-18T07:02:14.861Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-17T10:37:09.539Z","dependent_packages_count":0,"downloads":927,"downloads_period":"total","dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":46.4861078683166,"dependent_packages_count":42.2834461825823,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":44.38477702544945},"purl":"pkg:conda/rdflib-with-lxml","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/conda/rdflib-with-lxml","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/conda/rdflib-with-lxml","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/conda/rdflib-with-lxml/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-16T10:02:32.044Z","issues_count":282,"pull_requests_count":1063,"avg_time_to_close_issue":23665147.85714286,"avg_time_to_close_pull_request":1651532.8202115158,"issues_closed_count":84,"pull_requests_closed_count":851,"pull_request_authors_count":86,"issue_authors_count":154,"avg_comments_per_issue":2.7375886524822697,"avg_comments_per_pull_request":1.4694261523988712,"merged_pull_requests_count":623,"bot_issues_count":6,"bot_pull_requests_count":610,"past_year_issues_count":29,"past_year_pull_requests_count":95,"past_year_avg_time_to_close_issue":1062619.3333333333,"past_year_avg_time_to_close_pull_request":914978.9583333334,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":48,"past_year_pull_request_authors_count":22,"past_year_issue_authors_count":21,"past_year_avg_comments_per_issue":2.2413793103448274,"past_year_avg_comments_per_pull_request":1.1894736842105262,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":46,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/issues","maintainers":[{"login":"aucampia","count":132,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aucampia"},{"login":"nicholascar","count":54,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"},{"login":"gjhiggins","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gjhiggins"},{"login":"gromgull","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gromgull"},{"login":"joernhees","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joernhees"},{"login":"niklasl","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/niklasl"},{"login":"edsu","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/edsu"}],"active_maintainers":[{"login":"nicholascar","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib-with-lxml/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib-with-lxml/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib-with-lxml/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib-with-lxml/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib-with-lxml/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages/rdflib-with-lxml/codemeta","maintainers":[],"registry":{"name":"anaconda.org","url":"https://anaconda.org","ecosystem":"conda","default":true,"packages_count":5475,"maintainers_count":0,"namespaces_count":0,"keywords_count":3313,"github":"Anaconda","metadata":{"kind":"anaconda","key":"Main","api":"https://repo.ananconda.com","funded_packages_count":850},"icon_url":"https://github.com/Anaconda.png","created_at":"2022-10-03T15:37:08.736Z","updated_at":"2026-08-22T05:06:01.727Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/anaconda.org/namespaces"}},{"id":5292959,"name":"rdflib","ecosystem":"conda","description":null,"homepage":"https://pypi.org/project/rdflib","licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":"https://github.com/RDFLib/rdflib","keywords_array":[],"namespace":null,"versions_count":7,"first_release_published_at":"2022-10-03T15:54:21.892Z","latest_release_published_at":"2022-07-27T16:00:31.000Z","latest_release_number":"6.2.0","last_synced_at":"2026-03-24T09:08:08.827Z","created_at":"2022-10-03T15:54:21.879Z","updated_at":"2026-08-17T10:37:09.603Z","registry_url":"https://anaconda.org/conda-forge/rdflib","install_command":"conda install -c conda-forge rdflib","documentation_url":null,"metadata":{},"repo_metadata":{"id":2377038,"uuid":"3342046","full_name":"RDFLib/rdflib","owner":"RDFLib","description":"RDFLib is a Python library for working with RDF, a simple yet powerful language for representing information.","archived":false,"fork":false,"pushed_at":"2026-08-05T05:44:39.000Z","size":23872,"stargazers_count":2486,"open_issues_count":376,"forks_count":599,"subscribers_count":77,"default_branch":"main","last_synced_at":"2026-08-09T11:25:24.343Z","etag":null,"topics":["graph","json-ld","linked-data","n3","namespace","nquads","ntriples","parser","pypi","python","python-library","rdf","rdf-xml","rdflib","semantic-web","serializer","sparql","turtle","turtle-rdf","uri"],"latest_commit_sha":null,"homepage":"https://rdflib.readthedocs.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/RDFLib.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"docs/CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"docs/CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":"CODEOWNERS","security":"docs/security_considerations.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2012-02-03T05:49:13.000Z","updated_at":"2026-08-05T20:27:34.000Z","dependencies_parsed_at":"2023-01-16T18:31:12.523Z","dependency_job_id":"0230eed4-02cd-49b4-bbec-beb2992371e7","html_url":"https://github.com/RDFLib/rdflib","commit_stats":{"total_commits":4206,"total_committers":192,"mean_commits":21.90625,"dds":0.7998097955301949,"last_synced_commit":"0ecc40009ae397c2798c0c08a2d751a1a9d2f8a7"},"previous_names":[],"tags_count":44,"template":false,"template_full_name":null,"purl":"pkg:github/RDFLib/rdflib","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","download_url":"https://codeload.github.com/RDFLib/rdflib/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/sbom","scorecard":{"id":116529,"data":{"date":"2025-08-11","repo":{"name":"github.com/RDFLib/rdflib","commit":"7a1023fa6f9ed059d104a8f924b50eb32d46a1e7"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.2,"checks":[{"name":"Maintained","score":10,"reason":"14 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Token-Permissions","score":8,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:16","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:36","Info: jobLevel 'packages' permission set to 'read': .github/workflows/docker-images.yaml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docker-images.yaml:62","Warn: jobLevel 'checks' permission set to 'write': .github/workflows/test-report.yml:11","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/test-report.yml:12","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:23","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:121","Info: jobLevel 'contents' permission set to 'read': .github/workflows/validate.yaml:156","Warn: no topLevel permission defined: .github/workflows/docker-images.yaml:1","Warn: no topLevel permission defined: .github/workflows/test-report.yml:1","Warn: no topLevel permission defined: .github/workflows/validate.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":6,"reason":"Found 13/21 approved changesets -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: BSD 3-Clause \"New\" or \"Revised\" License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"CII-Best-Practices","score":2,"reason":"badge detected: InProgress","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact 7.1.4 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 not signed: https://api.github.com/repos/RDFLib/rdflib/releases/114718987","Warn: release artifact 7.1.4 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/209120034","Warn: release artifact 7.1.3 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/195444732","Warn: release artifact 7.0.0 does not have provenance: https://api.github.com/repos/RDFLib/rdflib/releases/114718987"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-images.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/docker-images.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-report.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/test-report.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yaml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yaml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/RDFLib/rdflib/validate.yaml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile.devcontainer:1: pin your Docker image by updating mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04 to mcr.microsoft.com/vscode/devcontainers/base:ubuntu-22.04@sha256:e57fdff274ed0bac0776490fa2644c242491bb21d4df7ad0bb79b433eac5168d","Warn: pipCommand not pinned by hash: Dockerfile.devcontainer:46-52","Warn: pipCommand not pinned by hash: docker/latest/Dockerfile:5-7","Warn: pipCommand not pinned by hash: docker/unstable/Dockerfile:6-7","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:49","Warn: pipCommand not pinned by hash: .github/workflows/docker-images.yaml:74","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:78","Warn: pipCommand not pinned by hash: .github/workflows/validate.yaml:145","Info:   0 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   8 third-party GitHubAction dependencies pinned","Info:   2 out of   3 containerImage dependencies pinned","Info:   1 out of   8 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":6,"reason":"4 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf","Warn: Project is vulnerable to: GHSA-48p4-8xcf-vxj5","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/docker-images.yaml:14"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 28 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-16T01:25:56.449Z","repository_id":2377038,"created_at":"2025-08-16T01:25:56.449Z","updated_at":"2025-08-16T01:25:56.449Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36460895,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"RDFLib","name":"RDFlib","uuid":"1401847","kind":"organization","description":"RDFlib, the GitHub organization, is a volunteer-maintained collection of Python tools for working with RDF data.","email":null,"website":"https://rdflib.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/1401847?v=4","repositories_count":38,"last_synced_at":"2025-06-18T07:02:14.861Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/RDFLib","funding_links":[],"total_stars":4045,"followers":159,"following":0,"created_at":"2022-11-02T21:14:04.590Z","updated_at":"2025-06-18T07:02:14.861Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/RDFLib/repositories"},"tags":[]},"repo_metadata_updated_at":"2026-08-17T10:37:09.603Z","dependent_packages_count":20,"downloads":1299733,"downloads_period":"total","dependent_repos_count":15,"rankings":{"downloads":null,"dependent_repos_count":9.16712410798942,"dependent_packages_count":3.198762413294077,"stargazers_count":9.16712410798942,"forks_count":7.28080243525126,"docker_downloads_count":null,"average":7.203453266131044},"purl":"pkg:conda/rdflib?repository_url=https://conda-forge.org","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/conda/rdflib","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/conda/rdflib","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/conda/rdflib/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-16T10:02:32.044Z","issues_count":282,"pull_requests_count":1063,"avg_time_to_close_issue":23665147.85714286,"avg_time_to_close_pull_request":1651532.8202115158,"issues_closed_count":84,"pull_requests_closed_count":851,"pull_request_authors_count":86,"issue_authors_count":154,"avg_comments_per_issue":2.7375886524822697,"avg_comments_per_pull_request":1.4694261523988712,"merged_pull_requests_count":623,"bot_issues_count":6,"bot_pull_requests_count":610,"past_year_issues_count":29,"past_year_pull_requests_count":95,"past_year_avg_time_to_close_issue":1062619.3333333333,"past_year_avg_time_to_close_pull_request":914978.9583333334,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":48,"past_year_pull_request_authors_count":22,"past_year_issue_authors_count":21,"past_year_avg_comments_per_issue":2.2413793103448274,"past_year_avg_comments_per_pull_request":1.1894736842105262,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":46,"past_year_merged_pull_requests_count":32,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/issues","maintainers":[{"login":"aucampia","count":132,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aucampia"},{"login":"nicholascar","count":54,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"},{"login":"gjhiggins","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gjhiggins"},{"login":"gromgull","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gromgull"},{"login":"joernhees","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joernhees"},{"login":"niklasl","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/niklasl"},{"login":"edsu","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/edsu"}],"active_maintainers":[{"login":"nicholascar","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"},{"login":"white-gecko","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages/rdflib/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages/rdflib/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages/rdflib/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages/rdflib/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages/rdflib/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages/rdflib/codemeta","maintainers":[],"registry":{"name":"conda-forge.org","url":"https://conda-forge.org","ecosystem":"conda","default":false,"packages_count":20636,"maintainers_count":0,"namespaces_count":0,"keywords_count":13549,"github":"conda-forge","metadata":{"kind":"conda-forge","key":"CondaForge","api":"https://conda.anaconda.org","funded_packages_count":2347},"icon_url":"https://github.com/conda-forge.png","created_at":"2022-10-03T15:37:08.743Z","updated_at":"2026-08-22T05:06:05.781Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/conda-forge.org/namespaces"}}],"commits":{"id":6922,"full_name":"RDFLib/rdflib","default_branch":"main","total_commits":4403,"total_committers":207,"total_bot_commits":318,"total_bot_committers":3,"mean_commits":21.270531400966185,"dds":0.8087667499432205,"past_year_total_commits":78,"past_year_total_committers":16,"past_year_total_bot_commits":13,"past_year_total_bot_committers":1,"past_year_mean_commits":4.875,"past_year_dds":0.47435897435897434,"last_synced_at":"2026-08-25T14:42:03.040Z","last_synced_commit":"2dc7bc5ec4593e0659c40834adfc5b5f022b07e2","created_at":"2023-03-07T09:44:06.341Z","updated_at":"2026-08-25T14:41:52.808Z","committers":[{"name":"Daniel Krech","email":"eikeon@eikeon.com","login":"eikeon","count":842},{"name":"Gunnar Aastrand Grimnes","email":"gromgull@gmail.com","login":"gromgull","count":493},{"name":"Chimezie Ogbuji","email":"devnull@localhost","login":null,"count":364},{"name":"Iwan Aucamp","email":"aucampia@gmail.com","login":"aucampia","count":354},{"name":"Graham Higgins","email":"gjh@bel-epa.com","login":"gjhiggins","count":338},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":280},{"name":"Nicholas Car","email":"nicholas.car@surroundaustralia.com","login":"nicholascar","count":269},{"name":"Jörn Hees","email":"dev@joernhees.de","login":"joernhees","count":234},{"name":"Edmond Chuc","email":"edmond.chuc@gmail.com","login":"edmondchuc","count":98},{"name":"Niklas Lindström","email":"lindstream@gmail.com","login":"niklasl","count":90},{"name":"Ashley Sommer","email":"ashleysommer@gmail.com","login":"ashleysommer","count":69},{"name":"Natanael Arndt","email":"arndtn@gmail.com","login":"white-gecko","count":63},{"name":"Alex Nelson","email":"alexander.nelson@nist.gov","login":"ajnelson-nist","count":42},{"name":"Ivan Herman","email":"ivan@ivan-herman.net","login":"iherman","count":41},{"name":"Michel Pelletier","email":"michel@graphegon.com","login":null,"count":41},{"name":"Jamie McCusker","email":"mccusker@gmail.com","login":"jpmccu","count":33},{"name":"Tom Gillespie","email":"tgbugs@gmail.com","login":"tgbugs","count":30},{"name":"Thomas Kluyver","email":"takowl@gmail.com","login":"takluyver","count":25},{"name":"pre-commit-ci[bot]","email":"66853113+pre-commit-ci[bot]","login":"pre-commit-ci[bot]","count":23},{"name":"Florian Ludwig","email":"f.ludwig@greyrook.com","login":"FlorianLudwig","count":23},{"name":"Pierre-Antoine Champin","email":"pchampin@liris.cnrs.fr","login":"pchampin","count":20},{"name":"Mark Watts","email":"watts.mark2015@gmail.com","login":"mwatts15","count":20},{"name":"Ed Summers","email":"ehs@pobox.com","login":"edsu","count":17},{"name":"Whit Morriss","email":"d.w.morriss@gmail.com","login":null,"count":17},{"name":"Urs Holzer","email":"urs@andonyar.com","login":"uholzer","count":16},{"name":"Drew Perttula","email":"drewp@bigasterisk.com","login":"drewp","count":16},{"name":"dependabot-preview[bot]","email":"27856297+dependabot-preview[bot]","login":"dependabot-preview[bot]","count":15},{"name":"Filip Kovacevic","email":"greenfish427@gmail.com","login":null,"count":14},{"name":"Donny Winston","email":"dwinston@alum.mit.edu","login":"dwinston","count":14},{"name":"Harold Solbrig","email":"solbrig@earthlink.net","login":"hsolbrig","count":13},{"name":"Remi Chateauneu","email":"remi.chateauneu@gmail.com","login":"rchateauneu","count":12},{"name":"WhiteGobo","email":"richi.fechner@web.de","login":"WhiteGobo","count":12},{"name":"Benjamin Cogrel","email":"benjamin.cogrel@bcgl.fr","login":"bcogrel","count":11},{"name":"Wataru Haruna","email":"w10776e8w@yahoo.co.jp","login":"eggplants","count":11},{"name":"Chris Markiewicz","email":"markiewicz@stanford.edu","login":"effigies","count":10},{"name":"Mikael Nilsson","email":"mikaeln@google.com","login":null,"count":10},{"name":"Jerven Bolleman","email":"jerven.bolleman@sib.swiss","login":"JervenBolleman","count":10},{"name":"Veyndan Stuart","email":"veyndan@gmail.com","login":"veyndan","count":10},{"name":"Dan Scott","email":"dan@coffeecode.net","login":"dbs","count":9},{"name":"Łukasz Jancewicz","email":"dzinxed@gmail.com","login":"dzinxed","count":9},{"name":"Olivier Bornet","email":"olivier.bornet@puck.ch","login":"PuckCh","count":8},{"name":"Kushagr Arora","email":"kushagr17062@iiitd.ac.in","login":"kushagr08","count":8},{"name":"Josh Moore","email":"josh@glencoesoftware.com","login":"joshmoore","count":8},{"name":"Gabe Fierro","email":"gtfierro@cs.berkeley.edu","login":"gtfierro","count":8},{"name":"Ben Wallberg","email":"wallberg@umd.edu","login":"wallberg","count":8},{"name":"Olivier Grisel","email":"olivier.grisel@ensta.org","login":"ogrisel","count":7},{"name":"Matt Goldberg","email":"59745812+mgberg","login":"mgberg","count":7},{"name":"Kempei Igarashi","email":"kempe@iga-network.com","login":"kempei","count":7},{"name":"Fredrik Aschehoug","email":"15358786+fredrik-aschehoug","login":"fredrik-aschehoug","count":7},{"name":"Elias Torres","email":"elias@torrez.us","login":"eliast","count":7},{"name":"Arushi Chauhan","email":"arushi16019@iiitd.ac.in","login":"arushi019","count":7},{"name":"Gerhard Weis","email":"gerhard.weis@gmail.com","login":null,"count":7},{"name":"Camille Maumet","email":"c.m.j.maumet@warwick.ac.uk","login":null,"count":7},{"name":"Aayush Gupta","email":"32807623+aayush17002","login":"aayush17002","count":7},{"name":"Anatoly Scherbakov","email":"altaisoft@gmail.com","login":"anatoly-scherbakov","count":6},{"name":"Sean Fern","email":"gsf@gsf.io","login":null,"count":6},{"name":"Stephen Thorne","email":"stephen.thorne@gmail.com","login":null,"count":6},{"name":"Elliot Ford","email":"elliot.ford@astrazeneca.com","login":"EFord36","count":6},{"name":"Thomas Köner-Daikan","email":"hi@wssbck.cc","login":"wssbck","count":6},{"name":"Thomas Tanon","email":"thomaspt@hotmail.fr","login":"Tpt","count":6},{"name":"Boris Pelakh","email":"boris.pelakh@semanticarts.com","login":"sa-bpelakh","count":5},{"name":"Maurizio Nagni","email":"m.nagni@gmail.com","login":"kusamau","count":5},{"name":"Nolan Nichols","email":"nolan.nichols@gmail.com","login":"nicholsn","count":5},{"name":"Thomas Bettler","email":"thomas.bettler@gmail.com","login":"t0b3","count":5},{"name":"Zach Lûster","email":"kerncece@gmail.com","login":"kernc","count":5},{"name":"Bertrand Croq","email":"bertrand.croq@gmail.com","login":"bcroq","count":4},{"name":"Miel Vander Sande","email":"miel.vandersande@meemoo.be","login":"mielvds","count":4},{"name":"Robert Hall","email":"rob@offnetcyber.com","login":"kvjrhall","count":4},{"name":"Shreyas Nagare","email":"shreyasnagare@gmail.com","login":"shreyasnagare","count":4},{"name":"William Waites","email":"ww@styx.org","login":"wwaites","count":4},{"name":"Focke","email":"richardfechner@posteo.net","login":null,"count":4},{"name":"ageorgou","email":"1186102+ageorgou","login":"ageorgou","count":4},{"name":"Jeffrey C. Lerman","email":"jeff@sironamedical.com","login":"jclerman","count":4},{"name":"Jaimie Murdock","email":"jmmurdo@sandia.gov","login":"JaimieMurdock","count":3},{"name":"Bernhard Schandl","email":"bernhard.schandl@gmail.com","login":"besbes","count":3},{"name":"Jon Michaelchuck","email":"jmichaelchuck@tableau.com","login":"jbmchuck","count":3},{"name":"Nate Prewitt","email":"nateprewitt","login":"nateprewitt","count":3},{"name":"Yaroslav Halchenko","email":"debian@onerussian.com","login":"yarikoptic","count":3},{"name":"dymil","email":"30931139+dymil","login":"dymil","count":3},{"name":"Alexander Dutton","email":"alexander.dutton@it.ox.ac.uk","login":"alexdutton","count":3},{"name":"Alejandro Villar","email":"avillar@ogc.org","login":"avillar","count":3},{"name":"Akash Sharma","email":"akashthegreatlegend@gmail.com","login":"Akash-Sharma-1","count":3},{"name":"tiko-tiko","email":"github.com@ticotico.crabdance.com","login":null,"count":3},{"name":"Arnout Engelen","email":"arnout@engelen.eu","login":"raboof","count":3},{"name":"Anubhav Chaudhary","email":"anubhav16013@iiitd.ac.in","login":"achaudhary997","count":2},{"name":"Amade Nemes","email":"nemesamade@gmail.com","login":"namcsi","count":2},{"name":"Artem Revenko","email":"artreven@gmail.com","login":"artreven","count":2},{"name":"Axel Nennker","email":"axel.nennker@telekom.de","login":"AxelNennker","count":2},{"name":"Alessandro Amici","email":"alexamici@gmail.com","login":"alexamici","count":2},{"name":"bovlb","email":"31326650+bovlb","login":"bovlb","count":2},{"name":"Minor Gordon","email":"gordom6@rpi.edu","login":"gordom6","count":2},{"name":"Matthias Urban","email":"42069939+urbanmatthias","login":"urbanmatthias","count":2},{"name":"Benoit Seguin","email":"seg.benoit@gmail.com","login":"SeguinBe","count":2},{"name":"Charles Tapley Hoyt","email":"cthoyt@gmail.com","login":"cthoyt","count":2},{"name":"Christian Clauss","email":"cclauss@me.com","login":"cclauss","count":2},{"name":"Conrad Leonard","email":"conrad.leonard@hotmail.com","login":"delocalizer","count":2},{"name":"Paul Tremberth","email":"paul.tremberth@gmail.com","login":"redapple","count":2},{"name":"Osma Suominen","email":"osma.suominen@aalto.fi","login":null,"count":2},{"name":"Rory McCann","email":"rory@geofabrik.de","login":null,"count":2},{"name":"Cory Dodt","email":"corydodt@gmail.com","login":null,"count":2},{"name":"Nils Philippsen","email":"nils@tiptoe.de","login":"nphilipp","count":2},{"name":"Yves-Marie Haussonne","email":"ymh.work+github@gmail.com","login":"ymph","count":2},{"name":"Val Lorentz","email":"progval+github@progval.net","login":"progval","count":2},{"name":"Troy Sincomb","email":"troysincomb@gmail.com","login":"tmsincomb","count":2},{"name":"Tony Fast","email":"tony.fast@gmail.com","login":"tonyfast","count":2},{"name":"Tom Baker","email":"tom@tombaker.org","login":"tombaker","count":2},{"name":"Timo Homburg","email":"timo.homburg@hs-mainz.de","login":"situx","count":2},{"name":"Stig B. Dørmænen","email":"stigbd@gmail.com","login":"stigbd","count":2},{"name":"Sanjay Santhanam","email":"51058514+Sanjays2402","login":"Sanjays2402","count":2},{"name":"Rob B","email":"73846016+robons","login":"robons","count":2},{"name":"Aditya Bhadoo","email":"44553897+bhadoo-aditya","login":"bhadoo-aditya","count":2},{"name":"David Habgood","email":"dcchabgood@gmail.com","login":"recalcitrantsupplant","count":2},{"name":"Jeroen van der Ham","email":"vdham@uva.nl","login":"jeroenh","count":2},{"name":"Laurence Rowe","email":"l@lrowe.co.uk","login":"lrowe","count":2},{"name":"Linus Lewandowski","email":"linus@lew21.net","login":"LEW21","count":2},{"name":"Lukas Müller","email":"lukas.mueller94@gmail.com","login":"lukasmu","count":2},{"name":"Mark van der Pas","email":"mark.van.der.pas@semaku.com","login":"gitmpje","count":2},{"name":"Peter Cock","email":"p.j.a.cock@googlemail.com","login":"peterjc","count":1},{"name":"Otto Kruse","email":"ottokrus@amazon.nl","login":"ottokruse","count":1},{"name":"Nicholas Bollweg","email":"nick.bollweg@gmail.com","login":"bollwyvl","count":1},{"name":"Nathan Maynes","email":"nathanmaynes@gmail.com","login":"nmaynes","count":1},{"name":"Michael R. Crusoe","email":"1330696+mr-c","login":"mr-c","count":1},{"name":"Ritam Biswas","email":"Ritam.Biswas2020@gmail.com","login":"devrb","count":1},{"name":"Robert Casties","email":"1488847+robcast","login":"robcast","count":1},{"name":"Rouzbeh Asghari","email":"rouzbeh.asghari@gmail.com","login":"ROZBEH","count":1},{"name":"Sam Thursfield","email":"ssssam@gmail.com","login":"ssssam","count":1},{"name":"Sascha Peilicke","email":"saschpe@suse.de","login":"saschpe","count":1},{"name":"Satrajit Ghosh","email":"satra@mit.edu","login":"satra","count":1},{"name":"Philippe Luickx","email":"philippe.luickx@gmail.com","login":"philippeluickx","count":1},{"name":"Raf Guns","email":"rafguns@gmail.com","login":"rafguns","count":1},{"name":"Ralf Grubenmann","email":"ralf.grubenmann@gmail.com","login":"Panaetius","count":1},{"name":"Richard Wallis","email":"richard.wallis@dataliberate.com","login":"RichardWallis","count":1},{"name":"Rinke Hoekstra","email":"RinkeHoekstra","login":"RinkeHoekstra","count":1},{"name":"Michael Cochez","email":"3889771+miselico","login":"miselico","count":1},{"name":"Michael","email":"ttmigueltt@gmail.com","login":"multimeric","count":1},{"name":"Maxim Kolchin","email":"kolchinmax@gmail.com","login":"KMax","count":1},{"name":"Matthias Jurisch","email":"matthias.jurisch@gmail.com","login":"mhfj","count":1},{"name":"Martin van der Werff","email":"github@newinnovations.nl","login":"newinnovations","count":1},{"name":"Martin Wendt","email":"github@wwwendt.de","login":"mar10","count":1},{"name":"while0pass","email":"while0pass@yandex.ru","login":"while0pass","count":1},{"name":"lu-pl","email":"128675670+lu-pl","login":"lu-pl","count":1},{"name":"lennertvandevelde","email":"61053080+lennertvandevelde","login":"lennertvandevelde","count":1},{"name":"eeshsaxena","email":"139802361+eeshsaxena","login":"eeshsaxena","count":1},{"name":"apicouSP","email":"101801440+apicouSP","login":"apicouSP","count":1},{"name":"Wim Muskee","email":"wimmuskee@gmail.com","login":"wimmuskee","count":1},{"name":"Wes Turner","email":"wes.turner@gmail.com","login":"westurner","count":1},{"name":"Vigten Stain","email":"vigtenstain@gmail.com","login":"vigten","count":1},{"name":"Vibhor Aggarwal","email":"108814060+vibhor-aggr","login":"vibhor-aggr","count":1},{"name":"Valentin Grouès","email":"valentin.groues@gmail.com","login":"neoflex","count":1},{"name":"Tomáš Hrnčiar","email":"tomas.hrnciar@me.com","login":"hrnciar","count":1},{"name":"Tom Mitchell","email":"tcmitchell","login":"tcmitchell","count":1},{"name":"Tim Gates","email":"tim.gates@iress.com","login":"timgates42","count":1},{"name":"Steve Leak","email":"sleak@lbl.gov","login":"sleak-lbl","count":1},{"name":"Blake Regalia","email":"blake.d.regalia@jpl.nasa.gov","login":null,"count":1},{"name":"Arnoud Hilhorst","email":"Arnoud.Hilhorst@priva.nl","login":null,"count":1},{"name":"Amit Beka","email":"beka@localhost.localdomain","login":null,"count":1},{"name":"Jon Stroop","email":"jpstroop@gmail.com","login":null,"count":1},{"name":"Justin Clark-Casey","email":"justincc@justincc.org","login":null,"count":1},{"name":"Sebastian Trueg","email":"trueg@truegeex.de","login":null,"count":1},{"name":"dr644w","email":"dr644w@att.com","login":null,"count":1},{"name":"Sina Ahmadi","email":"ahmadi.sina@outlook.com","login":"sinaahmadi","count":1},{"name":"Dmitriy Bastrak","email":"68817666+DBastrak","login":"DBastrak","count":1},{"name":"Diego Quintana","email":"daquintanav@gmail.com","login":"diegoquintanav","count":1},{"name":"Debabrata Deka","email":"60925700+ddeka2910","login":"ddeka2910","count":1},{"name":"David Steinberg","email":"david@resium.com","login":"david4096","count":1},{"name":"David Andreoletti","email":"david.andreoletti.dev@gmail.com","login":"davidandreoletti","count":1},{"name":"Dave Challis","email":"suicas@gmail.com","login":"davechallis","count":1},{"name":"Darren Garvey","email":"darren.garvey@gmail.com","login":"darrengarvey","count":1},{"name":"Dann Martens","email":"me@dannmartens.com","login":"dannmartens","count":1},{"name":"Daniel Molinero Lucas","email":"danielmolinero111@gmail.com","login":"Papishushi","count":1},{"name":"Cliff Xuan","email":"cliff.xuan@gmail.com","login":"cliffxuan","count":1},{"name":"Clay G","email":"Jtmcflea@gmail.com","login":"eden-logistics","count":1},{"name":"Christoph Görn","email":"goern@redhat.com","login":"goern","count":1},{"name":"Christian Amsüss","email":"c@amsuess.com","login":"chrysn","count":1},{"name":"Chris Mungall","email":"cjm@berkeleybop.org","login":"cmungall","count":1},{"name":"Carlo van Driesten","email":"github.com.charity937@passmail.com","login":"jdsika","count":1},{"name":"Aaron Coburn","email":"acoburn@amherst.edu","login":"acoburn","count":1},{"name":"Abhishek Vyas","email":"abhishek.vyas19086@gmail.com","login":"abhivickyvyas","count":1},{"name":"Adam Ever Hadani","email":"adamhadani@gmail.com","login":"adamhadani","count":1},{"name":"Aditi Sejal","email":"55681645+asejal","login":"asejal","count":1},{"name":"Alexandre Detiste","email":"alexandre.detiste@gmail.com","login":"a-detiste","count":1},{"name":"Anton Lodder","email":"alodder@opusonesolutions.com","login":"AnjoMan","count":1},{"name":"Bruno Cuconato","email":"odanoburu","login":"odanoburu","count":1},{"name":"Bruno P. Kinoshita","email":"kinow","login":"kinow","count":1},{"name":"Sebastian Schuberth","email":"sschuberth","login":"sschuberth","count":1},{"name":"Mark Hedley","email":"markh@metarelate.net","login":"marqh","count":1},{"name":"Mark Amery","email":"markamery@btinternet.com","login":"ExplodingCabbage","count":1},{"name":"Marat Charlaganov","email":"charlaganov+github@gmail.com","login":"cmarat","count":1},{"name":"Lisa","email":"204978408+lisat-dstg","login":"lisat-dstg","count":1},{"name":"Kris Maglione","email":"maglione.k@gmail.com","login":"kmaglione","count":1},{"name":"Kibubu","email":"85624897+Kibubu","login":"Kibubu","count":1},{"name":"Karthikeyan Singaravelan","email":"tir.karthi@gmail.com","login":"tirkarthi","count":1},{"name":"Juan José González","email":"juanjosegzl@gmail.com","login":"juanjosegzl","count":1},{"name":"Jodi Schneider","email":"jodi.a.schneider@gmail.com","login":"jodischneider","count":1},{"name":"Jim Man","email":"jimman2003@hotmail.com","login":"jimman2003","count":1},{"name":"Jerome Dockes","email":"jerome@dockes.org","login":"jeromedockes","count":1},{"name":"Jedrzej Potoniec","email":"jedrzej.potoniec@cs.put.poznan.pl","login":"jpotoniec","count":1},{"name":"Janus Troelsen","email":"ysangkok@gmail.com","login":"ysangkok","count":1},{"name":"James Michael DuPont","email":"JamesMikeDuPont@gmail.com","login":"h4ck3rm1k3","count":1},{"name":"Hanno Jung","email":"hanno.jung@googlemail.com","login":"daedadu","count":1},{"name":"Han Kruiger","email":"HanKruiger","login":"HanKruiger","count":1},{"name":"Graeme Stuart","email":"ggstuart@gmail.com","login":"ggstuart","count":1},{"name":"Felix Yan","email":"felixonmars@archlinux.org","login":"felixonmars","count":1},{"name":"Eric Peden","email":"eric@ericpeden.com","login":"ericpeden","count":1},{"name":"Enrico Bacis","email":"enrico.bacis@gmail.com","login":"enricobacis","count":1},{"name":"Elie Roux","email":"roux.elie@gmail.com","login":"eroux","count":1},{"name":"Don Bowman","email":"db@donbowman.ca","login":"donbowman","count":1}],"past_year_committers":[{"name":"Edmond Chuc","email":"edmond.chuc@gmail.com","login":"edmondchuc","count":41},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":13},{"name":"Nicholas J. Car","email":"nick@kurrawong.ai","login":"nicholascar","count":4},{"name":"Focke","email":"richardfechner@posteo.net","login":null,"count":4},{"name":"Natanael Arndt","email":"arndtn@gmail.com","login":"white-gecko","count":3},{"name":"Sanjay Santhanam","email":"51058514+Sanjays2402","login":"Sanjays2402","count":2},{"name":"Focke","email":"richi.fechner@web.de","login":"WhiteGobo","count":2},{"name":"eeshsaxena","email":"139802361+eeshsaxena","login":"eeshsaxena","count":1},{"name":"Vibhor Aggarwal","email":"108814060+vibhor-aggr","login":"vibhor-aggr","count":1},{"name":"Raf Guns","email":"rafguns@gmail.com","login":"rafguns","count":1},{"name":"Michael","email":"ttmigueltt@gmail.com","login":"multimeric","count":1},{"name":"Matt Goldberg","email":"59745812+mgberg","login":"mgberg","count":1},{"name":"Lisa","email":"204978408+lisat-dstg","login":"lisat-dstg","count":1},{"name":"Graham Higgins","email":"gjh@bel-epa.com","login":"gjhiggins","count":1},{"name":"Daniel Molinero Lucas","email":"danielmolinero111@gmail.com","login":"Papishushi","count":1},{"name":"Carlo van Driesten","email":"github.com.charity937@passmail.com","login":"jdsika","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-08-26T00:00:10.794Z","repositories_count":6777811,"commits_count":983141844,"contributors_count":41438808,"owners_count":1364524,"committers_count":3363215,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"RDFLib/rdflib","html_url":"https://github.com/RDFLib/rdflib","last_synced_at":"2026-08-25T14:36:27.004Z","status":null,"issues_count":284,"pull_requests_count":1076,"avg_time_to_close_issue":23665147.85714286,"avg_time_to_close_pull_request":1656469.2892271662,"issues_closed_count":84,"pull_requests_closed_count":854,"pull_request_authors_count":88,"issue_authors_count":155,"avg_comments_per_issue":2.73943661971831,"avg_comments_per_pull_request":1.4572490706319703,"merged_pull_requests_count":623,"bot_issues_count":6,"bot_pull_requests_count":617,"past_year_issues_count":30,"past_year_pull_requests_count":100,"past_year_avg_time_to_close_issue":1062619.3333333333,"past_year_avg_time_to_close_pull_request":962001.8444444444,"past_year_issues_closed_count":3,"past_year_pull_requests_closed_count":45,"past_year_pull_request_authors_count":24,"past_year_issue_authors_count":21,"past_year_avg_comments_per_issue":2.2666666666666666,"past_year_avg_comments_per_pull_request":1.1,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":46,"past_year_merged_pull_requests_count":28,"created_at":"2023-05-10T14:54:31.706Z","updated_at":"2026-08-25T14:36:27.004Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/RDFLib%2Frdflib/issues","issue_labels_count":{"table":{"bug":51,"breaking change":29,"enhancement":28,"core":22,"good first issue":19,"concept: RDF dataset":16,"SPARQL":16,"serialization":13,"format: JSON-LD":10,"id-as-cntxt":10,"parsing":10,"documentation":8,"confirmation needed":8,"dependencies":6,"store":6,"concept: RDF Literal":6,"cleanup":5,"interface bug":5,"marked for closing":5,"duplicate":4,"accepting PR":4,"critical":4,"concept: namespace":4,"feedback wanted":4,"help wanted":4,"concept: skolemization":4,"8.x":3,"concept: datatype":3,"LSP-violation":3,"reconfirm":3,"python":3,"format: N-Quads":3,"low priority":3,"docker":3,"awaiting feedback":3,"format: RDF/XML":2,"works as intended":2,"testing":2,"question":2,"chore":2,"needs discussion":2,"format: Turtle":2,"networking":2,"plugin":2,"fix-in-progress":2,"warnings":2,"performance":2,"HTTP":2,"concept: collections":1,"format: TriX":1,"7.0":1,"discussion":1,"backwards incompatible":1,"concept: default graph":1,"regression":1,"format: N-Triples":1,"meta":1,"invalid":1,"in-resolution":1,"build":1,"concept: property path":1}},"pull_request_labels_count":{"table":{"dependencies":592,"python":454,"docker":115,"review wanted":63,"ready to merge":40,"github_actions":23,"testing":9,"enhancement":9,"fix":8,"RDFLib8":6,"awaiting feedback":6,"documentation":5,"refactor":4,"good first issue":4,"needs more work":4,"7.0":3,"backwards incompatible":3,"cleanup":3,"core":3,"store":3,"SPARQL":2,"meta":2,"7.1":2,"feedback wanted":2,"breaking change":2,"help wanted":2,"needs discussion":2,"bug":2,"marked for closing":2,"type hints":2,"concept: RDF dataset":1,"concept: RDF Literal":1,"parsing":1,"7.x":1,"id-as-cntxt":1,"concept: property path":1,"on hold":1,"performance":1,"networking":1,"fix-in-progress":1}},"issue_author_associations_count":{"table":{"NONE":153,"CONTRIBUTOR":83,"MEMBER":48}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":844,"MEMBER":163,"NONE":69}},"issue_authors":{"table":{"aucampia":37,"edmondchuc":10,"ashleysommer":9,"ajnelson-nist":8,"lu-pl":7,"WhiteGobo":6,"multimeric":6,"dependabot[bot]":6,"gjhiggins":6,"floresbakker":5,"sdasda7777":5,"vemonet":4,"jaw111":3,"william-vw":3,"namedgraph":3,"ghost":3,"jclerman":3,"kloczek":3,"VladimirAlexiev":2,"joernhees":2,"gromgull":2,"cmungall":2,"wrobell":2,"jcbiddle":2,"usalu":2,"lalewis1":2,"white-gecko":2,"lukasmu":2,"cameronmore":2,"ddeschepper":2,"mgberg":2,"kwisatz":2,"rob-metalinkage":2,"Tpt":2,"Superraptor":2,"tgbugs":2,"nicholascar":2,"Lars-H":2,"JaimieMurdock":1,"trapperkeeper":1,"uholzer":1,"Sazuna":1,"hsekol-hub":1,"mustafasoylu":1,"urbanmatthias":1,"webhart":1,"joc-proxem":1,"berezovskyi":1,"micheldumontier":1,"yangzhang33":1,"stefanbischof":1,"J0las":1,"mickremedi":1,"marc-portier":1,"kulnor":1,"liangping":1,"sabinem":1,"prrvchr":1,"tombaker":1,"daghovland":1,"magdalenasabat":1,"lymereJ":1,"rsgoncalves":1,"stigbd":1,"rossbowen":1,"mhoangvslev":1,"wmelder":1,"edsu":1,"typinator":1,"lithedress":1,"Aleksander-Drozd":1,"ch-sander":1,"jbonevich":1,"raboof":1,"mtasaka":1,"gdbassett":1,"ThomasHoppe":1,"hentoilusose":1,"niklasl":1,"prohde":1,"alame14":1,"do-nhta":1,"bcoughlan":1,"jmfernandez":1,"sandervd":1,"eilmiv":1,"pfps":1,"NeilGraham":1,"mschiedon":1,"flacout":1,"rmspencer":1,"ncopa":1,"situx":1,"roelj":1,"rbuck-som":1,"ticapix":1,"zhang-xh95":1,"ennamarie19":1,"luisenriqueramos1977":1,"svenschneider":1,"MathiasVDA":1,"vishnu-dev":1,"jfschaefer":1,"tobiasschweizer":1,"GreenfishK":1,"majidaldo":1,"MyForest":1,"dhimmel":1,"dukesook":1,"sivy":1,"pinnaculum":1,"mr-c":1,"anatoly-scherbakov":1,"jbekesi":1,"chrysle":1,"cmdoret":1,"mgorny":1,"hsolbrig":1,"Nasreddine":1,"jonasengelmann":1,"Tchy258":1,"karlb":1,"g-vidal":1,"z3ntu":1,"mdw00d":1,"aemnathanclinton":1,"ff137":1,"nabito":1,"henrieglesorotos":1,"SupImDos":1,"feophan":1,"elichad":1,"bmwiedemann":1,"j0ack":1,"nphilipp":1,"scossu":1,"stuchalk":1,"RinkeHoekstra":1,"lsharma-202":1,"johnstonskj":1,"devonsparks":1,"nichtich":1,"mielvds":1,"miguelsmuller":1,"Ga11u":1,"peterjohnlawrence":1,"zero0nee":1,"wxwilcke":1,"mamiba":1,"jpmccu":1,"AlexisPister":1,"jdogburck":1,"domel":1,"jhgit":1,"JoelBender":1}},"pull_request_authors":{"table":{"dependabot[bot]":592,"aucampia":95,"ashleysommer":53,"nicholascar":52,"edmondchuc":39,"pre-commit-ci[bot]":25,"WhiteGobo":15,"white-gecko":13,"wallberg":12,"avillar":7,"ageorgou":7,"ajnelson-nist":7,"mgberg":7,"raboof":6,"multimeric":6,"gjhiggins":6,"recalcitrantsupplant":5,"mielvds":5,"progval":5,"nphilipp":5,"mr-c":4,"lu-pl":4,"ghost":4,"ddeschepper":4,"a-detiste":4,"Sanjays2402":4,"bovlb":4,"vemonet":3,"EFord36":2,"slahn":2,"vibhor-aggr":2,"guizsantos":2,"lukasmu":2,"wallberg-umd":2,"situx":2,"eyusupov":2,"lennertvandevelde":2,"bswck":2,"jcbiddle":2,"dymil":2,"yarikoptic":2,"sandervd":2,"daghovland":2,"arenas-guerrero-julian":2,"StephaneBranly":2,"kiki286":2,"joecrowleygaia":2,"domel":2,"apicouSP":2,"danigm":2,"tgbugs":2,"floresbakker":1,"FlorianLudwig":1,"mwatts15":1,"JervenBolleman":1,"gromgull":1,"gaoflow":1,"Papishushi":1,"jdsika":1,"bulricht":1,"davidandreoletti":1,"vamsikalagaturu":1,"AnjoMan":1,"GreatYYX":1,"rchateauneu":1,"ticapix":1,"Sirjan-Singh":1,"jclerman":1,"Abbe98":1,"goern":1,"alexdutton":1,"datadavev":1,"Kibubu":1,"bigerl":1,"veyndan":1,"zero0nee":1,"eeshsaxena":1,"jpmccu":1,"mhfj":1,"cthoyt":1,"anubhavj99":1,"XuguangSong98":1,"jhgit":1,"rodrigosetti":1,"robertmuil":1,"Natureshadow":1,"abhishekvickyvyas":1,"jesslatimer":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-08-26T00:00:06.716Z","repositories_count":16407065,"issues_count":42730181,"pull_requests_count":136671539,"authors_count":11539584,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{"8.x":1,"dependencies":1,"python":1}},"past_year_pull_request_labels_count":{"table":{"dependencies":43,"python":31,"docker":7,"github_actions":5,"review wanted":2,"7.1":1,"7.x":1}},"past_year_issue_author_associations_count":{"table":{"CONTRIBUTOR":17,"NONE":12,"MEMBER":1}},"past_year_pull_request_author_associations_count":{"table":{"CONTRIBUTOR":79,"NONE":14,"MEMBER":7}},"past_year_issue_authors":{"table":{"gjhiggins":5,"edmondchuc":4,"vemonet":3,"z3ntu":1,"wrobell":1,"webhart":1,"typinator":1,"stigbd":1,"nichtich":1,"nicholascar":1,"namedgraph":1,"mielvds":1,"mgberg":1,"majidaldo":1,"lu-pl":1,"jhgit":1,"J0las":1,"elichad":1,"do-nhta":1,"domel":1,"dependabot[bot]":1}},"past_year_pull_request_authors":{"table":{"dependabot[bot]":43,"edmondchuc":13,"multimeric":5,"gjhiggins":4,"Sanjays2402":4,"nicholascar":4,"white-gecko":3,"mielvds":3,"pre-commit-ci[bot]":3,"domel":2,"vibhor-aggr":2,"kiki286":2,"WhiteGobo":1,"vamsikalagaturu":1,"ticapix":1,"robertmuil":1,"Papishushi":1,"mgberg":1,"jhgit":1,"jdsika":1,"gaoflow":1,"eeshsaxena":1,"bulricht":1,"Abbe98":1}},"maintainers":[{"table":{"login":"aucampia","count":132,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aucampia"}},{"table":{"login":"nicholascar","count":54,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"}},{"table":{"login":"white-gecko","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"}},{"table":{"login":"gjhiggins","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gjhiggins"}},{"table":{"login":"gromgull","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gromgull"}},{"table":{"login":"joernhees","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joernhees"}},{"table":{"login":"niklasl","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/niklasl"}},{"table":{"login":"edsu","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/edsu"}}],"active_maintainers":[{"table":{"login":"nicholascar","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nicholascar"}},{"table":{"login":"white-gecko","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/white-gecko"}}]}},"events":{"total":{"CommitCommentEvent":2,"CreateEvent":251,"DeleteEvent":245,"DiscussionEvent":5,"ForkEvent":42,"IssueCommentEvent":559,"IssuesEvent":91,"PullRequestEvent":558,"PullRequestReviewCommentEvent":55,"PullRequestReviewEvent":89,"PushEvent":487,"ReleaseEvent":9,"WatchEvent":169},"last_year":{"CreateEvent":88,"DeleteEvent":103,"DiscussionEvent":5,"ForkEvent":9,"IssueCommentEvent":194,"IssuesEvent":28,"PullRequestEvent":230,"PullRequestReviewCommentEvent":23,"PullRequestReviewEvent":33,"PushEvent":205,"ReleaseEvent":4,"WatchEvent":37}},"keywords":["graph","json-ld","linked-data","n3","namespace","nquads","ntriples","parser","pypi","python","python-library","rdf","rdf-xml","rdflib","semantic-web","serializer","sparql","turtle","turtle-rdf","uri"],"dependencies":[{"ecosystem":"actions","filepath":".github/workflows/docker-images.yaml","sha":null,"kind":"manifest","created_at":"2023-01-13T12:15:19.033Z","updated_at":"2023-01-13T12:15:19.033Z","repository_link":"https://github.com/RDFLib/rdflib/blob/main/.github/workflows/docker-images.yaml","dependencies":[{"id":6875780617,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6875780619,"package_name":"arduino/setup-task","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":6875780620,"package_name":"docker/login-action","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/test-report.yml","sha":null,"kind":"manifest","created_at":"2023-01-13T12:15:19.558Z","updated_at":"2023-01-13T12:15:19.558Z","repository_link":"https://github.com/RDFLib/rdflib/blob/main/.github/workflows/test-report.yml","dependencies":[{"id":6875782174,"package_name":"dorny/test-reporter","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/validate.yaml","sha":null,"kind":"manifest","created_at":"2023-01-13T12:15:20.019Z","updated_at":"2023-01-13T12:15:20.019Z","repository_link":"https://github.com/RDFLib/rdflib/blob/main/.github/workflows/validate.yaml","dependencies":[{"id":6875784403,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6875784404,"package_name":"actions/setup-python","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false},{"id":6875784405,"package_name":"actions/setup-java","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6875784406,"package_name":"actions/cache","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6875784407,"package_name":"arduino/setup-task","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":6875784408,"package_name":"actions/upload-artifact","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6875784409,"package_name":"coverallsapp/github-action","ecosystem":"actions","requirements":"master","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"docker","filepath":"docker/latest/Dockerfile","sha":null,"kind":"manifest","created_at":"2023-01-13T12:15:20.276Z","updated_at":"2023-01-13T12:15:20.276Z","repository_link":"https://github.com/RDFLib/rdflib/blob/main/docker/latest/Dockerfile","dependencies":[{"id":6875784645,"package_name":"docker.io/library/python","ecosystem":"docker","requirements":"3.11.1-slim@sha256","direct":true,"kind":"build","optional":false}]},{"ecosystem":"docker","filepath":"docker/unstable/Dockerfile","sha":null,"kind":"manifest","created_at":"2023-01-13T12:15:20.644Z","updated_at":"2023-01-13T12:15:20.644Z","repository_link":"https://github.com/RDFLib/rdflib/blob/main/docker/unstable/Dockerfile","dependencies":[{"id":6875786023,"package_name":"docker.io/library/python","ecosystem":"docker","requirements":"3.11.1-slim@sha256","direct":true,"kind":"build","optional":false}]},{"ecosystem":"pypi","filepath":"docker/latest/requirements.in","sha":null,"kind":"manifest","created_at":"2023-01-13T12:15:21.172Z","updated_at":"2023-01-13T12:15:21.172Z","repository_link":"https://github.com/RDFLib/rdflib/blob/main/docker/latest/requirements.in","dependencies":[{"id":6875789503,"package_name":"rdflib","ecosystem":"pypi","requirements":"==6.2.0","direct":true,"kind":"test","optional":false},{"id":6875789504,"package_name":"html5lib","ecosystem":"pypi","requirements":"*","direct":true,"kind":"test","optional":false}]},{"ecosystem":"pypi","filepath":"docker/latest/requirements.txt","sha":null,"kind":"lockfile","created_at":"2023-01-13T12:15:21.594Z","updated_at":"2023-01-13T12:15:21.594Z","repository_link":"https://github.com/RDFLib/rdflib/blob/main/docker/latest/requirements.txt","dependencies":[{"id":6875789632,"package_name":"html5lib","ecosystem":"pypi","requirements":"==1.1","direct":false,"kind":"test","optional":false},{"id":6875789633,"package_name":"isodate","ecosystem":"pypi","requirements":"==0.6.1","direct":false,"kind":"test","optional":false},{"id":6875789634,"package_name":"pyparsing","ecosystem":"pypi","requirements":"==3.0.9","direct":false,"kind":"test","optional":false},{"id":6875789635,"package_name":"rdflib","ecosystem":"pypi","requirements":"==6.2.0","direct":false,"kind":"test","optional":false},{"id":6875789636,"package_name":"six","ecosystem":"pypi","requirements":"==1.16.0","direct":false,"kind":"test","optional":false},{"id":6875789637,"package_name":"webencodings","ecosystem":"pypi","requirements":"==0.5.1","direct":false,"kind":"test","optional":false}]},{"ecosystem":"docker","filepath":"test/test_rdf4j/test_e2e/docker/Dockerfile","sha":null,"kind":"manifest","created_at":"2026-08-17T10:46:00.659Z","updated_at":"2026-08-17T10:46:00.659Z","repository_link":"https://github.com/RDFLib/rdflib/blob/main/test/test_rdf4j/test_e2e/docker/Dockerfile","dependencies":[{"id":26181644501,"package_name":"ontotext/graphdb","ecosystem":"docker","requirements":"10.8.12","direct":true,"kind":"build","optional":false}]},{"ecosystem":"pypi","filepath":"pyproject.toml","sha":null,"kind":"manifest","created_at":"2026-08-17T10:46:00.784Z","updated_at":"2026-08-17T10:46:00.784Z","repository_link":"https://github.com/RDFLib/rdflib/blob/main/pyproject.toml","dependencies":[{"id":26181644506,"package_name":"isodate","ecosystem":"pypi","requirements":"\u003e=0.7.2,\u003c1.0.0; python_version \u003c '3.11'","direct":true,"kind":"runtime","optional":false},{"id":26181644507,"package_name":"pyparsing","ecosystem":"pypi","requirements":"\u003e=3.1.0,\u003c4","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"pypi","filepath":"test/plugins/sparqleval/setup.py","sha":null,"kind":"manifest","created_at":"2026-08-17T10:46:00.942Z","updated_at":"2026-08-17T10:46:00.942Z","repository_link":"https://github.com/RDFLib/rdflib/blob/main/test/plugins/sparqleval/setup.py","dependencies":[]},{"ecosystem":"docker","filepath":"docker-compose.yml","sha":null,"kind":"manifest","created_at":"2026-08-17T10:46:00.477Z","updated_at":"2026-08-17T10:46:00.477Z","repository_link":"https://github.com/RDFLib/rdflib/blob/main/docker-compose.yml","dependencies":[]},{"ecosystem":"docker","filepath":"test/test_graphdb/test_e2e/docker/Dockerfile","sha":null,"kind":"manifest","created_at":"2026-08-17T10:46:00.547Z","updated_at":"2026-08-17T10:46:00.547Z","repository_link":"https://github.com/RDFLib/rdflib/blob/main/test/test_graphdb/test_e2e/docker/Dockerfile","dependencies":[{"id":26181644498,"package_name":"ontotext/graphdb","ecosystem":"docker","requirements":"10.8.12","direct":true,"kind":"build","optional":false}]},{"ecosystem":"pypi","filepath":"test/plugins/parser/setup.py","sha":null,"kind":"manifest","created_at":"2026-08-17T10:46:00.872Z","updated_at":"2026-08-17T10:46:00.872Z","repository_link":"https://github.com/RDFLib/rdflib/blob/main/test/plugins/parser/setup.py","dependencies":[]},{"ecosystem":"pypi","filepath":"uv.lock","sha":null,"kind":"lockfile","created_at":"2026-08-17T10:46:01.012Z","updated_at":"2026-08-17T10:46:01.012Z","repository_link":"https://github.com/RDFLib/rdflib/blob/main/uv.lock","dependencies":[{"id":26181644516,"package_name":"annotated-doc","ecosystem":"pypi","requirements":"0.0.5","direct":false,"kind":"runtime","optional":false},{"id":26181644517,"package_name":"anyio","ecosystem":"pypi","requirements":"4.14.2","direct":false,"kind":"runtime","optional":false},{"id":26181644518,"package_name":"berkeleydb","ecosystem":"pypi","requirements":"18.1.15","direct":false,"kind":"runtime","optional":false},{"id":26181644519,"package_name":"black","ecosystem":"pypi","requirements":"24.8.0","direct":false,"kind":"runtime","optional":false},{"id":26181644520,"package_name":"build","ecosystem":"pypi","requirements":"1.5.0","direct":false,"kind":"runtime","optional":false},{"id":26181644521,"package_name":"certifi","ecosystem":"pypi","requirements":"2026.7.22","direct":false,"kind":"runtime","optional":false},{"id":26181644522,"package_name":"charset-normalizer","ecosystem":"pypi","requirements":"3.4.9","direct":false,"kind":"runtime","optional":false},{"id":26181644523,"package_name":"click","ecosystem":"pypi","requirements":"8.4.2","direct":false,"kind":"runtime","optional":false},{"id":26181644524,"package_name":"colorama","ecosystem":"pypi","requirements":"0.4.6","direct":false,"kind":"runtime","optional":false},{"id":26181644525,"package_name":"coverage","ecosystem":"pypi","requirements":"7.15.4","direct":false,"kind":"runtime","optional":false},{"id":26181644526,"package_name":"coveralls","ecosystem":"pypi","requirements":"4.1.0","direct":false,"kind":"runtime","optional":false},{"id":26181644527,"package_name":"deepmerge","ecosystem":"pypi","requirements":"2.1.0","direct":false,"kind":"runtime","optional":false},{"id":26181644528,"package_name":"docker","ecosystem":"pypi","requirements":"7.2.0","direct":false,"kind":"runtime","optional":false},{"id":26181644529,"package_name":"exceptiongroup","ecosystem":"pypi","requirements":"1.3.1","direct":false,"kind":"runtime","optional":false},{"id":26181644530,"package_name":"ghp-import","ecosystem":"pypi","requirements":"2.1.0","direct":false,"kind":"runtime","optional":false},{"id":26181644531,"package_name":"griffelib","ecosystem":"pypi","requirements":"2.1.0","direct":false,"kind":"runtime","optional":false},{"id":26181644532,"package_name":"h11","ecosystem":"pypi","requirements":"0.16.0","direct":false,"kind":"runtime","optional":false},{"id":26181644533,"package_name":"html5rdf","ecosystem":"pypi","requirements":"1.2.1","direct":false,"kind":"runtime","optional":false},{"id":26181644535,"package_name":"httpcore","ecosystem":"pypi","requirements":"1.0.9","direct":false,"kind":"runtime","optional":false},{"id":26181644536,"package_name":"httpx","ecosystem":"pypi","requirements":"0.28.1","direct":false,"kind":"runtime","optional":false},{"id":26181644537,"package_name":"idna","ecosystem":"pypi","requirements":"3.18","direct":false,"kind":"runtime","optional":false},{"id":26181644538,"package_name":"importlib-metadata","ecosystem":"pypi","requirements":"9.0.0","direct":false,"kind":"runtime","optional":false},{"id":26181644539,"package_name":"iniconfig","ecosystem":"pypi","requirements":"2.3.0","direct":false,"kind":"runtime","optional":false},{"id":26181644540,"package_name":"isodate","ecosystem":"pypi","requirements":"0.7.2","direct":false,"kind":"runtime","optional":false},{"id":26181644541,"package_name":"isort","ecosystem":"pypi","requirements":"5.13.2","direct":false,"kind":"runtime","optional":false},{"id":26181644542,"package_name":"jinja2","ecosystem":"pypi","requirements":"3.1.6","direct":false,"kind":"runtime","optional":false},{"id":26181644543,"package_name":"lxml","ecosystem":"pypi","requirements":"5.4.0","direct":false,"kind":"runtime","optional":false},{"id":26181644544,"package_name":"lxml-stubs","ecosystem":"pypi","requirements":"0.5.1","direct":false,"kind":"runtime","optional":false},{"id":26181644545,"package_name":"markdown","ecosystem":"pypi","requirements":"3.10.3","direct":false,"kind":"runtime","optional":false},{"id":26181644546,"package_name":"markdown-it-py","ecosystem":"pypi","requirements":"4.2.0","direct":false,"kind":"runtime","optional":false},{"id":26181644547,"package_name":"markupsafe","ecosystem":"pypi","requirements":"3.0.3","direct":false,"kind":"runtime","optional":false},{"id":26181644548,"package_name":"mdurl","ecosystem":"pypi","requirements":"0.1.2","direct":false,"kind":"runtime","optional":false},{"id":26181644549,"package_name":"mergedeep","ecosystem":"pypi","requirements":"1.3.4","direct":false,"kind":"runtime","optional":false},{"id":26181644550,"package_name":"mkdocs","ecosystem":"pypi","requirements":"1.6.1","direct":false,"kind":"runtime","optional":false},{"id":26181644551,"package_name":"mkdocs-autorefs","ecosystem":"pypi","requirements":"1.4.4","direct":false,"kind":"runtime","optional":false},{"id":26181644552,"package_name":"mkdocs-get-deps","ecosystem":"pypi","requirements":"0.2.2","direct":false,"kind":"runtime","optional":false},{"id":26181644553,"package_name":"mkdocstrings","ecosystem":"pypi","requirements":"1.0.6","direct":false,"kind":"runtime","optional":false},{"id":26181644554,"package_name":"mkdocstrings-python","ecosystem":"pypi","requirements":"2.0.5","direct":false,"kind":"runtime","optional":false},{"id":26181644555,"package_name":"mypy","ecosystem":"pypi","requirements":"1.14.1","direct":false,"kind":"runtime","optional":false},{"id":26181644556,"package_name":"mypy-extensions","ecosystem":"pypi","requirements":"1.1.0","direct":false,"kind":"runtime","optional":false},{"id":26181644557,"package_name":"networkx","ecosystem":"pypi","requirements":"3.4.2","direct":false,"kind":"runtime","optional":false},{"id":26181644558,"package_name":"networkx","ecosystem":"pypi","requirements":"3.6.1","direct":false,"kind":"runtime","optional":false},{"id":26181644559,"package_name":"orjson","ecosystem":"pypi","requirements":"3.11.9","direct":false,"kind":"runtime","optional":false},{"id":26181644560,"package_name":"packaging","ecosystem":"pypi","requirements":"26.3","direct":false,"kind":"runtime","optional":false},{"id":26181644561,"package_name":"pathspec","ecosystem":"pypi","requirements":"1.1.1","direct":false,"kind":"runtime","optional":false},{"id":26181644562,"package_name":"pip","ecosystem":"pypi","requirements":"26.2.1","direct":false,"kind":"runtime","optional":false},{"id":26181644563,"package_name":"pip-tools","ecosystem":"pypi","requirements":"7.6.1","direct":false,"kind":"runtime","optional":false},{"id":26181644564,"package_name":"platformdirs","ecosystem":"pypi","requirements":"4.11.2","direct":false,"kind":"runtime","optional":false},{"id":26181644565,"package_name":"pluggy","ecosystem":"pypi","requirements":"1.6.0","direct":false,"kind":"runtime","optional":false},{"id":26181644566,"package_name":"pygments","ecosystem":"pypi","requirements":"2.20.0","direct":false,"kind":"runtime","optional":false},{"id":26181644567,"package_name":"pymdown-extensions","ecosystem":"pypi","requirements":"11.0.1","direct":false,"kind":"runtime","optional":false},{"id":26181644568,"package_name":"pyparsing","ecosystem":"pypi","requirements":"3.3.2","direct":false,"kind":"runtime","optional":false},{"id":26181644569,"package_name":"pyproject-hooks","ecosystem":"pypi","requirements":"1.2.0","direct":false,"kind":"runtime","optional":false},{"id":26181644570,"package_name":"pytest","ecosystem":"pypi","requirements":"8.4.2","direct":false,"kind":"runtime","optional":false},{"id":26181644571,"package_name":"pytest-cov","ecosystem":"pypi","requirements":"5.0.0","direct":false,"kind":"runtime","optional":false},{"id":26181644572,"package_name":"python-dateutil","ecosystem":"pypi","requirements":"2.9.0.post0","direct":false,"kind":"runtime","optional":false},{"id":26181644573,"package_name":"python-dotenv","ecosystem":"pypi","requirements":"1.2.2","direct":false,"kind":"runtime","optional":false},{"id":26181644574,"package_name":"pywin32","ecosystem":"pypi","requirements":"312","direct":false,"kind":"runtime","optional":false},{"id":26181644575,"package_name":"pyyaml","ecosystem":"pypi","requirements":"6.0.3","direct":false,"kind":"runtime","optional":false},{"id":26181644576,"package_name":"pyyaml-env-tag","ecosystem":"pypi","requirements":"1.1","direct":false,"kind":"runtime","optional":false},{"id":26181644577,"package_name":"rdflib","ecosystem":"pypi","requirements":"7.7.0a0","direct":false,"kind":"runtime","optional":false},{"id":26181644578,"package_name":"requests","ecosystem":"pypi","requirements":"2.34.2","direct":false,"kind":"runtime","optional":false},{"id":26181644579,"package_name":"rich","ecosystem":"pypi","requirements":"15.0.0","direct":false,"kind":"runtime","optional":false},{"id":26181644580,"package_name":"ruff","ecosystem":"pypi","requirements":"0.15.0","direct":false,"kind":"runtime","optional":false},{"id":26181644581,"package_name":"setuptools","ecosystem":"pypi","requirements":"71.1.0","direct":false,"kind":"runtime","optional":false},{"id":26181644582,"package_name":"shellingham","ecosystem":"pypi","requirements":"1.5.4","direct":false,"kind":"runtime","optional":false},{"id":26181644583,"package_name":"six","ecosystem":"pypi","requirements":"1.17.0","direct":false,"kind":"runtime","optional":false},{"id":26181644584,"package_name":"testcontainers","ecosystem":"pypi","requirements":"4.15.0","direct":false,"kind":"runtime","optional":false},{"id":26181644585,"package_name":"tomli","ecosystem":"pypi","requirements":"2.4.1","direct":false,"kind":"runtime","optional":false},{"id":26181644586,"package_name":"typer","ecosystem":"pypi","requirements":"0.27.1","direct":false,"kind":"runtime","optional":false},{"id":26181644587,"package_name":"types-setuptools","ecosystem":"pypi","requirements":"71.1.0.20240818","direct":false,"kind":"runtime","optional":false},{"id":26181644588,"package_name":"typing-extensions","ecosystem":"pypi","requirements":"4.16.0","direct":false,"kind":"runtime","optional":false},{"id":26181644589,"package_name":"urllib3","ecosystem":"pypi","requirements":"2.7.0","direct":false,"kind":"runtime","optional":false},{"id":26181644590,"package_name":"watchdog","ecosystem":"pypi","requirements":"6.0.0","direct":false,"kind":"runtime","optional":false},{"id":26181644591,"package_name":"wheel","ecosystem":"pypi","requirements":"0.45.1","direct":false,"kind":"runtime","optional":false},{"id":26181644592,"package_name":"wrapt","ecosystem":"pypi","requirements":"2.3.0","direct":false,"kind":"runtime","optional":false},{"id":26181644593,"package_name":"zensical","ecosystem":"pypi","requirements":"0.0.53","direct":false,"kind":"runtime","optional":false},{"id":26181644594,"package_name":"zipp","ecosystem":"pypi","requirements":"4.1.0","direct":false,"kind":"runtime","optional":false}]}],"score":31.68085494679734,"created_at":"2026-05-04T06:49:42.654Z","updated_at":"2026-08-26T15:04:44.984Z","avatar_url":"https://github.com/RDFLib.png","language":"Python","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/371922","html_url":"https://summary.ecosyste.ms/projects/371922"}