{"id":372454,"url":"https://github.com/go-jose/go-jose","last_synced_at":"2026-06-01T14:31:51.995Z","repository":{"id":39926448,"uuid":"285864234","full_name":"go-jose/go-jose","owner":"go-jose","description":"An implementation of JOSE standards (JWE, JWS, JWT) in Go","archived":false,"fork":false,"pushed_at":"2026-04-02T17:34:41.000Z","size":1351,"stargazers_count":505,"open_issues_count":38,"forks_count":118,"subscribers_count":6,"default_branch":"main","last_synced_at":"2026-05-23T19:23:54.090Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"square/go-jose","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-jose.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-08-07T15:38:05.000Z","updated_at":"2026-05-16T15:14:49.000Z","dependencies_parsed_at":"2023-12-19T01:34:59.075Z","dependency_job_id":"442666f1-5d20-4824-979f-746922d427b0","html_url":"https://github.com/go-jose/go-jose","commit_stats":null,"previous_names":[],"tags_count":53,"template":false,"template_full_name":null,"purl":"pkg:github/go-jose/go-jose","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/sbom","scorecard":{"id":432027,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-jose/go-jose","commit":"14239fdb15b88e1c42e41621ef24f1112cf31b5a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.6,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"10 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/cram.yml:1","Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/cram.yml:19","Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned","Info: 0 out of 1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:36:11.883Z","repository_id":39926448,"created_at":"2025-08-19T03:36:11.883Z","updated_at":"2025-08-19T03:36:11.883Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33450728,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-24T19:21:36.376Z","status":"ssl_error","status_checked_at":"2026-05-24T19:21:10.562Z","response_time":57,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":null,"packages":[{"id":14445418,"name":"github.com/Go-jose/Go-jose","ecosystem":"go","description":null,"homepage":null,"licenses":null,"normalized_licenses":[],"repository_url":"https://github.com/Go-jose/Go-jose","keywords_array":[],"namespace":null,"versions_count":35,"first_release_published_at":"2016-03-21T19:26:54.000Z","latest_release_published_at":"2024-03-07T22:25:21.000Z","latest_release_number":"v2.6.3+incompatible","last_synced_at":"2026-05-14T12:19:34.030Z","created_at":"2026-05-14T12:19:29.212Z","updated_at":"2026-05-14T13:53:40.889Z","registry_url":"https://pkg.go.dev/github.com/Go-jose/Go-jose","install_command":"go get github.com/Go-jose/Go-jose","documentation_url":"https://pkg.go.dev/github.com/Go-jose/Go-jose#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-14T13:53:40.866Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/github.com/%21go-jose/%21go-jose","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/Go-jose/Go-jose","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/Go-jose/Go-jose","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/Go-jose/Go-jose/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGo-jose%2FGo-jose/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGo-jose%2FGo-jose/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGo-jose%2FGo-jose/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGo-jose%2FGo-jose/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGo-jose%2FGo-jose/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGo-jose%2FGo-jose/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2154697,"maintainers_count":0,"namespaces_count":791356,"keywords_count":113139,"github":"golang","metadata":{"funded_packages_count":53897},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-01T05:12:27.241Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":11316992,"name":"github.com/Go-jose/go-jose","ecosystem":"go","description":"Package jose aims to provide an implementation of the Javascript Object Signing\nand Encryption set of standards. It implements encryption and signing based on\nthe JSON Web Encryption and JSON Web Signature standards, with optional JSON\nWeb Token support available in a sub-package. The library supports both the\ncompact and full serialization formats, and has optional support for multiple\nrecipients.","homepage":"https://github.com/Go-jose/go-jose","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/Go-jose/go-jose","keywords_array":[],"namespace":"github.com/Go-jose","versions_count":35,"first_release_published_at":"2016-03-21T19:26:54.000Z","latest_release_published_at":"2024-03-07T22:25:21.000Z","latest_release_number":"v2.6.3+incompatible","last_synced_at":"2026-05-01T13:11:59.595Z","created_at":"2025-02-01T08:09:37.438Z","updated_at":"2026-05-01T13:11:59.595Z","registry_url":"https://pkg.go.dev/github.com/Go-jose/go-jose","install_command":"go get github.com/Go-jose/go-jose","documentation_url":"https://pkg.go.dev/github.com/Go-jose/go-jose#section-documentation","metadata":{},"repo_metadata":{"id":39926448,"uuid":"285864234","full_name":"go-jose/go-jose","owner":"go-jose","description":"An implementation of JOSE standards (JWE, JWS, JWT) in Go","archived":false,"fork":false,"pushed_at":"2026-01-22T19:02:25.000Z","size":1244,"stargazers_count":490,"open_issues_count":32,"forks_count":109,"subscribers_count":6,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.210Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"square/go-jose","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-jose.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-08-07T15:38:05.000Z","updated_at":"2026-03-19T22:13:06.000Z","dependencies_parsed_at":"2023-12-19T01:34:59.075Z","dependency_job_id":"442666f1-5d20-4824-979f-746922d427b0","html_url":"https://github.com/go-jose/go-jose","commit_stats":null,"previous_names":[],"tags_count":50,"template":false,"template_full_name":null,"purl":"pkg:github/go-jose/go-jose","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/sbom","scorecard":{"id":432027,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-jose/go-jose","commit":"14239fdb15b88e1c42e41621ef24f1112cf31b5a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.6,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"10 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/cram.yml:1","Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/cram.yml:19","Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned","Info: 0 out of 1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:36:11.883Z","repository_id":39926448,"created_at":"2025-08-19T03:36:11.883Z","updated_at":"2025-08-19T03:36:11.883Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30931099,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-25T07:55:14.202Z","status":"ssl_error","status_checked_at":"2026-03-25T07:55:10.924Z","response_time":80,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-jose","name":"go-jose","uuid":"68707210","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/68707210?v=4","repositories_count":1,"last_synced_at":"2023-03-09T05:50:53.821Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/go-jose","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-18T19:12:47.616Z","updated_at":"2023-03-09T05:50:53.832Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose/repositories"},"tags":[{"name":"v4.1.2","sha":"a1565a41aa008ae6545e0f50a636d254de5b4596","kind":"commit","published_at":"2025-07-18T17:04:53.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.1.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.2/manifests"},{"name":"v4.1.1","sha":"04339d94f057d27548371c00a7c801c4fc2cbcdd","kind":"commit","published_at":"2025-06-23T23:41:10.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.1.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.1/manifests"},{"name":"v4.1.0","sha":"4f005daa10d11cacd7376358a5fe5d0c1c0ee487","kind":"commit","published_at":"2025-04-07T19:12:33.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.1.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.0/manifests"},{"name":"v3.0.4","sha":"5253038e3b5f64a2200b5b6c72107bf9823f4358","kind":"commit","published_at":"2025-02-26T19:59:49.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.4","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.4/manifests"},{"name":"v4.0.5","sha":"99b346cec4e86d102284642c5dcbe9bb0cacfc22","kind":"commit","published_at":"2025-02-24T20:06:34.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.5","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.5/manifests"},{"name":"v4.0.4","sha":"15bc4c2ac4575ad865f078390db61d44530f985d","kind":"commit","published_at":"2024-07-27T00:46:37.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.4","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.4/manifests"},{"name":"v4.0.3","sha":"db085150a549dadd76f4d2ce2ac3976951cc461e","kind":"commit","published_at":"2024-07-09T19:53:13.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.3/manifests"},{"name":"v4.0.2","sha":"ca3a2783c470c40cc490f801fc87ff39b92b25d6","kind":"commit","published_at":"2024-05-13T21:25:42.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.2/manifests"},{"name":"v2.6.3","sha":"0dd4dd541c665fb292d664f77604ba694726f298","kind":"commit","published_at":"2024-03-07T22:25:21.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.6.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.6.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.6.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.3/manifests"},{"name":"v3.0.3","sha":"add6a284ea0f844fd6628cba637be5451fe4b28a","kind":"commit","published_at":"2024-03-07T21:35:47.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.3/manifests"},{"name":"v4.0.1","sha":"f4c051a0653d78199a053892f7619ebf96339502","kind":"commit","published_at":"2024-03-07T19:46:13.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.1/manifests"},{"name":"v1.1.3","sha":"5778a03bd4ba705b3755010af88a21f5acd63664","kind":"commit","published_at":"2024-03-07T01:13:42.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.1.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.3/manifests"},{"name":"v4.0.0","sha":"2658f467ede28af28a7883041677ff460dda3f69","kind":"commit","published_at":"2024-02-26T22:32:37.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.0/manifests"},{"name":"v3.0.2","sha":"863f73b9dbfcc5944d74d5106992e3cf949c4557","kind":"commit","published_at":"2024-02-23T23:30:51.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.2/manifests"},{"name":"v2.6.2","sha":"a3d307244c3bc50b25a71aa0688764c32ec419c7","kind":"commit","published_at":"2023-12-08T21:16:55.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.6.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.6.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.6.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.2/manifests"},{"name":"v3.0.1","sha":"47edce0854d533ac27795c9befd90b1f7ef87554","kind":"commit","published_at":"2023-11-08T00:39:09.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.1/manifests"},{"name":"v2.6.1","sha":"e0deb20b7736bf31a2cee85c5d2b682c6534e000","kind":"tag","published_at":"2023-01-26T02:01:16.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.6.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.1/manifests"},{"name":"v3.0.0","sha":"a563785af9481120d75c419acf7bdd86a07cc1f1","kind":"tag","published_at":"2021-07-31T20:37:49.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.0/manifests"},{"name":"v3.0.0-rc.1","sha":"a563785af9481120d75c419acf7bdd86a07cc1f1","kind":"tag","published_at":"2021-06-05T21:22:44.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.0-rc.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.0-rc.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.0-rc.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.0-rc.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.0-rc.1/manifests"},{"name":"v2.6.0","sha":"a10ff54e00bc6e833bf549e04ae976f0fe8ea2fd","kind":"tag","published_at":"2021-06-05T20:58:19.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.6.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.0/manifests"},{"name":"v2.5.1","sha":"3a5ee095dcb5030a9de84fb92c222ac652fff176","kind":"tag","published_at":"2020-05-01T02:02:59.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.5.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.5.1/manifests"},{"name":"v2.5.0","sha":"2204b3eaf539b5d4ad438a05b5e0a10e85816bf9","kind":"tag","published_at":"2020-04-13T02:15:29.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.5.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.5.0/manifests"},{"name":"v2.4.1","sha":"4ef0f1b175ccd65472d154e1207c4d7b8102545f","kind":"tag","published_at":"2019-12-16T20:56:51.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.4.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.4.1/manifests"},{"name":"v2.4.0","sha":"8fd82ff1d52a5162ff23c0a48e2c64a1fa4a3f8f","kind":"tag","published_at":"2019-10-23T04:08:19.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.4.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.4.0/manifests"},{"name":"v2.3.1","sha":"730df5f748271903322feb182be83b43ebbbe27d","kind":"tag","published_at":"2019-04-10T22:00:40.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.3.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.3.1/manifests"},{"name":"v2.3.0","sha":"628223f44a71f715d2881ea69afc795a1e9c01be","kind":"tag","published_at":"2019-02-27T00:05:37.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.3.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.3.0/manifests"},{"name":"v2.2.2","sha":"e94fb177d3668d35ab39c61cbb2f311550557e83","kind":"tag","published_at":"2019-01-02T21:08:35.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.2.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"72415094398e2f013bf50b76fd6de36df47938ea","kind":"tag","published_at":"2018-12-05T19:06:01.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.2.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"f61ac651e23224d43848a8dc387dee016d7eacf9","kind":"tag","published_at":"2018-11-30T00:37:18.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.2.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.0/manifests"},{"name":"v2.1.9","sha":"ef984e69dd356202fd4e4910d4d9c24468bdf0b8","kind":"tag","published_at":"2018-09-23T17:51:30.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.9","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.9/manifests"},{"name":"v2.1.8","sha":"8254d6c783765f38c8675fae4427a1fe73fbd09d","kind":"tag","published_at":"2018-08-08T17:29:30.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.8","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.8/manifests"},{"name":"v2.1.7","sha":"349dc03548930652802aadc09fb126e2b7cb6d80","kind":"tag","published_at":"2018-07-25T22:16:27.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.7","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.7/manifests"},{"name":"v1.1.2","sha":"56062818b5e15ee405eb8363f9498c7113e98337","kind":"tag","published_at":"2018-07-25T22:09:11.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.1.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.2/manifests"},{"name":"v2.1.6","sha":"76dd09796242edb5b897103a75df2645c028c960","kind":"tag","published_at":"2018-03-29T00:25:01.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.6","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.6/manifests"},{"name":"v2.1.5","sha":"552e98edab5d620205ff1a8960bf52a5a10aad03","kind":"tag","published_at":"2018-03-23T17:36:42.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.5","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.5/manifests"},{"name":"v1.1.1","sha":"6e50787b7338112747e64f32753fb4f9dbfb8f79","kind":"tag","published_at":"2018-03-23T00:52:00.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.1.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.1/manifests"},{"name":"v2.1.4","sha":"6ee92191fea850cdcab9a18867abf5f521cdbadb","kind":"tag","published_at":"2018-02-28T01:29:07.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.4","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.4/manifests"},{"name":"v2.1.3","sha":"f8f38de21b4dcd69d0413faf231983f5fd6634b1","kind":"tag","published_at":"2017-09-13T20:15:43.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.3/manifests"},{"name":"v2.1.2","sha":"b25e6cab129e4a54675b42ea49d38e9c33ade9e6","kind":"tag","published_at":"2017-06-07T21:53:41.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.2/manifests"},{"name":"v2.1.1","sha":"af13e1fbc7ac2df7f7eab54e5177104d546d0e9c","kind":"tag","published_at":"2017-05-03T23:45:58.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"d5683d954d08cd430460c651e2a2fff4f3b39f86","kind":"tag","published_at":"2017-02-24T23:57:24.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.0/manifests"},{"name":"v2.0.1","sha":"296c7f1463ec9b712176dc804dea0173d06dc728","kind":"tag","published_at":"2016-11-21T22:27:01.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.0.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"8c5257b2f658f86d174ae68c6a592eaf6a9608d9","kind":"tag","published_at":"2016-10-28T21:39:18.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.0.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.0.0/manifests"},{"name":"v1.1.0","sha":"aa2e30fdd1fe9dd3394119af66451ae790d50e0d","kind":"tag","published_at":"2016-09-23T00:23:00.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.1.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.0/manifests"},{"name":"v1.0.5","sha":"139276ceb5afbf13e636c44e9382f0ca75c12ba3","kind":"tag","published_at":"2016-09-03T19:23:47.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.5","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.5/manifests"},{"name":"v1.0.4","sha":"6e6dedab09005ebebd66b7cd4af9e8eada723c61","kind":"tag","published_at":"2016-08-31T22:15:56.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.4","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.4/manifests"},{"name":"v1.0.3","sha":"a3927f83df1b1516f9e9dec71839c93e6bcf1db0","kind":"tag","published_at":"2016-08-08T14:38:18.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.3/manifests"},{"name":"v1.0.2","sha":"e3f973b66b91445ec816dd7411ad1b6495a5a2fc","kind":"tag","published_at":"2016-05-02T22:58:07.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.2/manifests"},{"name":"v1.0.1","sha":"40d457b439244b546f023d056628e5184136899b","kind":"tag","published_at":"2016-03-29T20:36:57.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"7d9df93c5ee8a09ed250b3b2360972fa29b4bb3c","kind":"tag","published_at":"2016-03-26T06:33:02.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-03-25T17:00:26.796Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":6.158693930677929,"dependent_packages_count":5.771965794072672,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":5.965329862375301},"purl":"pkg:golang/github.com/%21go-jose/go-jose","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/Go-jose/go-jose","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/Go-jose/go-jose","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/Go-jose/go-jose/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-11T23:18:31.995Z","issues_count":63,"pull_requests_count":211,"avg_time_to_close_issue":10558985.378378378,"avg_time_to_close_pull_request":3580172.9175824174,"issues_closed_count":37,"pull_requests_closed_count":182,"pull_request_authors_count":51,"issue_authors_count":49,"avg_comments_per_issue":1.3492063492063493,"avg_comments_per_pull_request":0.943127962085308,"merged_pull_requests_count":141,"bot_issues_count":2,"bot_pull_requests_count":41,"past_year_issues_count":10,"past_year_pull_requests_count":37,"past_year_avg_time_to_close_issue":1523424.5,"past_year_avg_time_to_close_pull_request":595800.9545454546,"past_year_issues_closed_count":4,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":14,"past_year_issue_authors_count":7,"past_year_avg_comments_per_issue":1.6,"past_year_avg_comments_per_pull_request":0.9459459459459459,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":7,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/issues","maintainers":[{"login":"jsha","count":59,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"},{"login":"mcpherrinm","count":28,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"aarongable","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aarongable"},{"login":"pgporada","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pgporada"}],"active_maintainers":[{"login":"mcpherrinm","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"jsha","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGo-jose%2Fgo-jose/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGo-jose%2Fgo-jose/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGo-jose%2Fgo-jose/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGo-jose%2Fgo-jose/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGo-jose%2Fgo-jose/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGo-jose%2Fgo-jose/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2154697,"maintainers_count":0,"namespaces_count":791356,"keywords_count":113139,"github":"golang","metadata":{"funded_packages_count":53897},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-01T05:12:27.241Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14446897,"name":"github.com/go-jose/go-jose/v3/json","ecosystem":"go","description":"Package json implements encoding and decoding of JSON objects as defined in\nRFC 4627. The mapping between JSON objects and Go values is described\nin the documentation for the Marshal and Unmarshal functions.\n\nSee \"JSON and Go\" for an introduction to this package:\nhttps://golang.org/doc/articles/json_and_go.html","homepage":"https://github.com/go-jose/go-jose","licenses":"Apache-2.0, BSD-3-Clause","normalized_licenses":["Apache-2.0","BSD-3-Clause"],"repository_url":"https://github.com/go-jose/go-jose","keywords_array":[],"namespace":"github.com/go-jose/go-jose/v3","versions_count":7,"first_release_published_at":"2026-05-14T13:15:41.482Z","latest_release_published_at":"2026-05-14T13:15:41.482Z","latest_release_number":"v3.0.5","last_synced_at":"2026-05-14T13:16:04.893Z","created_at":"2026-05-14T13:15:04.356Z","updated_at":"2026-05-14T14:21:21.139Z","registry_url":"https://pkg.go.dev/github.com/go-jose/go-jose/v3/json","install_command":"go get github.com/go-jose/go-jose/v3/json","documentation_url":"https://pkg.go.dev/github.com/go-jose/go-jose/v3/json#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-14T14:21:21.106Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/github.com/go-jose/go-jose/v3/json","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-jose/go-jose/v3/json","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-jose/go-jose/v3/json","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-jose/go-jose/v3/json/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv3%2Fjson/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv3%2Fjson/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv3%2Fjson/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv3%2Fjson/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv3%2Fjson/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv3%2Fjson/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2154697,"maintainers_count":0,"namespaces_count":791356,"keywords_count":113139,"github":"golang","metadata":{"funded_packages_count":53897},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-01T05:12:27.241Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14446894,"name":"github.com/go-jose/go-jose/v3/cipher","ecosystem":"go","description":"","homepage":"https://github.com/go-jose/go-jose","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-jose/go-jose","keywords_array":[],"namespace":"github.com/go-jose/go-jose/v3","versions_count":7,"first_release_published_at":"2026-05-14T13:15:34.595Z","latest_release_published_at":"2026-05-14T13:15:34.595Z","latest_release_number":"v3.0.5","last_synced_at":"2026-05-14T13:16:01.739Z","created_at":"2026-05-14T13:14:58.245Z","updated_at":"2026-05-14T14:21:21.237Z","registry_url":"https://pkg.go.dev/github.com/go-jose/go-jose/v3/cipher","install_command":"go get github.com/go-jose/go-jose/v3/cipher","documentation_url":"https://pkg.go.dev/github.com/go-jose/go-jose/v3/cipher#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-14T14:21:20.988Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/github.com/go-jose/go-jose/v3/cipher","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-jose/go-jose/v3/cipher","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-jose/go-jose/v3/cipher","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-jose/go-jose/v3/cipher/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv3%2Fcipher/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv3%2Fcipher/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv3%2Fcipher/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv3%2Fcipher/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv3%2Fcipher/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv3%2Fcipher/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2154697,"maintainers_count":0,"namespaces_count":791356,"keywords_count":113139,"github":"golang","metadata":{"funded_packages_count":53897},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-01T05:12:27.241Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14448031,"name":"gopkg.in/go-jose/go-jose.v2/json","ecosystem":"go","description":"Package json implements encoding and decoding of JSON objects as defined in\nRFC 4627. The mapping between JSON objects and Go values is described\nin the documentation for the Marshal and Unmarshal functions.\n\nSee \"JSON and Go\" for an introduction to this package:\nhttps://golang.org/doc/articles/json_and_go.html","homepage":"https://github.com/go-jose/go-jose","licenses":"Apache-2.0, BSD-3-Clause","normalized_licenses":["Apache-2.0","BSD-3-Clause"],"repository_url":"https://github.com/go-jose/go-jose","keywords_array":[],"namespace":"gopkg.in/go-jose/go-jose.v2","versions_count":25,"first_release_published_at":"2026-05-14T20:11:22.090Z","latest_release_published_at":"2026-05-14T20:11:22.090Z","latest_release_number":"v2.6.3","last_synced_at":"2026-05-14T20:11:23.009Z","created_at":"2026-05-14T20:11:21.184Z","updated_at":"2026-05-14T20:11:23.009Z","registry_url":"https://pkg.go.dev/gopkg.in/go-jose/go-jose.v2/json","install_command":"go get gopkg.in/go-jose/go-jose.v2/json","documentation_url":"https://pkg.go.dev/gopkg.in/go-jose/go-jose.v2/json#section-documentation","metadata":{},"repo_metadata":{"id":39926448,"uuid":"285864234","full_name":"go-jose/go-jose","owner":"go-jose","description":"An implementation of JOSE standards (JWE, JWS, JWT) in Go","archived":false,"fork":false,"pushed_at":"2026-04-02T17:34:41.000Z","size":1351,"stargazers_count":503,"open_issues_count":34,"forks_count":116,"subscribers_count":6,"default_branch":"main","last_synced_at":"2026-05-12T02:22:21.400Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"square/go-jose","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-jose.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-08-07T15:38:05.000Z","updated_at":"2026-05-09T13:53:54.000Z","dependencies_parsed_at":"2023-12-19T01:34:59.075Z","dependency_job_id":"442666f1-5d20-4824-979f-746922d427b0","html_url":"https://github.com/go-jose/go-jose","commit_stats":null,"previous_names":[],"tags_count":53,"template":false,"template_full_name":null,"purl":"pkg:github/go-jose/go-jose","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/sbom","scorecard":{"id":432027,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-jose/go-jose","commit":"14239fdb15b88e1c42e41621ef24f1112cf31b5a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.6,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"10 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/cram.yml:1","Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/cram.yml:19","Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned","Info: 0 out of 1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:36:11.883Z","repository_id":39926448,"created_at":"2025-08-19T03:36:11.883Z","updated_at":"2025-08-19T03:36:11.883Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33041374,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-13T13:14:54.681Z","status":"online","status_checked_at":"2026-05-14T02:00:06.663Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-05-14T20:11:22.685Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.907617464613679},"purl":"pkg:golang/gopkg.in/go-jose/go-jose.v2/json","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/gopkg.in/go-jose/go-jose.v2/json","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/gopkg.in/go-jose/go-jose.v2/json","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/gopkg.in/go-jose/go-jose.v2/json/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-05-12T02:12:51.127Z","issues_count":66,"pull_requests_count":214,"avg_time_to_close_issue":12780418.921052631,"avg_time_to_close_pull_request":3990082.3532608696,"issues_closed_count":38,"pull_requests_closed_count":184,"pull_request_authors_count":51,"issue_authors_count":52,"avg_comments_per_issue":1.378787878787879,"avg_comments_per_pull_request":0.9485981308411215,"merged_pull_requests_count":142,"bot_issues_count":2,"bot_pull_requests_count":41,"past_year_issues_count":8,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":781562.0,"past_year_avg_time_to_close_pull_request":539521.8888888889,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":9,"past_year_pull_request_authors_count":10,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":2.25,"past_year_avg_comments_per_pull_request":1.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":5,"past_year_merged_pull_requests_count":8,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/issues","maintainers":[{"login":"jsha","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"},{"login":"mcpherrinm","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"aarongable","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aarongable"},{"login":"pgporada","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pgporada"}],"active_maintainers":[{"login":"mcpherrinm","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"jsha","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-jose%2Fgo-jose.v2%2Fjson/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-jose%2Fgo-jose.v2%2Fjson/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-jose%2Fgo-jose.v2%2Fjson/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-jose%2Fgo-jose.v2%2Fjson/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-jose%2Fgo-jose.v2%2Fjson/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-jose%2Fgo-jose.v2%2Fjson/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2154697,"maintainers_count":0,"namespaces_count":791356,"keywords_count":113139,"github":"golang","metadata":{"funded_packages_count":53897},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-01T05:12:27.241Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14448034,"name":"gopkg.in/go-jose/go-jose.v2/jwt","ecosystem":"go","description":"Package jwt provides an implementation of the JSON Web Token standard.","homepage":"https://github.com/go-jose/go-jose","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-jose/go-jose","keywords_array":[],"namespace":"gopkg.in/go-jose/go-jose.v2","versions_count":25,"first_release_published_at":"2026-05-14T20:11:23.239Z","latest_release_published_at":"2026-05-14T20:11:23.239Z","latest_release_number":"v2.6.3","last_synced_at":"2026-05-14T20:11:24.363Z","created_at":"2026-05-14T20:11:22.324Z","updated_at":"2026-05-14T20:31:41.798Z","registry_url":"https://pkg.go.dev/gopkg.in/go-jose/go-jose.v2/jwt","install_command":"go get gopkg.in/go-jose/go-jose.v2/jwt","documentation_url":"https://pkg.go.dev/gopkg.in/go-jose/go-jose.v2/jwt#section-documentation","metadata":{},"repo_metadata":{"id":39926448,"uuid":"285864234","full_name":"go-jose/go-jose","owner":"go-jose","description":"An implementation of JOSE standards (JWE, JWS, JWT) in Go","archived":false,"fork":false,"pushed_at":"2026-04-02T17:34:41.000Z","size":1351,"stargazers_count":503,"open_issues_count":34,"forks_count":116,"subscribers_count":6,"default_branch":"main","last_synced_at":"2026-05-12T02:22:21.400Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"square/go-jose","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-jose.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-08-07T15:38:05.000Z","updated_at":"2026-05-09T13:53:54.000Z","dependencies_parsed_at":"2023-12-19T01:34:59.075Z","dependency_job_id":"442666f1-5d20-4824-979f-746922d427b0","html_url":"https://github.com/go-jose/go-jose","commit_stats":null,"previous_names":[],"tags_count":53,"template":false,"template_full_name":null,"purl":"pkg:github/go-jose/go-jose","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/sbom","scorecard":{"id":432027,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-jose/go-jose","commit":"14239fdb15b88e1c42e41621ef24f1112cf31b5a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.6,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"10 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/cram.yml:1","Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/cram.yml:19","Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned","Info: 0 out of 1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:36:11.883Z","repository_id":39926448,"created_at":"2025-08-19T03:36:11.883Z","updated_at":"2025-08-19T03:36:11.883Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33041374,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-13T13:14:54.681Z","status":"online","status_checked_at":"2026-05-14T02:00:06.663Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-05-14T20:11:22.673Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":3.099800071706804,"forks_count":2.717519599002836,"docker_downloads_count":null,"average":3.9081386499842496},"purl":"pkg:golang/gopkg.in/go-jose/go-jose.v2/jwt","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/gopkg.in/go-jose/go-jose.v2/jwt","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/gopkg.in/go-jose/go-jose.v2/jwt","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/gopkg.in/go-jose/go-jose.v2/jwt/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-05-12T02:12:51.127Z","issues_count":66,"pull_requests_count":214,"avg_time_to_close_issue":12780418.921052631,"avg_time_to_close_pull_request":3990082.3532608696,"issues_closed_count":38,"pull_requests_closed_count":184,"pull_request_authors_count":51,"issue_authors_count":52,"avg_comments_per_issue":1.378787878787879,"avg_comments_per_pull_request":0.9485981308411215,"merged_pull_requests_count":142,"bot_issues_count":2,"bot_pull_requests_count":41,"past_year_issues_count":8,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":781562.0,"past_year_avg_time_to_close_pull_request":539521.8888888889,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":9,"past_year_pull_request_authors_count":10,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":2.25,"past_year_avg_comments_per_pull_request":1.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":5,"past_year_merged_pull_requests_count":8,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/issues","maintainers":[{"login":"jsha","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"},{"login":"mcpherrinm","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"aarongable","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aarongable"},{"login":"pgporada","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pgporada"}],"active_maintainers":[{"login":"mcpherrinm","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"jsha","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-jose%2Fgo-jose.v2%2Fjwt/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-jose%2Fgo-jose.v2%2Fjwt/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-jose%2Fgo-jose.v2%2Fjwt/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-jose%2Fgo-jose.v2%2Fjwt/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-jose%2Fgo-jose.v2%2Fjwt/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-jose%2Fgo-jose.v2%2Fjwt/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2154697,"maintainers_count":0,"namespaces_count":791356,"keywords_count":113139,"github":"golang","metadata":{"funded_packages_count":53897},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-01T05:12:27.241Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14448033,"name":"gopkg.in/go-jose/go-jose.v2/cipher","ecosystem":"go","description":"","homepage":"https://github.com/go-jose/go-jose","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-jose/go-jose","keywords_array":[],"namespace":"gopkg.in/go-jose/go-jose.v2","versions_count":25,"first_release_published_at":"2026-05-14T20:11:23.056Z","latest_release_published_at":"2026-05-14T20:11:23.056Z","latest_release_number":"v2.6.3","last_synced_at":"2026-05-14T20:11:24.211Z","created_at":"2026-05-14T20:11:22.042Z","updated_at":"2026-05-14T20:31:41.795Z","registry_url":"https://pkg.go.dev/gopkg.in/go-jose/go-jose.v2/cipher","install_command":"go get gopkg.in/go-jose/go-jose.v2/cipher","documentation_url":"https://pkg.go.dev/gopkg.in/go-jose/go-jose.v2/cipher#section-documentation","metadata":{},"repo_metadata":{"id":39926448,"uuid":"285864234","full_name":"go-jose/go-jose","owner":"go-jose","description":"An implementation of JOSE standards (JWE, JWS, JWT) in Go","archived":false,"fork":false,"pushed_at":"2026-04-02T17:34:41.000Z","size":1351,"stargazers_count":503,"open_issues_count":34,"forks_count":116,"subscribers_count":6,"default_branch":"main","last_synced_at":"2026-05-12T02:22:21.400Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"square/go-jose","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-jose.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-08-07T15:38:05.000Z","updated_at":"2026-05-09T13:53:54.000Z","dependencies_parsed_at":"2023-12-19T01:34:59.075Z","dependency_job_id":"442666f1-5d20-4824-979f-746922d427b0","html_url":"https://github.com/go-jose/go-jose","commit_stats":null,"previous_names":[],"tags_count":53,"template":false,"template_full_name":null,"purl":"pkg:github/go-jose/go-jose","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/sbom","scorecard":{"id":432027,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-jose/go-jose","commit":"14239fdb15b88e1c42e41621ef24f1112cf31b5a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.6,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"10 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/cram.yml:1","Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/cram.yml:19","Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned","Info: 0 out of 1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:36:11.883Z","repository_id":39926448,"created_at":"2025-08-19T03:36:11.883Z","updated_at":"2025-08-19T03:36:11.883Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33041374,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-13T13:14:54.681Z","status":"online","status_checked_at":"2026-05-14T02:00:06.663Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-05-14T20:11:22.667Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.067188149279545,"dependent_packages_count":4.748046779947814,"stargazers_count":3.099800071706804,"forks_count":2.717519599002836,"docker_downloads_count":null,"average":3.9081386499842496},"purl":"pkg:golang/gopkg.in/go-jose/go-jose.v2/cipher","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/gopkg.in/go-jose/go-jose.v2/cipher","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/gopkg.in/go-jose/go-jose.v2/cipher","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/gopkg.in/go-jose/go-jose.v2/cipher/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-05-12T02:12:51.127Z","issues_count":66,"pull_requests_count":214,"avg_time_to_close_issue":12780418.921052631,"avg_time_to_close_pull_request":3990082.3532608696,"issues_closed_count":38,"pull_requests_closed_count":184,"pull_request_authors_count":51,"issue_authors_count":52,"avg_comments_per_issue":1.378787878787879,"avg_comments_per_pull_request":0.9485981308411215,"merged_pull_requests_count":142,"bot_issues_count":2,"bot_pull_requests_count":41,"past_year_issues_count":8,"past_year_pull_requests_count":24,"past_year_avg_time_to_close_issue":781562.0,"past_year_avg_time_to_close_pull_request":539521.8888888889,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":9,"past_year_pull_request_authors_count":10,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":2.25,"past_year_avg_comments_per_pull_request":1.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":5,"past_year_merged_pull_requests_count":8,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/issues","maintainers":[{"login":"jsha","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"},{"login":"mcpherrinm","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"aarongable","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aarongable"},{"login":"pgporada","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pgporada"}],"active_maintainers":[{"login":"mcpherrinm","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"jsha","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-jose%2Fgo-jose.v2%2Fcipher/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-jose%2Fgo-jose.v2%2Fcipher/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-jose%2Fgo-jose.v2%2Fcipher/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-jose%2Fgo-jose.v2%2Fcipher/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-jose%2Fgo-jose.v2%2Fcipher/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/gopkg.in%2Fgo-jose%2Fgo-jose.v2%2Fcipher/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2154697,"maintainers_count":0,"namespaces_count":791356,"keywords_count":113139,"github":"golang","metadata":{"funded_packages_count":53897},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-01T05:12:27.241Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":8610418,"name":"github.com/go-jose/go-jose/v4","ecosystem":"go","description":"Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards.","homepage":"https://github.com/go-jose/go-jose","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-jose/go-jose","keywords_array":[],"namespace":"github.com/go-jose/go-jose","versions_count":11,"first_release_published_at":"2024-02-26T22:32:37.000Z","latest_release_published_at":"2026-03-31T23:33:50.000Z","latest_release_number":"v4.1.4","last_synced_at":"2026-05-31T22:11:53.925Z","created_at":"2023-12-01T01:28:55.773Z","updated_at":"2026-06-01T12:42:07.327Z","registry_url":"https://pkg.go.dev/github.com/go-jose/go-jose/v4","install_command":"go get github.com/go-jose/go-jose/v4","documentation_url":"https://pkg.go.dev/github.com/go-jose/go-jose/v4#section-documentation","metadata":{},"repo_metadata":{"id":39926448,"uuid":"285864234","full_name":"go-jose/go-jose","owner":"go-jose","description":"An implementation of JOSE standards (JWE, JWS, JWT) in Go","archived":false,"fork":false,"pushed_at":"2026-01-22T19:02:25.000Z","size":1244,"stargazers_count":490,"open_issues_count":32,"forks_count":109,"subscribers_count":6,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.210Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"square/go-jose","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-jose.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-08-07T15:38:05.000Z","updated_at":"2026-03-19T22:13:06.000Z","dependencies_parsed_at":"2023-12-19T01:34:59.075Z","dependency_job_id":"442666f1-5d20-4824-979f-746922d427b0","html_url":"https://github.com/go-jose/go-jose","commit_stats":null,"previous_names":[],"tags_count":50,"template":false,"template_full_name":null,"purl":"pkg:github/go-jose/go-jose","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/sbom","scorecard":{"id":432027,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-jose/go-jose","commit":"14239fdb15b88e1c42e41621ef24f1112cf31b5a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.6,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"10 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/cram.yml:1","Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/cram.yml:19","Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned","Info: 0 out of 1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:36:11.883Z","repository_id":39926448,"created_at":"2025-08-19T03:36:11.883Z","updated_at":"2025-08-19T03:36:11.883Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30897934,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-jose","name":"go-jose","uuid":"68707210","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/68707210?v=4","repositories_count":1,"last_synced_at":"2023-03-09T05:50:53.821Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/go-jose","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-18T19:12:47.616Z","updated_at":"2023-03-09T05:50:53.832Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose/repositories"},"tags":[{"name":"v4.1.2","sha":"a1565a41aa008ae6545e0f50a636d254de5b4596","kind":"commit","published_at":"2025-07-18T17:04:53.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.1.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.2/manifests"},{"name":"v4.1.1","sha":"04339d94f057d27548371c00a7c801c4fc2cbcdd","kind":"commit","published_at":"2025-06-23T23:41:10.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.1.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.1/manifests"},{"name":"v4.1.0","sha":"4f005daa10d11cacd7376358a5fe5d0c1c0ee487","kind":"commit","published_at":"2025-04-07T19:12:33.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.1.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.0/manifests"},{"name":"v3.0.4","sha":"5253038e3b5f64a2200b5b6c72107bf9823f4358","kind":"commit","published_at":"2025-02-26T19:59:49.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.4","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.4/manifests"},{"name":"v4.0.5","sha":"99b346cec4e86d102284642c5dcbe9bb0cacfc22","kind":"commit","published_at":"2025-02-24T20:06:34.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.5","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.5/manifests"},{"name":"v4.0.4","sha":"15bc4c2ac4575ad865f078390db61d44530f985d","kind":"commit","published_at":"2024-07-27T00:46:37.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.4","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.4/manifests"},{"name":"v4.0.3","sha":"db085150a549dadd76f4d2ce2ac3976951cc461e","kind":"commit","published_at":"2024-07-09T19:53:13.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.3/manifests"},{"name":"v4.0.2","sha":"ca3a2783c470c40cc490f801fc87ff39b92b25d6","kind":"commit","published_at":"2024-05-13T21:25:42.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.2/manifests"},{"name":"v2.6.3","sha":"0dd4dd541c665fb292d664f77604ba694726f298","kind":"commit","published_at":"2024-03-07T22:25:21.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.6.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.6.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.6.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.3/manifests"},{"name":"v3.0.3","sha":"add6a284ea0f844fd6628cba637be5451fe4b28a","kind":"commit","published_at":"2024-03-07T21:35:47.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.3/manifests"},{"name":"v4.0.1","sha":"f4c051a0653d78199a053892f7619ebf96339502","kind":"commit","published_at":"2024-03-07T19:46:13.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.1/manifests"},{"name":"v1.1.3","sha":"5778a03bd4ba705b3755010af88a21f5acd63664","kind":"commit","published_at":"2024-03-07T01:13:42.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.1.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.3/manifests"},{"name":"v4.0.0","sha":"2658f467ede28af28a7883041677ff460dda3f69","kind":"commit","published_at":"2024-02-26T22:32:37.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.0/manifests"},{"name":"v3.0.2","sha":"863f73b9dbfcc5944d74d5106992e3cf949c4557","kind":"commit","published_at":"2024-02-23T23:30:51.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.2/manifests"},{"name":"v2.6.2","sha":"a3d307244c3bc50b25a71aa0688764c32ec419c7","kind":"commit","published_at":"2023-12-08T21:16:55.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.6.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.6.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.6.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.2/manifests"},{"name":"v3.0.1","sha":"47edce0854d533ac27795c9befd90b1f7ef87554","kind":"commit","published_at":"2023-11-08T00:39:09.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.1/manifests"},{"name":"v2.6.1","sha":"e0deb20b7736bf31a2cee85c5d2b682c6534e000","kind":"tag","published_at":"2023-01-26T02:01:16.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.6.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.1/manifests"},{"name":"v3.0.0","sha":"a563785af9481120d75c419acf7bdd86a07cc1f1","kind":"tag","published_at":"2021-07-31T20:37:49.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.0/manifests"},{"name":"v3.0.0-rc.1","sha":"a563785af9481120d75c419acf7bdd86a07cc1f1","kind":"tag","published_at":"2021-06-05T21:22:44.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.0-rc.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.0-rc.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.0-rc.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.0-rc.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.0-rc.1/manifests"},{"name":"v2.6.0","sha":"a10ff54e00bc6e833bf549e04ae976f0fe8ea2fd","kind":"tag","published_at":"2021-06-05T20:58:19.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.6.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.0/manifests"},{"name":"v2.5.1","sha":"3a5ee095dcb5030a9de84fb92c222ac652fff176","kind":"tag","published_at":"2020-05-01T02:02:59.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.5.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.5.1/manifests"},{"name":"v2.5.0","sha":"2204b3eaf539b5d4ad438a05b5e0a10e85816bf9","kind":"tag","published_at":"2020-04-13T02:15:29.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.5.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.5.0/manifests"},{"name":"v2.4.1","sha":"4ef0f1b175ccd65472d154e1207c4d7b8102545f","kind":"tag","published_at":"2019-12-16T20:56:51.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.4.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.4.1/manifests"},{"name":"v2.4.0","sha":"8fd82ff1d52a5162ff23c0a48e2c64a1fa4a3f8f","kind":"tag","published_at":"2019-10-23T04:08:19.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.4.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.4.0/manifests"},{"name":"v2.3.1","sha":"730df5f748271903322feb182be83b43ebbbe27d","kind":"tag","published_at":"2019-04-10T22:00:40.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.3.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.3.1/manifests"},{"name":"v2.3.0","sha":"628223f44a71f715d2881ea69afc795a1e9c01be","kind":"tag","published_at":"2019-02-27T00:05:37.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.3.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.3.0/manifests"},{"name":"v2.2.2","sha":"e94fb177d3668d35ab39c61cbb2f311550557e83","kind":"tag","published_at":"2019-01-02T21:08:35.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.2.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"72415094398e2f013bf50b76fd6de36df47938ea","kind":"tag","published_at":"2018-12-05T19:06:01.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.2.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"f61ac651e23224d43848a8dc387dee016d7eacf9","kind":"tag","published_at":"2018-11-30T00:37:18.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.2.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.0/manifests"},{"name":"v2.1.9","sha":"ef984e69dd356202fd4e4910d4d9c24468bdf0b8","kind":"tag","published_at":"2018-09-23T17:51:30.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.9","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.9/manifests"},{"name":"v2.1.8","sha":"8254d6c783765f38c8675fae4427a1fe73fbd09d","kind":"tag","published_at":"2018-08-08T17:29:30.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.8","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.8/manifests"},{"name":"v2.1.7","sha":"349dc03548930652802aadc09fb126e2b7cb6d80","kind":"tag","published_at":"2018-07-25T22:16:27.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.7","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.7/manifests"},{"name":"v1.1.2","sha":"56062818b5e15ee405eb8363f9498c7113e98337","kind":"tag","published_at":"2018-07-25T22:09:11.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.1.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.2/manifests"},{"name":"v2.1.6","sha":"76dd09796242edb5b897103a75df2645c028c960","kind":"tag","published_at":"2018-03-29T00:25:01.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.6","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.6/manifests"},{"name":"v2.1.5","sha":"552e98edab5d620205ff1a8960bf52a5a10aad03","kind":"tag","published_at":"2018-03-23T17:36:42.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.5","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.5/manifests"},{"name":"v1.1.1","sha":"6e50787b7338112747e64f32753fb4f9dbfb8f79","kind":"tag","published_at":"2018-03-23T00:52:00.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.1.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.1/manifests"},{"name":"v2.1.4","sha":"6ee92191fea850cdcab9a18867abf5f521cdbadb","kind":"tag","published_at":"2018-02-28T01:29:07.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.4","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.4/manifests"},{"name":"v2.1.3","sha":"f8f38de21b4dcd69d0413faf231983f5fd6634b1","kind":"tag","published_at":"2017-09-13T20:15:43.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.3/manifests"},{"name":"v2.1.2","sha":"b25e6cab129e4a54675b42ea49d38e9c33ade9e6","kind":"tag","published_at":"2017-06-07T21:53:41.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.2/manifests"},{"name":"v2.1.1","sha":"af13e1fbc7ac2df7f7eab54e5177104d546d0e9c","kind":"tag","published_at":"2017-05-03T23:45:58.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"d5683d954d08cd430460c651e2a2fff4f3b39f86","kind":"tag","published_at":"2017-02-24T23:57:24.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.0/manifests"},{"name":"v2.0.1","sha":"296c7f1463ec9b712176dc804dea0173d06dc728","kind":"tag","published_at":"2016-11-21T22:27:01.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.0.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"8c5257b2f658f86d174ae68c6a592eaf6a9608d9","kind":"tag","published_at":"2016-10-28T21:39:18.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.0.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.0.0/manifests"},{"name":"v1.1.0","sha":"aa2e30fdd1fe9dd3394119af66451ae790d50e0d","kind":"tag","published_at":"2016-09-23T00:23:00.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.1.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.0/manifests"},{"name":"v1.0.5","sha":"139276ceb5afbf13e636c44e9382f0ca75c12ba3","kind":"tag","published_at":"2016-09-03T19:23:47.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.5","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.5/manifests"},{"name":"v1.0.4","sha":"6e6dedab09005ebebd66b7cd4af9e8eada723c61","kind":"tag","published_at":"2016-08-31T22:15:56.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.4","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.4/manifests"},{"name":"v1.0.3","sha":"a3927f83df1b1516f9e9dec71839c93e6bcf1db0","kind":"tag","published_at":"2016-08-08T14:38:18.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.3/manifests"},{"name":"v1.0.2","sha":"e3f973b66b91445ec816dd7411ad1b6495a5a2fc","kind":"tag","published_at":"2016-05-02T22:58:07.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.2/manifests"},{"name":"v1.0.1","sha":"40d457b439244b546f023d056628e5184136899b","kind":"tag","published_at":"2016-03-29T20:36:57.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"7d9df93c5ee8a09ed250b3b2360972fa29b4bb3c","kind":"tag","published_at":"2016-03-26T06:33:02.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-05-23T09:09:33.649Z","dependent_packages_count":270,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":10.800882443101013,"dependent_packages_count":9.575613212525063,"stargazers_count":3.673668675612655,"forks_count":3.66043026639128,"docker_downloads_count":null,"average":6.9276486494075025},"purl":"pkg:golang/github.com/go-jose/go-jose/v4","advisories":[{"uuid":"GSA_kwCzR0hTQS03OGgyLTlmcngtMmptOM4ABUqy","url":"https://github.com/advisories/GHSA-78h2-9frx-2jm8","title":"Go JOSE Panics in JWE decryption","description":"### Impact\n\nDecrypting a JSON Web Encryption (JWE) object will panic if the `alg` field indicates a key wrapping algorithm ([one ending in `KW`](https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants), with the exception of `A128GCMKW`, `A192GCMKW`, and `A256GCMKW`) and the `encrypted_key` field is empty. The panic happens when `cipher.KeyUnwrap()` in `key_wrap.go` attempts to allocate a slice with a zero or negative length based on the length of the `encrypted_key`.\n\nThis code path is reachable from `ParseEncrypted()` / `ParseEncryptedJSON()` / `ParseEncryptedCompact()` followed by `Decrypt()` on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected.\n\nThis panic is also reachable by calling `cipher.KeyUnwrap()` directly with any `ciphertext` parameter less than 16 bytes long, but calling this function directly is less common.\n\nPanics can lead to denial of service.\n\n### Fixed In\n\n4.1.4 and v3.0.5\n\n### Workarounds\n\nIf the list of `keyAlgorithms` passed to `ParseEncrypted()` / `ParseEncryptedJSON()` / `ParseEncryptedCompact()` does not include key wrapping algorithms (those ending in `KW`), your application is unaffected.\n\nIf your application uses key wrapping, you can prevalidate to the JWE objects to ensure the `encrypted_key` field is nonempty. If your application accepts JWE Compact Serialization, apply that validation to the corresponding field of that serialization (the data between the first and second `.`).\n\n### Thanks\n\nThanks to Datadog's Security team for finding this issue.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-04-03T03:28:56.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":["https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8","https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants","https://nvd.nist.gov/vuln/detail/CVE-2026-34986","https://github.com/advisories/GHSA-78h2-9frx-2jm8"],"source_kind":"github","identifiers":["GHSA-78h2-9frx-2jm8","CVE-2026-34986"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-04-03T04:00:09.554Z","updated_at":"2026-05-27T16:01:47.330Z","epss_percentage":0.00035,"epss_percentile":0.1055,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03OGgyLTlmcngtMmptOM4ABUqy","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS03OGgyLTlmcngtMmptOM4ABUqy","packages":[{"ecosystem":"go","package_name":"github.com/go-jose/go-jose","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 2.6.3"}],"purl":"pkg:go/github.com%2Fgo-jose%2Fgo-jose"},{"ecosystem":"go","package_name":"github.com/go-jose/go-jose/v3","versions":[{"first_patched_version":"3.0.5","vulnerable_version_range":"\u003c 3.0.5"}],"purl":"pkg:go/github.com%2Fgo-jose%2Fgo-jose%2Fv3"},{"ecosystem":"go","package_name":"github.com/go-jose/go-jose/v4","versions":[{"first_patched_version":"4.1.4","vulnerable_version_range":"\u003c 4.1.4"}],"purl":"pkg:go/github.com%2Fgo-jose%2Fgo-jose%2Fv4"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03OGgyLTlmcngtMmptOM4ABUqy/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1jNmd3LXczOTgtaHY3OM4ABEvX","url":"https://github.com/advisories/GHSA-c6gw-w398-hv78","title":"DoS in go-jose Parsing","description":"### Impact\nWhen parsing compact JWS or JWE input, go-jose could use excessive memory. The code used strings.Split(token, \".\") to split JWT tokens, which is vulnerable to excessive memory consumption when processing maliciously crafted tokens with a large number of '.' characters. An attacker could exploit this by sending numerous malformed tokens, leading to memory exhaustion and a Denial of Service.\n\n### Patches\nVersion 4.0.5 fixes this issue\n\n### Workarounds\nApplications could pre-validate payloads passed to go-jose do not contain an excessive number of '.' characters.\n\n### References\nThis is the same sort of issue as in the golang.org/x/oauth2/jws package as CVE-2025-22868 and Go issue https://go.dev/issue/71490.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-02-24T22:49:19.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.9,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","references":["https://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78","https://github.com/golang/go/issues/71490","https://github.com/go-jose/go-jose/commit/99b346cec4e86d102284642c5dcbe9bb0cacfc22","https://go.dev/issue/71490","https://nvd.nist.gov/vuln/detail/CVE-2025-27144","https://github.com/go-jose/go-jose/releases/tag/v4.0.5","https://github.com/advisories/GHSA-c6gw-w398-hv78"],"source_kind":"github","identifiers":["GHSA-c6gw-w398-hv78","CVE-2025-27144"],"repository_url":"https://github.com/go-jose/go-jose","blast_radius":23.087134638510676,"created_at":"2025-02-24T23:07:30.139Z","updated_at":"2026-05-28T19:06:36.524Z","epss_percentage":0.00101,"epss_percentile":0.2731,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jNmd3LXczOTgtaHY3OM4ABEvX","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1jNmd3LXczOTgtaHY3OM4ABEvX","packages":[{"ecosystem":"go","package_name":"github.com/go-jose/go-jose","versions":[{"first_patched_version":"3.0.4","vulnerable_version_range":"\u003c 3.0.4"}],"purl":"pkg:go/github.com%2Fgo-jose%2Fgo-jose"},{"ecosystem":"go","package_name":"github.com/go-jose/go-jose/v3","versions":[{"first_patched_version":"3.0.4","vulnerable_version_range":"\u003c 3.0.4"}],"purl":"pkg:go/github.com%2Fgo-jose%2Fgo-jose%2Fv3"},{"ecosystem":"go","package_name":"github.com/go-jose/go-jose/v4","versions":[{"first_patched_version":"4.0.5","vulnerable_version_range":"\u003c 4.0.5"}],"purl":"pkg:go/github.com%2Fgo-jose%2Fgo-jose%2Fv4"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jNmd3LXczOTgtaHY3OM4ABEvX/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1jNXEyLTdyNGMtbXY2Z84AA51M","url":"https://github.com/advisories/GHSA-c5q2-7r4c-mv6g","title":"Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)","description":"### Impact\nAn attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Those functions now return an error if the decompressed data would exceed 250kB or 10x the compressed size (whichever is larger). Thanks to Enze Wang@Alioth and Jianjun Chen@Zhongguancun Lab (@zer0yu and @chenjj) for reporting.\n\n### Patches\nThe problem is fixed in the following packages and versions:\n- github.com/go-jose/go-jose/v4 version 4.0.1\n- github.com/go-jose/go-jose/v3 version 3.0.3\n- gopkg.in/go-jose/go-jose.v2 version 2.6.3\n\nThe problem will not be fixed in the following package because the package is archived:\n- gopkg.in/square/go-jose.v2","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2024-03-07T22:54:44.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","references":["https://github.com/go-jose/go-jose/security/advisories/GHSA-c5q2-7r4c-mv6g","https://github.com/go-jose/go-jose/commit/0dd4dd541c665fb292d664f77604ba694726f298","https://github.com/go-jose/go-jose/commit/add6a284ea0f844fd6628cba637be5451fe4b28a","https://github.com/go-jose/go-jose/commit/f4c051a0653d78199a053892f7619ebf96339502","https://nvd.nist.gov/vuln/detail/CVE-2024-28180","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXKGNCRU7OTM5AHC7YIYBNOWI742PRMY","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XJDO5VSIAOGT2WP63AXAAWNRSVJCNCRH","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I6MMWFBOXJA6ZCXNVPDFJ4XMK5PVG5RG","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJO2U5ACZVACNQXJ5EBRFLFW6DP5BROY","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IJ6LAJJ2FTA2JVVOACCV5RZTOIZLXUNJ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JNPMXL36YGS3GQEVI3Q5HKHJ7YAAQXL5","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MSOMHDKRPU3A2JEMRODT2IREDFBLVPGS","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UG5FSEYJ3GP27FZXC5YAAMMEC5XWKJHG","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GD2GSBQTBLYADASUBHHZV2CZPTSLIPQJ","https://github.com/advisories/GHSA-c5q2-7r4c-mv6g"],"source_kind":"github","identifiers":["GHSA-c5q2-7r4c-mv6g","CVE-2024-28180"],"repository_url":"https://github.com/go-jose/go-jose","blast_radius":0.0,"created_at":"2024-03-07T23:04:42.494Z","updated_at":"2026-06-01T12:06:24.338Z","epss_percentage":0.04986,"epss_percentile":0.89809,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jNXEyLTdyNGMtbXY2Z84AA51M","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1jNXEyLTdyNGMtbXY2Z84AA51M","packages":[{"ecosystem":"go","package_name":"gopkg.in/go-jose/go-jose.v2","versions":[{"first_patched_version":"2.6.3","vulnerable_version_range":"\u003c 2.6.3"}],"purl":"pkg:go/gopkg.in%2Fgo-jose%2Fgo-jose.v2","statistics":{"dependent_packages_count":200,"dependent_repos_count":289,"downloads":null,"downloads_period":null},"affected_versions":["v2.0.0","v2.0.1","v2.1.0","v2.1.1","v2.1.2","v2.1.3","v2.1.4","v2.1.5","v2.1.6","v2.1.7","v2.1.8","v2.1.9","v2.2.0","v2.2.1","v2.2.2","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.5.0","v2.5.1","v2.6.0","v2.6.1","v2.6.2"],"unaffected_versions":["v2.6.3"]},{"ecosystem":"go","package_name":"github.com/go-jose/go-jose/v3","versions":[{"first_patched_version":"3.0.3","vulnerable_version_range":"\u003c 3.0.3"}],"purl":"pkg:go/github.com%2Fgo-jose%2Fgo-jose%2Fv3","statistics":{"dependent_packages_count":2511,"dependent_repos_count":2218,"downloads":null,"downloads_period":null},"affected_versions":["v3.0.0","v3.0.0-rc.1","v3.0.1","v3.0.2"],"unaffected_versions":["v3.0.3","v3.0.4","v3.0.5"]},{"ecosystem":"go","package_name":"github.com/go-jose/go-jose/v4","versions":[{"first_patched_version":"4.0.1","vulnerable_version_range":"\u003c 4.0.1"}],"purl":"pkg:go/github.com%2Fgo-jose%2Fgo-jose%2Fv4","statistics":{"dependent_packages_count":270,"dependent_repos_count":0,"downloads":null,"downloads_period":null},"affected_versions":["v4.0.0"],"unaffected_versions":["v4.0.1","v4.0.2","v4.0.3","v4.0.4","v4.0.5","v4.1.0","v4.1.1","v4.1.2","v4.1.3","v4.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jNXEyLTdyNGMtbXY2Z84AA51M/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-jose/go-jose/v4","docker_dependents_count":2,"docker_downloads_count":512887,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-jose/go-jose/v4","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-jose/go-jose/v4/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-11T23:18:31.995Z","issues_count":63,"pull_requests_count":211,"avg_time_to_close_issue":10558985.378378378,"avg_time_to_close_pull_request":3580172.9175824174,"issues_closed_count":37,"pull_requests_closed_count":182,"pull_request_authors_count":51,"issue_authors_count":49,"avg_comments_per_issue":1.3492063492063493,"avg_comments_per_pull_request":0.943127962085308,"merged_pull_requests_count":141,"bot_issues_count":2,"bot_pull_requests_count":41,"past_year_issues_count":10,"past_year_pull_requests_count":37,"past_year_avg_time_to_close_issue":1523424.5,"past_year_avg_time_to_close_pull_request":595800.9545454546,"past_year_issues_closed_count":4,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":14,"past_year_issue_authors_count":7,"past_year_avg_comments_per_issue":1.6,"past_year_avg_comments_per_pull_request":0.9459459459459459,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":7,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/issues","maintainers":[{"login":"jsha","count":59,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"},{"login":"mcpherrinm","count":28,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"aarongable","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aarongable"},{"login":"pgporada","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pgporada"}],"active_maintainers":[{"login":"mcpherrinm","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"jsha","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv4/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv4/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv4/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv4/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv4/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv4/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2154697,"maintainers_count":0,"namespaces_count":791356,"keywords_count":113139,"github":"golang","metadata":{"funded_packages_count":53897},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-01T05:12:27.241Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14431011,"name":"github.com/go-jose/go-jose/v3/jwt","ecosystem":"go","description":"Package jwt provides an implementation of the JSON Web Token standard.","homepage":"https://github.com/go-jose/go-jose","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-jose/go-jose","keywords_array":[],"namespace":"github.com/go-jose/go-jose/v3","versions_count":7,"first_release_published_at":"2026-05-12T05:39:20.610Z","latest_release_published_at":"2026-05-12T05:39:20.610Z","latest_release_number":"v3.0.5","last_synced_at":"2026-05-12T05:39:21.580Z","created_at":"2026-05-12T05:39:08.429Z","updated_at":"2026-05-12T05:39:21.580Z","registry_url":"https://pkg.go.dev/github.com/go-jose/go-jose/v3/jwt","install_command":"go get github.com/go-jose/go-jose/v3/jwt","documentation_url":"https://pkg.go.dev/github.com/go-jose/go-jose/v3/jwt#section-documentation","metadata":{},"repo_metadata":{"id":39926448,"uuid":"285864234","full_name":"go-jose/go-jose","owner":"go-jose","description":"An implementation of JOSE standards (JWE, JWS, JWT) in Go","archived":false,"fork":false,"pushed_at":"2026-04-01T00:02:19.000Z","size":1246,"stargazers_count":492,"open_issues_count":35,"forks_count":110,"subscribers_count":6,"default_branch":"main","last_synced_at":"2026-04-01T01:51:26.580Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"square/go-jose","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-jose.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-08-07T15:38:05.000Z","updated_at":"2026-03-31T23:33:57.000Z","dependencies_parsed_at":"2023-12-19T01:34:59.075Z","dependency_job_id":"442666f1-5d20-4824-979f-746922d427b0","html_url":"https://github.com/go-jose/go-jose","commit_stats":null,"previous_names":[],"tags_count":53,"template":false,"template_full_name":null,"purl":"pkg:github/go-jose/go-jose","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/sbom","scorecard":{"id":432027,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-jose/go-jose","commit":"14239fdb15b88e1c42e41621ef24f1112cf31b5a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.6,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"10 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/cram.yml:1","Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/cram.yml:19","Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned","Info: 0 out of 1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:36:11.883Z","repository_id":39926448,"created_at":"2025-08-19T03:36:11.883Z","updated_at":"2025-08-19T03:36:11.883Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":32920417,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-11T17:09:15.040Z","status":"online","status_checked_at":"2026-05-12T02:00:06.338Z","response_time":102,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-05-12T05:39:08.794Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.075376507577022,"dependent_packages_count":4.7556286312616125,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.915502569419317},"purl":"pkg:golang/github.com/go-jose/go-jose/v3/jwt","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-jose/go-jose/v3/jwt","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-jose/go-jose/v3/jwt","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-jose/go-jose/v3/jwt/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv3%2Fjwt/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv3%2Fjwt/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv3%2Fjwt/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv3%2Fjwt/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv3%2Fjwt/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv3%2Fjwt/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2154697,"maintainers_count":0,"namespaces_count":791356,"keywords_count":113139,"github":"golang","metadata":{"funded_packages_count":53897},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-01T05:12:27.241Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14431017,"name":"github.com/go-jose/go-jose/v4/cipher","ecosystem":"go","description":"","homepage":"https://github.com/go-jose/go-jose","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-jose/go-jose","keywords_array":[],"namespace":"github.com/go-jose/go-jose/v4","versions_count":11,"first_release_published_at":"2026-05-12T05:39:27.700Z","latest_release_published_at":"2026-05-12T05:39:27.700Z","latest_release_number":"v4.1.4","last_synced_at":"2026-05-12T05:39:29.561Z","created_at":"2026-05-12T05:39:09.190Z","updated_at":"2026-05-12T05:39:29.562Z","registry_url":"https://pkg.go.dev/github.com/go-jose/go-jose/v4/cipher","install_command":"go get github.com/go-jose/go-jose/v4/cipher","documentation_url":"https://pkg.go.dev/github.com/go-jose/go-jose/v4/cipher#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-12T05:39:09.378Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.075376507577022,"dependent_packages_count":4.7556286312616125,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.915502569419317},"purl":"pkg:golang/github.com/go-jose/go-jose/v4/cipher","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-jose/go-jose/v4/cipher","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-jose/go-jose/v4/cipher","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-jose/go-jose/v4/cipher/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv4%2Fcipher/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv4%2Fcipher/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv4%2Fcipher/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv4%2Fcipher/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv4%2Fcipher/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv4%2Fcipher/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2154697,"maintainers_count":0,"namespaces_count":791356,"keywords_count":113139,"github":"golang","metadata":{"funded_packages_count":53897},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-01T05:12:27.241Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14431013,"name":"github.com/go-jose/go-jose/v4/jwt","ecosystem":"go","description":"Package jwt provides an implementation of the JSON Web Token standard.","homepage":"https://github.com/go-jose/go-jose","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-jose/go-jose","keywords_array":[],"namespace":"github.com/go-jose/go-jose/v4","versions_count":11,"first_release_published_at":"2026-05-12T05:39:23.890Z","latest_release_published_at":"2026-05-12T05:39:23.890Z","latest_release_number":"v4.1.4","last_synced_at":"2026-05-12T05:39:24.807Z","created_at":"2026-05-12T05:39:08.518Z","updated_at":"2026-05-12T05:39:24.808Z","registry_url":"https://pkg.go.dev/github.com/go-jose/go-jose/v4/jwt","install_command":"go get github.com/go-jose/go-jose/v4/jwt","documentation_url":"https://pkg.go.dev/github.com/go-jose/go-jose/v4/jwt#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-12T05:39:09.248Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.075376507577022,"dependent_packages_count":4.7556286312616125,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.915502569419317},"purl":"pkg:golang/github.com/go-jose/go-jose/v4/jwt","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-jose/go-jose/v4/jwt","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-jose/go-jose/v4/jwt","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-jose/go-jose/v4/jwt/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv4%2Fjwt/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv4%2Fjwt/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv4%2Fjwt/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv4%2Fjwt/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv4%2Fjwt/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv4%2Fjwt/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2154697,"maintainers_count":0,"namespaces_count":791356,"keywords_count":113139,"github":"golang","metadata":{"funded_packages_count":53897},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-01T05:12:27.241Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14431016,"name":"github.com/go-jose/go-jose/v4/json","ecosystem":"go","description":"Package json implements encoding and decoding of JSON objects as defined in\nRFC 4627. The mapping between JSON objects and Go values is described\nin the documentation for the Marshal and Unmarshal functions.\n\nSee \"JSON and Go\" for an introduction to this package:\nhttps://golang.org/doc/articles/json_and_go.html","homepage":"https://github.com/go-jose/go-jose","licenses":"Apache-2.0, BSD-3-Clause","normalized_licenses":["Apache-2.0","BSD-3-Clause"],"repository_url":"https://github.com/go-jose/go-jose","keywords_array":[],"namespace":"github.com/go-jose/go-jose/v4","versions_count":11,"first_release_published_at":"2026-05-12T05:39:25.225Z","latest_release_published_at":"2026-05-12T05:39:25.225Z","latest_release_number":"v4.1.4","last_synced_at":"2026-05-12T05:39:26.680Z","created_at":"2026-05-12T05:39:09.045Z","updated_at":"2026-05-12T05:39:26.680Z","registry_url":"https://pkg.go.dev/github.com/go-jose/go-jose/v4/json","install_command":"go get github.com/go-jose/go-jose/v4/json","documentation_url":"https://pkg.go.dev/github.com/go-jose/go-jose/v4/json#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-12T05:39:09.299Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.075376507577022,"dependent_packages_count":4.7556286312616125,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.915502569419317},"purl":"pkg:golang/github.com/go-jose/go-jose/v4/json","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-jose/go-jose/v4/json","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-jose/go-jose/v4/json","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-jose/go-jose/v4/json/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv4%2Fjson/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv4%2Fjson/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv4%2Fjson/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv4%2Fjson/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv4%2Fjson/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv4%2Fjson/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2154697,"maintainers_count":0,"namespaces_count":791356,"keywords_count":113139,"github":"golang","metadata":{"funded_packages_count":53897},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-01T05:12:27.241Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":13449478,"name":"golang-gopkg-square-go-jose.v2","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/go-jose/go-jose","licenses":"apache-2.0","normalized_licenses":[],"repository_url":"https://github.com/go-jose/go-jose","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-08T16:55:06.871Z","latest_release_published_at":"2026-02-08T16:55:06.871Z","latest_release_number":"2.6.3-3","last_synced_at":"2026-03-08T17:40:48.941Z","created_at":"2026-02-08T16:55:06.565Z","updated_at":"2026-03-25T17:00:18.708Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-gopkg-square-go-jose.v2","install_command":"apt-get install golang-gopkg-square-go-jose.v2","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-gopkg-square-go-jose.v2-dev","standards_version":"4.6.2","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-google-go-cmp-dev, golang-github-stretchr-testify-dev, golang-golang-x-crypto-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":39926448,"uuid":"285864234","full_name":"go-jose/go-jose","owner":"go-jose","description":"An implementation of JOSE standards (JWE, JWS, JWT) in Go","archived":false,"fork":false,"pushed_at":"2026-01-22T19:02:25.000Z","size":1244,"stargazers_count":490,"open_issues_count":32,"forks_count":109,"subscribers_count":6,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.210Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"square/go-jose","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-jose.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-08-07T15:38:05.000Z","updated_at":"2026-03-19T22:13:06.000Z","dependencies_parsed_at":"2023-12-19T01:34:59.075Z","dependency_job_id":"442666f1-5d20-4824-979f-746922d427b0","html_url":"https://github.com/go-jose/go-jose","commit_stats":null,"previous_names":[],"tags_count":50,"template":false,"template_full_name":null,"purl":"pkg:github/go-jose/go-jose","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/sbom","scorecard":{"id":432027,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-jose/go-jose","commit":"14239fdb15b88e1c42e41621ef24f1112cf31b5a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.6,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"10 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/cram.yml:1","Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/cram.yml:19","Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned","Info: 0 out of 1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:36:11.883Z","repository_id":39926448,"created_at":"2025-08-19T03:36:11.883Z","updated_at":"2025-08-19T03:36:11.883Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30897934,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:00:18.708Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-gopkg-square-go-jose.v2?arch=source\u0026distro=ubuntu-24.10\u0026repository_url=https://launchpad.net/ubuntu/oracular","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-gopkg-square-go-jose.v2","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-gopkg-square-go-jose.v2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-gopkg-square-go-jose.v2/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-11T23:18:31.995Z","issues_count":63,"pull_requests_count":211,"avg_time_to_close_issue":10558985.378378378,"avg_time_to_close_pull_request":3580172.9175824174,"issues_closed_count":37,"pull_requests_closed_count":182,"pull_request_authors_count":51,"issue_authors_count":49,"avg_comments_per_issue":1.3492063492063493,"avg_comments_per_pull_request":0.943127962085308,"merged_pull_requests_count":141,"bot_issues_count":2,"bot_pull_requests_count":41,"past_year_issues_count":10,"past_year_pull_requests_count":37,"past_year_avg_time_to_close_issue":1523424.5,"past_year_avg_time_to_close_pull_request":595800.9545454546,"past_year_issues_closed_count":4,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":14,"past_year_issue_authors_count":7,"past_year_avg_comments_per_issue":1.6,"past_year_avg_comments_per_pull_request":0.9459459459459459,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":7,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/issues","maintainers":[{"login":"jsha","count":59,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"},{"login":"mcpherrinm","count":28,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"aarongable","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aarongable"},{"login":"pgporada","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pgporada"}],"active_maintainers":[{"login":"mcpherrinm","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"jsha","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-gopkg-square-go-jose.v2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-gopkg-square-go-jose.v2/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-gopkg-square-go-jose.v2/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-gopkg-square-go-jose.v2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-gopkg-square-go-jose.v2/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-gopkg-square-go-jose.v2/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.10","url":"https://launchpad.net/ubuntu/oracular","ecosystem":"ubuntu","default":false,"packages_count":38437,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"ubuntu","metadata":{"codename":"oracular","mirror":"http://old-releases.ubuntu.com/ubuntu"},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.028Z","updated_at":"2026-04-27T18:20:37.303Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/namespaces"}},{"id":13645580,"name":"golang-github-go-jose-go-jose","ecosystem":"debian","description":null,"homepage":"https://github.com/go-jose/go-jose","licenses":"apache-2.0","normalized_licenses":[],"repository_url":"https://github.com/go-jose/go-jose","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T03:14:11.673Z","latest_release_published_at":"2026-02-12T03:14:11.673Z","latest_release_number":"4.0.5-1","last_synced_at":"2026-03-13T20:10:22.606Z","created_at":"2026-02-12T03:14:11.154Z","updated_at":"2026-03-25T17:00:18.710Z","registry_url":"https://tracker.debian.org/pkg/golang-github-go-jose-go-jose","install_command":"apt-get install golang-github-go-jose-go-jose","documentation_url":"https://packages.debian.org/trixie/golang-github-go-jose-go-jose","metadata":{"component":"main","architecture":"any all","priority":"optional","binary":"golang-github-go-jose-go-jose-dev, jose-util","standards_version":"4.7.2","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any (\u003e= 2:1.21~), golang-github-google-go-cmp-dev, golang-github-stretchr-testify-dev, golang-golang-x-crypto-dev, txt2man \u003c!nodoc\u003e","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":39926448,"uuid":"285864234","full_name":"go-jose/go-jose","owner":"go-jose","description":"An implementation of JOSE standards (JWE, JWS, JWT) in Go","archived":false,"fork":false,"pushed_at":"2026-01-22T19:02:25.000Z","size":1244,"stargazers_count":490,"open_issues_count":32,"forks_count":109,"subscribers_count":6,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.210Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"square/go-jose","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-jose.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-08-07T15:38:05.000Z","updated_at":"2026-03-19T22:13:06.000Z","dependencies_parsed_at":"2023-12-19T01:34:59.075Z","dependency_job_id":"442666f1-5d20-4824-979f-746922d427b0","html_url":"https://github.com/go-jose/go-jose","commit_stats":null,"previous_names":[],"tags_count":50,"template":false,"template_full_name":null,"purl":"pkg:github/go-jose/go-jose","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/sbom","scorecard":{"id":432027,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-jose/go-jose","commit":"14239fdb15b88e1c42e41621ef24f1112cf31b5a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.6,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"10 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/cram.yml:1","Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/cram.yml:19","Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned","Info: 0 out of 1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:36:11.883Z","repository_id":39926448,"created_at":"2025-08-19T03:36:11.883Z","updated_at":"2025-08-19T03:36:11.883Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30897934,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:00:18.710Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/golang-github-go-jose-go-jose?arch=source\u0026distro=debian-13\u0026repository_url=https://packages.debian.org/trixie","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/golang-github-go-jose-go-jose","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/golang-github-go-jose-go-jose","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/golang-github-go-jose-go-jose/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-11T23:18:31.995Z","issues_count":63,"pull_requests_count":211,"avg_time_to_close_issue":10558985.378378378,"avg_time_to_close_pull_request":3580172.9175824174,"issues_closed_count":37,"pull_requests_closed_count":182,"pull_request_authors_count":51,"issue_authors_count":49,"avg_comments_per_issue":1.3492063492063493,"avg_comments_per_pull_request":0.943127962085308,"merged_pull_requests_count":141,"bot_issues_count":2,"bot_pull_requests_count":41,"past_year_issues_count":10,"past_year_pull_requests_count":37,"past_year_avg_time_to_close_issue":1523424.5,"past_year_avg_time_to_close_pull_request":595800.9545454546,"past_year_issues_closed_count":4,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":14,"past_year_issue_authors_count":7,"past_year_avg_comments_per_issue":1.6,"past_year_avg_comments_per_pull_request":0.9459459459459459,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":7,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/issues","maintainers":[{"login":"jsha","count":59,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"},{"login":"mcpherrinm","count":28,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"aarongable","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aarongable"},{"login":"pgporada","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pgporada"}],"active_maintainers":[{"login":"mcpherrinm","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"jsha","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-go-jose-go-jose/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-go-jose-go-jose/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-go-jose-go-jose/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-go-jose-go-jose/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-go-jose-go-jose/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-go-jose-go-jose/codemeta","maintainers":[],"registry":{"name":"debian-13","url":"https://packages.debian.org/trixie","ecosystem":"debian","default":false,"packages_count":38024,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"debian","metadata":{"codename":"trixie"},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:50.448Z","updated_at":"2026-04-27T18:20:39.853Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/namespaces"}},{"id":13647080,"name":"golang-gopkg-square-go-jose.v2","ecosystem":"debian","description":null,"homepage":"https://github.com/go-jose/go-jose","licenses":"apache-2.0","normalized_licenses":[],"repository_url":"https://github.com/go-jose/go-jose","keywords_array":["golang"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T03:44:27.369Z","latest_release_published_at":"2026-02-12T03:44:27.369Z","latest_release_number":"2.6.3-3","last_synced_at":"2026-03-13T12:13:32.879Z","created_at":"2026-02-12T03:44:27.170Z","updated_at":"2026-03-25T17:00:18.708Z","registry_url":"https://tracker.debian.org/pkg/golang-gopkg-square-go-jose.v2","install_command":"apt-get install golang-gopkg-square-go-jose.v2","documentation_url":"https://packages.debian.org/trixie/golang-gopkg-square-go-jose.v2","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"golang-gopkg-square-go-jose.v2-dev","standards_version":"4.6.2","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-google-go-cmp-dev, golang-github-stretchr-testify-dev, golang-golang-x-crypto-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":39926448,"uuid":"285864234","full_name":"go-jose/go-jose","owner":"go-jose","description":"An implementation of JOSE standards (JWE, JWS, JWT) in Go","archived":false,"fork":false,"pushed_at":"2026-01-22T19:02:25.000Z","size":1244,"stargazers_count":490,"open_issues_count":32,"forks_count":109,"subscribers_count":6,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.210Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"square/go-jose","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-jose.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-08-07T15:38:05.000Z","updated_at":"2026-03-19T22:13:06.000Z","dependencies_parsed_at":"2023-12-19T01:34:59.075Z","dependency_job_id":"442666f1-5d20-4824-979f-746922d427b0","html_url":"https://github.com/go-jose/go-jose","commit_stats":null,"previous_names":[],"tags_count":50,"template":false,"template_full_name":null,"purl":"pkg:github/go-jose/go-jose","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/sbom","scorecard":{"id":432027,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-jose/go-jose","commit":"14239fdb15b88e1c42e41621ef24f1112cf31b5a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.6,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"10 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/cram.yml:1","Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/cram.yml:19","Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned","Info: 0 out of 1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:36:11.883Z","repository_id":39926448,"created_at":"2025-08-19T03:36:11.883Z","updated_at":"2025-08-19T03:36:11.883Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30897934,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:00:18.707Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/golang-gopkg-square-go-jose.v2?arch=source\u0026distro=debian-13\u0026repository_url=https://packages.debian.org/trixie","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/golang-gopkg-square-go-jose.v2","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/golang-gopkg-square-go-jose.v2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/golang-gopkg-square-go-jose.v2/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-11T23:18:31.995Z","issues_count":63,"pull_requests_count":211,"avg_time_to_close_issue":10558985.378378378,"avg_time_to_close_pull_request":3580172.9175824174,"issues_closed_count":37,"pull_requests_closed_count":182,"pull_request_authors_count":51,"issue_authors_count":49,"avg_comments_per_issue":1.3492063492063493,"avg_comments_per_pull_request":0.943127962085308,"merged_pull_requests_count":141,"bot_issues_count":2,"bot_pull_requests_count":41,"past_year_issues_count":10,"past_year_pull_requests_count":37,"past_year_avg_time_to_close_issue":1523424.5,"past_year_avg_time_to_close_pull_request":595800.9545454546,"past_year_issues_closed_count":4,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":14,"past_year_issue_authors_count":7,"past_year_avg_comments_per_issue":1.6,"past_year_avg_comments_per_pull_request":0.9459459459459459,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":7,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/issues","maintainers":[{"login":"jsha","count":59,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"},{"login":"mcpherrinm","count":28,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"aarongable","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aarongable"},{"login":"pgporada","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pgporada"}],"active_maintainers":[{"login":"mcpherrinm","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"jsha","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-gopkg-square-go-jose.v2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-gopkg-square-go-jose.v2/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-gopkg-square-go-jose.v2/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-gopkg-square-go-jose.v2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-gopkg-square-go-jose.v2/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-gopkg-square-go-jose.v2/codemeta","maintainers":[],"registry":{"name":"debian-13","url":"https://packages.debian.org/trixie","ecosystem":"debian","default":false,"packages_count":38024,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"debian","metadata":{"codename":"trixie"},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:50.448Z","updated_at":"2026-04-27T18:20:39.853Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/namespaces"}},{"id":13963693,"name":"go-jose-util","ecosystem":"guix","description":"JOSE CLI","homepage":"https://github.com/go-jose/go-jose","licenses":"apache-2.0","normalized_licenses":[],"repository_url":"https://github.com/go-jose/go-jose","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-03-02T22:56:55.534Z","latest_release_published_at":"2026-03-02T22:56:55.534Z","latest_release_number":"4.0.5","last_synced_at":"2026-04-07T01:02:01.246Z","created_at":"2026-03-02T22:56:55.361Z","updated_at":"2026-04-07T01:02:01.246Z","registry_url":"https://packages.guix.gnu.org/packages/go-jose-util/4.0.5/","install_command":"guix install go-jose-util","documentation_url":"https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/golang-web.scm#n18879","metadata":{"location":"gnu/packages/golang-web.scm:18879","variable_name":"go-jose-util"},"repo_metadata":{"id":39926448,"uuid":"285864234","full_name":"go-jose/go-jose","owner":"go-jose","description":"An implementation of JOSE standards (JWE, JWS, JWT) in Go","archived":false,"fork":false,"pushed_at":"2026-01-22T19:02:25.000Z","size":1244,"stargazers_count":490,"open_issues_count":32,"forks_count":109,"subscribers_count":6,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.210Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"square/go-jose","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-jose.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-08-07T15:38:05.000Z","updated_at":"2026-03-19T22:13:06.000Z","dependencies_parsed_at":"2023-12-19T01:34:59.075Z","dependency_job_id":"442666f1-5d20-4824-979f-746922d427b0","html_url":"https://github.com/go-jose/go-jose","commit_stats":null,"previous_names":[],"tags_count":50,"template":false,"template_full_name":null,"purl":"pkg:github/go-jose/go-jose","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/sbom","scorecard":{"id":432027,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-jose/go-jose","commit":"14239fdb15b88e1c42e41621ef24f1112cf31b5a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.6,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"10 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/cram.yml:1","Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/cram.yml:19","Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned","Info: 0 out of 1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:36:11.883Z","repository_id":39926448,"created_at":"2025-08-19T03:36:11.883Z","updated_at":"2025-08-19T03:36:11.883Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30897934,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:00:18.711Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:guix/go-jose-util","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/guix/go-jose-util","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/guix/go-jose-util","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/guix/go-jose-util/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-11T23:18:31.995Z","issues_count":63,"pull_requests_count":211,"avg_time_to_close_issue":10558985.378378378,"avg_time_to_close_pull_request":3580172.9175824174,"issues_closed_count":37,"pull_requests_closed_count":182,"pull_request_authors_count":51,"issue_authors_count":49,"avg_comments_per_issue":1.3492063492063493,"avg_comments_per_pull_request":0.943127962085308,"merged_pull_requests_count":141,"bot_issues_count":2,"bot_pull_requests_count":41,"past_year_issues_count":10,"past_year_pull_requests_count":37,"past_year_avg_time_to_close_issue":1523424.5,"past_year_avg_time_to_close_pull_request":595800.9545454546,"past_year_issues_closed_count":4,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":14,"past_year_issue_authors_count":7,"past_year_avg_comments_per_issue":1.6,"past_year_avg_comments_per_pull_request":0.9459459459459459,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":7,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/issues","maintainers":[{"login":"jsha","count":59,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"},{"login":"mcpherrinm","count":28,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"aarongable","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aarongable"},{"login":"pgporada","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pgporada"}],"active_maintainers":[{"login":"mcpherrinm","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"jsha","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-jose-util/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-jose-util/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-jose-util/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-jose-util/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-jose-util/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-jose-util/codemeta","maintainers":[],"registry":{"name":"guix","url":"https://guix.gnu.org","ecosystem":"guix","default":true,"packages_count":31558,"maintainers_count":0,"namespaces_count":0,"keywords_count":1627,"github":"guix-mirror","metadata":{"funded_packages_count":352},"icon_url":"https://github.com/guix-mirror.png","created_at":"2026-03-02T16:23:46.981Z","updated_at":"2026-05-07T05:00:22.550Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/guix/namespaces"}},{"id":13963816,"name":"go-github-com-go-jose-go-jose-v3","ecosystem":"guix","description":"Implementation of JOSE standards (JWE, JWS, JWT) in Go","homepage":"https://github.com/go-jose/go-jose","licenses":"asl2.0","normalized_licenses":["CERN-OHL-P-2.0"],"repository_url":"https://github.com/go-jose/go-jose","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-03-02T22:58:44.279Z","latest_release_published_at":"2026-03-02T22:58:44.279Z","latest_release_number":"3.0.3","last_synced_at":"2026-04-07T02:00:22.063Z","created_at":"2026-03-02T22:58:44.100Z","updated_at":"2026-04-07T02:00:22.064Z","registry_url":"https://packages.guix.gnu.org/packages/go-github-com-go-jose-go-jose-v3/3.0.3/","install_command":"guix install go-github-com-go-jose-go-jose-v3","documentation_url":"https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/golang-web.scm#n5538","metadata":{"location":"gnu/packages/golang-web.scm:5538","variable_name":"go-github-com-go-jose-go-jose-v3"},"repo_metadata":{"id":39926448,"uuid":"285864234","full_name":"go-jose/go-jose","owner":"go-jose","description":"An implementation of JOSE standards (JWE, JWS, JWT) in Go","archived":false,"fork":false,"pushed_at":"2026-01-22T19:02:25.000Z","size":1244,"stargazers_count":490,"open_issues_count":32,"forks_count":109,"subscribers_count":6,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.210Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"square/go-jose","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-jose.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-08-07T15:38:05.000Z","updated_at":"2026-03-19T22:13:06.000Z","dependencies_parsed_at":"2023-12-19T01:34:59.075Z","dependency_job_id":"442666f1-5d20-4824-979f-746922d427b0","html_url":"https://github.com/go-jose/go-jose","commit_stats":null,"previous_names":[],"tags_count":50,"template":false,"template_full_name":null,"purl":"pkg:github/go-jose/go-jose","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/sbom","scorecard":{"id":432027,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-jose/go-jose","commit":"14239fdb15b88e1c42e41621ef24f1112cf31b5a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.6,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"10 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/cram.yml:1","Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/cram.yml:19","Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned","Info: 0 out of 1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:36:11.883Z","repository_id":39926448,"created_at":"2025-08-19T03:36:11.883Z","updated_at":"2025-08-19T03:36:11.883Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30897934,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:00:18.711Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:guix/go-github-com-go-jose-go-jose-v3","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/guix/go-github-com-go-jose-go-jose-v3","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/guix/go-github-com-go-jose-go-jose-v3","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/guix/go-github-com-go-jose-go-jose-v3/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-11T23:18:31.995Z","issues_count":63,"pull_requests_count":211,"avg_time_to_close_issue":10558985.378378378,"avg_time_to_close_pull_request":3580172.9175824174,"issues_closed_count":37,"pull_requests_closed_count":182,"pull_request_authors_count":51,"issue_authors_count":49,"avg_comments_per_issue":1.3492063492063493,"avg_comments_per_pull_request":0.943127962085308,"merged_pull_requests_count":141,"bot_issues_count":2,"bot_pull_requests_count":41,"past_year_issues_count":10,"past_year_pull_requests_count":37,"past_year_avg_time_to_close_issue":1523424.5,"past_year_avg_time_to_close_pull_request":595800.9545454546,"past_year_issues_closed_count":4,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":14,"past_year_issue_authors_count":7,"past_year_avg_comments_per_issue":1.6,"past_year_avg_comments_per_pull_request":0.9459459459459459,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":7,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/issues","maintainers":[{"login":"jsha","count":59,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"},{"login":"mcpherrinm","count":28,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"aarongable","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aarongable"},{"login":"pgporada","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pgporada"}],"active_maintainers":[{"login":"mcpherrinm","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"jsha","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-jose-go-jose-v3/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-jose-go-jose-v3/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-jose-go-jose-v3/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-jose-go-jose-v3/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-jose-go-jose-v3/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-jose-go-jose-v3/codemeta","maintainers":[],"registry":{"name":"guix","url":"https://guix.gnu.org","ecosystem":"guix","default":true,"packages_count":31558,"maintainers_count":0,"namespaces_count":0,"keywords_count":1627,"github":"guix-mirror","metadata":{"funded_packages_count":352},"icon_url":"https://github.com/guix-mirror.png","created_at":"2026-03-02T16:23:46.981Z","updated_at":"2026-05-07T05:00:22.550Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/guix/namespaces"}},{"id":13963903,"name":"go-github-com-go-jose-go-jose-v4","ecosystem":"guix","description":"Implementation of JOSE standards (JWE, JWS, JWT) in Go","homepage":"https://github.com/go-jose/go-jose","licenses":"apache-2.0","normalized_licenses":[],"repository_url":"https://github.com/go-jose/go-jose","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-03-02T22:59:54.454Z","latest_release_published_at":"2026-03-02T22:59:54.454Z","latest_release_number":"4.0.5","last_synced_at":"2026-04-07T02:00:24.418Z","created_at":"2026-03-02T22:59:54.209Z","updated_at":"2026-04-07T02:00:24.419Z","registry_url":"https://packages.guix.gnu.org/packages/go-github-com-go-jose-go-jose-v4/4.0.5/","install_command":"guix install go-github-com-go-jose-go-jose-v4","documentation_url":"https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/golang-web.scm#n5576","metadata":{"location":"gnu/packages/golang-web.scm:5576","variable_name":"go-github-com-go-jose-go-jose-v4"},"repo_metadata":{"id":39926448,"uuid":"285864234","full_name":"go-jose/go-jose","owner":"go-jose","description":"An implementation of JOSE standards (JWE, JWS, JWT) in Go","archived":false,"fork":false,"pushed_at":"2026-01-22T19:02:25.000Z","size":1244,"stargazers_count":490,"open_issues_count":32,"forks_count":109,"subscribers_count":6,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.210Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"square/go-jose","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-jose.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-08-07T15:38:05.000Z","updated_at":"2026-03-19T22:13:06.000Z","dependencies_parsed_at":"2023-12-19T01:34:59.075Z","dependency_job_id":"442666f1-5d20-4824-979f-746922d427b0","html_url":"https://github.com/go-jose/go-jose","commit_stats":null,"previous_names":[],"tags_count":50,"template":false,"template_full_name":null,"purl":"pkg:github/go-jose/go-jose","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/sbom","scorecard":{"id":432027,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-jose/go-jose","commit":"14239fdb15b88e1c42e41621ef24f1112cf31b5a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.6,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"10 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/cram.yml:1","Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/cram.yml:19","Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned","Info: 0 out of 1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:36:11.883Z","repository_id":39926448,"created_at":"2025-08-19T03:36:11.883Z","updated_at":"2025-08-19T03:36:11.883Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30897934,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:00:18.736Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:guix/go-github-com-go-jose-go-jose-v4","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/guix/go-github-com-go-jose-go-jose-v4","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/guix/go-github-com-go-jose-go-jose-v4","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/guix/go-github-com-go-jose-go-jose-v4/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-11T23:18:31.995Z","issues_count":63,"pull_requests_count":211,"avg_time_to_close_issue":10558985.378378378,"avg_time_to_close_pull_request":3580172.9175824174,"issues_closed_count":37,"pull_requests_closed_count":182,"pull_request_authors_count":51,"issue_authors_count":49,"avg_comments_per_issue":1.3492063492063493,"avg_comments_per_pull_request":0.943127962085308,"merged_pull_requests_count":141,"bot_issues_count":2,"bot_pull_requests_count":41,"past_year_issues_count":10,"past_year_pull_requests_count":37,"past_year_avg_time_to_close_issue":1523424.5,"past_year_avg_time_to_close_pull_request":595800.9545454546,"past_year_issues_closed_count":4,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":14,"past_year_issue_authors_count":7,"past_year_avg_comments_per_issue":1.6,"past_year_avg_comments_per_pull_request":0.9459459459459459,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":7,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/issues","maintainers":[{"login":"jsha","count":59,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"},{"login":"mcpherrinm","count":28,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"aarongable","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aarongable"},{"login":"pgporada","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pgporada"}],"active_maintainers":[{"login":"mcpherrinm","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"jsha","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-jose-go-jose-v4/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-jose-go-jose-v4/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-jose-go-jose-v4/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-jose-go-jose-v4/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-jose-go-jose-v4/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-go-jose-go-jose-v4/codemeta","maintainers":[],"registry":{"name":"guix","url":"https://guix.gnu.org","ecosystem":"guix","default":true,"packages_count":31558,"maintainers_count":0,"namespaces_count":0,"keywords_count":1627,"github":"guix-mirror","metadata":{"funded_packages_count":352},"icon_url":"https://github.com/guix-mirror.png","created_at":"2026-03-02T16:23:46.981Z","updated_at":"2026-05-07T05:00:22.550Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/guix/namespaces"}},{"id":13645581,"name":"golang-github-go-jose-go-jose.v3","ecosystem":"debian","description":null,"homepage":"https://github.com/go-jose/go-jose","licenses":"apache-2.0","normalized_licenses":[],"repository_url":"https://github.com/go-jose/go-jose","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T03:14:13.952Z","latest_release_published_at":"2026-02-12T03:14:13.952Z","latest_release_number":"3.0.3-6","last_synced_at":"2026-03-13T20:10:22.851Z","created_at":"2026-02-12T03:14:13.667Z","updated_at":"2026-03-25T17:00:21.318Z","registry_url":"https://tracker.debian.org/pkg/golang-github-go-jose-go-jose.v3","install_command":"apt-get install golang-github-go-jose-go-jose.v3","documentation_url":"https://packages.debian.org/trixie/golang-github-go-jose-go-jose.v3","metadata":{"component":"main","architecture":"all","priority":"optional","binary":"golang-github-go-jose-go-jose.v3-dev","standards_version":"4.6.2","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-google-go-cmp-dev, golang-github-stretchr-testify-dev, golang-golang-x-crypto-dev, golang-gopkg-alecthomas-kingpin.v2-dev, txt2man \u003c!nodoc\u003e","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":39926448,"uuid":"285864234","full_name":"go-jose/go-jose","owner":"go-jose","description":"An implementation of JOSE standards (JWE, JWS, JWT) in Go","archived":false,"fork":false,"pushed_at":"2026-01-22T19:02:25.000Z","size":1244,"stargazers_count":490,"open_issues_count":32,"forks_count":109,"subscribers_count":6,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.210Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"square/go-jose","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-jose.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-08-07T15:38:05.000Z","updated_at":"2026-03-19T22:13:06.000Z","dependencies_parsed_at":"2023-12-19T01:34:59.075Z","dependency_job_id":"442666f1-5d20-4824-979f-746922d427b0","html_url":"https://github.com/go-jose/go-jose","commit_stats":null,"previous_names":[],"tags_count":50,"template":false,"template_full_name":null,"purl":"pkg:github/go-jose/go-jose","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/sbom","scorecard":{"id":432027,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-jose/go-jose","commit":"14239fdb15b88e1c42e41621ef24f1112cf31b5a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.6,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"10 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/cram.yml:1","Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/cram.yml:19","Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned","Info: 0 out of 1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:36:11.883Z","repository_id":39926448,"created_at":"2025-08-19T03:36:11.883Z","updated_at":"2025-08-19T03:36:11.883Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30897934,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:00:21.318Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/golang-github-go-jose-go-jose.v3?arch=source\u0026distro=debian-13\u0026repository_url=https://packages.debian.org/trixie","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/golang-github-go-jose-go-jose.v3","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/golang-github-go-jose-go-jose.v3","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/golang-github-go-jose-go-jose.v3/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-11T23:18:31.995Z","issues_count":63,"pull_requests_count":211,"avg_time_to_close_issue":10558985.378378378,"avg_time_to_close_pull_request":3580172.9175824174,"issues_closed_count":37,"pull_requests_closed_count":182,"pull_request_authors_count":51,"issue_authors_count":49,"avg_comments_per_issue":1.3492063492063493,"avg_comments_per_pull_request":0.943127962085308,"merged_pull_requests_count":141,"bot_issues_count":2,"bot_pull_requests_count":41,"past_year_issues_count":10,"past_year_pull_requests_count":37,"past_year_avg_time_to_close_issue":1523424.5,"past_year_avg_time_to_close_pull_request":595800.9545454546,"past_year_issues_closed_count":4,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":14,"past_year_issue_authors_count":7,"past_year_avg_comments_per_issue":1.6,"past_year_avg_comments_per_pull_request":0.9459459459459459,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":7,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/issues","maintainers":[{"login":"jsha","count":59,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"},{"login":"mcpherrinm","count":28,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"aarongable","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aarongable"},{"login":"pgporada","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pgporada"}],"active_maintainers":[{"login":"mcpherrinm","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"jsha","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-go-jose-go-jose.v3/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-go-jose-go-jose.v3/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-go-jose-go-jose.v3/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-go-jose-go-jose.v3/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-go-jose-go-jose.v3/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-go-jose-go-jose.v3/codemeta","maintainers":[],"registry":{"name":"debian-13","url":"https://packages.debian.org/trixie","ecosystem":"debian","default":false,"packages_count":38024,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"debian","metadata":{"codename":"trixie"},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:50.448Z","updated_at":"2026-04-27T18:20:39.853Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/namespaces"}},{"id":13387859,"name":"golang-github-go-jose-go-jose","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/go-jose/go-jose","licenses":"apache-2.0","normalized_licenses":[],"repository_url":"https://github.com/go-jose/go-jose","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-05T15:55:15.345Z","latest_release_published_at":"2026-02-05T15:55:15.345Z","latest_release_number":"4.0.1-4","last_synced_at":"2026-03-05T17:09:27.927Z","created_at":"2026-02-05T15:55:14.630Z","updated_at":"2026-03-25T17:00:21.319Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-go-jose-go-jose","install_command":"apt-get install golang-github-go-jose-go-jose","documentation_url":null,"metadata":{"component":"universe","architecture":"any all","priority":"optional","binary":"golang-github-go-jose-go-jose-dev, jose-util","standards_version":"4.6.2","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-google-go-cmp-dev, golang-github-stretchr-testify-dev, golang-golang-x-crypto-dev, golang-gopkg-alecthomas-kingpin.v2-dev, txt2man \u003c!nodoc\u003e","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":39926448,"uuid":"285864234","full_name":"go-jose/go-jose","owner":"go-jose","description":"An implementation of JOSE standards (JWE, JWS, JWT) in Go","archived":false,"fork":false,"pushed_at":"2026-01-22T19:02:25.000Z","size":1244,"stargazers_count":490,"open_issues_count":32,"forks_count":109,"subscribers_count":6,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.210Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"square/go-jose","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-jose.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-08-07T15:38:05.000Z","updated_at":"2026-03-19T22:13:06.000Z","dependencies_parsed_at":"2023-12-19T01:34:59.075Z","dependency_job_id":"442666f1-5d20-4824-979f-746922d427b0","html_url":"https://github.com/go-jose/go-jose","commit_stats":null,"previous_names":[],"tags_count":50,"template":false,"template_full_name":null,"purl":"pkg:github/go-jose/go-jose","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/sbom","scorecard":{"id":432027,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-jose/go-jose","commit":"14239fdb15b88e1c42e41621ef24f1112cf31b5a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.6,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"10 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/cram.yml:1","Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/cram.yml:19","Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned","Info: 0 out of 1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:36:11.883Z","repository_id":39926448,"created_at":"2025-08-19T03:36:11.883Z","updated_at":"2025-08-19T03:36:11.883Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30897934,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:00:21.319Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-go-jose-go-jose?arch=source\u0026distro=ubuntu-24.04","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-go-jose-go-jose","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-go-jose-go-jose","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-go-jose-go-jose/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-11T23:18:31.995Z","issues_count":63,"pull_requests_count":211,"avg_time_to_close_issue":10558985.378378378,"avg_time_to_close_pull_request":3580172.9175824174,"issues_closed_count":37,"pull_requests_closed_count":182,"pull_request_authors_count":51,"issue_authors_count":49,"avg_comments_per_issue":1.3492063492063493,"avg_comments_per_pull_request":0.943127962085308,"merged_pull_requests_count":141,"bot_issues_count":2,"bot_pull_requests_count":41,"past_year_issues_count":10,"past_year_pull_requests_count":37,"past_year_avg_time_to_close_issue":1523424.5,"past_year_avg_time_to_close_pull_request":595800.9545454546,"past_year_issues_closed_count":4,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":14,"past_year_issue_authors_count":7,"past_year_avg_comments_per_issue":1.6,"past_year_avg_comments_per_pull_request":0.9459459459459459,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":7,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/issues","maintainers":[{"login":"jsha","count":59,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"},{"login":"mcpherrinm","count":28,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"aarongable","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aarongable"},{"login":"pgporada","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pgporada"}],"active_maintainers":[{"login":"mcpherrinm","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"jsha","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-go-jose-go-jose/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-go-jose-go-jose/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-go-jose-go-jose/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-go-jose-go-jose/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-go-jose-go-jose/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-go-jose-go-jose/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.04","url":"https://launchpad.net/ubuntu/noble","ecosystem":"ubuntu","default":true,"packages_count":37306,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"ubuntu","metadata":{"codename":"noble"},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:45.928Z","updated_at":"2026-04-27T18:20:35.701Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/namespaces"}},{"id":13448201,"name":"golang-github-go-jose-go-jose","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/go-jose/go-jose","licenses":"apache-2.0","normalized_licenses":[],"repository_url":"https://github.com/go-jose/go-jose","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-08T15:14:14.848Z","latest_release_published_at":"2026-02-08T15:14:14.848Z","latest_release_number":"4.0.3-1","last_synced_at":"2026-03-08T15:43:50.447Z","created_at":"2026-02-08T15:14:14.391Z","updated_at":"2026-03-25T17:00:21.322Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-go-jose-go-jose","install_command":"apt-get install golang-github-go-jose-go-jose","documentation_url":null,"metadata":{"component":"universe","architecture":"any all","priority":"optional","binary":"golang-github-go-jose-go-jose-dev, jose-util","standards_version":"4.7.0","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any (\u003e= 2:1.21~), golang-github-google-go-cmp-dev, golang-github-stretchr-testify-dev, golang-golang-x-crypto-dev, txt2man \u003c!nodoc\u003e","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":39926448,"uuid":"285864234","full_name":"go-jose/go-jose","owner":"go-jose","description":"An implementation of JOSE standards (JWE, JWS, JWT) in Go","archived":false,"fork":false,"pushed_at":"2026-01-22T19:02:25.000Z","size":1244,"stargazers_count":490,"open_issues_count":32,"forks_count":109,"subscribers_count":6,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.210Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"square/go-jose","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-jose.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-08-07T15:38:05.000Z","updated_at":"2026-03-19T22:13:06.000Z","dependencies_parsed_at":"2023-12-19T01:34:59.075Z","dependency_job_id":"442666f1-5d20-4824-979f-746922d427b0","html_url":"https://github.com/go-jose/go-jose","commit_stats":null,"previous_names":[],"tags_count":50,"template":false,"template_full_name":null,"purl":"pkg:github/go-jose/go-jose","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/sbom","scorecard":{"id":432027,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-jose/go-jose","commit":"14239fdb15b88e1c42e41621ef24f1112cf31b5a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.6,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"10 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/cram.yml:1","Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/cram.yml:19","Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned","Info: 0 out of 1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:36:11.883Z","repository_id":39926448,"created_at":"2025-08-19T03:36:11.883Z","updated_at":"2025-08-19T03:36:11.883Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30897934,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:00:21.321Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-go-jose-go-jose?arch=source\u0026distro=ubuntu-24.10\u0026repository_url=https://launchpad.net/ubuntu/oracular","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-go-jose-go-jose","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-go-jose-go-jose","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-go-jose-go-jose/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-11T23:18:31.995Z","issues_count":63,"pull_requests_count":211,"avg_time_to_close_issue":10558985.378378378,"avg_time_to_close_pull_request":3580172.9175824174,"issues_closed_count":37,"pull_requests_closed_count":182,"pull_request_authors_count":51,"issue_authors_count":49,"avg_comments_per_issue":1.3492063492063493,"avg_comments_per_pull_request":0.943127962085308,"merged_pull_requests_count":141,"bot_issues_count":2,"bot_pull_requests_count":41,"past_year_issues_count":10,"past_year_pull_requests_count":37,"past_year_avg_time_to_close_issue":1523424.5,"past_year_avg_time_to_close_pull_request":595800.9545454546,"past_year_issues_closed_count":4,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":14,"past_year_issue_authors_count":7,"past_year_avg_comments_per_issue":1.6,"past_year_avg_comments_per_pull_request":0.9459459459459459,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":7,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/issues","maintainers":[{"login":"jsha","count":59,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"},{"login":"mcpherrinm","count":28,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"aarongable","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aarongable"},{"login":"pgporada","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pgporada"}],"active_maintainers":[{"login":"mcpherrinm","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"jsha","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-go-jose-go-jose/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-go-jose-go-jose/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-go-jose-go-jose/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-go-jose-go-jose/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-go-jose-go-jose/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-go-jose-go-jose/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.10","url":"https://launchpad.net/ubuntu/oracular","ecosystem":"ubuntu","default":false,"packages_count":38437,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"ubuntu","metadata":{"codename":"oracular","mirror":"http://old-releases.ubuntu.com/ubuntu"},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.028Z","updated_at":"2026-04-27T18:20:37.303Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/namespaces"}},{"id":3804039,"name":"github.com/go-jose/go-jose/jose-util","ecosystem":"go","description":"","homepage":"https://github.com/go-jose/go-jose","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-jose/go-jose","keywords_array":[],"namespace":"github.com/go-jose/go-jose","versions_count":0,"first_release_published_at":null,"latest_release_published_at":"2025-11-27T17:44:18.846Z","latest_release_number":null,"last_synced_at":"2026-05-09T05:48:14.283Z","created_at":"2022-04-11T18:35:12.560Z","updated_at":"2026-05-09T05:48:14.283Z","registry_url":"https://pkg.go.dev/github.com/go-jose/go-jose/jose-util","install_command":"go get github.com/go-jose/go-jose/jose-util","documentation_url":"https://pkg.go.dev/github.com/go-jose/go-jose/jose-util#section-documentation","metadata":{},"repo_metadata":{"id":39926448,"uuid":"285864234","full_name":"go-jose/go-jose","owner":"go-jose","description":"An implementation of JOSE standards (JWE, JWS, JWT) in Go","archived":false,"fork":false,"pushed_at":"2026-01-22T19:02:25.000Z","size":1244,"stargazers_count":490,"open_issues_count":32,"forks_count":109,"subscribers_count":6,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.210Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"square/go-jose","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-jose.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-08-07T15:38:05.000Z","updated_at":"2026-03-19T22:13:06.000Z","dependencies_parsed_at":"2023-12-19T01:34:59.075Z","dependency_job_id":"442666f1-5d20-4824-979f-746922d427b0","html_url":"https://github.com/go-jose/go-jose","commit_stats":null,"previous_names":[],"tags_count":50,"template":false,"template_full_name":null,"purl":"pkg:github/go-jose/go-jose","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/sbom","scorecard":{"id":432027,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-jose/go-jose","commit":"14239fdb15b88e1c42e41621ef24f1112cf31b5a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.6,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"10 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/cram.yml:1","Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/cram.yml:19","Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned","Info: 0 out of 1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:36:11.883Z","repository_id":39926448,"created_at":"2025-08-19T03:36:11.883Z","updated_at":"2025-08-19T03:36:11.883Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30897934,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-jose","name":"go-jose","uuid":"68707210","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/68707210?v=4","repositories_count":1,"last_synced_at":"2023-03-09T05:50:53.821Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/go-jose","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-18T19:12:47.616Z","updated_at":"2023-03-09T05:50:53.832Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose/repositories"},"tags":[{"name":"v4.1.2","sha":"a1565a41aa008ae6545e0f50a636d254de5b4596","kind":"commit","published_at":"2025-07-18T17:04:53.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.1.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.2/manifests"},{"name":"v4.1.1","sha":"04339d94f057d27548371c00a7c801c4fc2cbcdd","kind":"commit","published_at":"2025-06-23T23:41:10.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.1.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.1/manifests"},{"name":"v4.1.0","sha":"4f005daa10d11cacd7376358a5fe5d0c1c0ee487","kind":"commit","published_at":"2025-04-07T19:12:33.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.1.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.0/manifests"},{"name":"v3.0.4","sha":"5253038e3b5f64a2200b5b6c72107bf9823f4358","kind":"commit","published_at":"2025-02-26T19:59:49.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.4","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.4/manifests"},{"name":"v4.0.5","sha":"99b346cec4e86d102284642c5dcbe9bb0cacfc22","kind":"commit","published_at":"2025-02-24T20:06:34.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.5","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.5/manifests"},{"name":"v4.0.4","sha":"15bc4c2ac4575ad865f078390db61d44530f985d","kind":"commit","published_at":"2024-07-27T00:46:37.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.4","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.4/manifests"},{"name":"v4.0.3","sha":"db085150a549dadd76f4d2ce2ac3976951cc461e","kind":"commit","published_at":"2024-07-09T19:53:13.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.3/manifests"},{"name":"v4.0.2","sha":"ca3a2783c470c40cc490f801fc87ff39b92b25d6","kind":"commit","published_at":"2024-05-13T21:25:42.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.2/manifests"},{"name":"v2.6.3","sha":"0dd4dd541c665fb292d664f77604ba694726f298","kind":"commit","published_at":"2024-03-07T22:25:21.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.6.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.6.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.6.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.3/manifests"},{"name":"v3.0.3","sha":"add6a284ea0f844fd6628cba637be5451fe4b28a","kind":"commit","published_at":"2024-03-07T21:35:47.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.3/manifests"},{"name":"v4.0.1","sha":"f4c051a0653d78199a053892f7619ebf96339502","kind":"commit","published_at":"2024-03-07T19:46:13.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.1/manifests"},{"name":"v1.1.3","sha":"5778a03bd4ba705b3755010af88a21f5acd63664","kind":"commit","published_at":"2024-03-07T01:13:42.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.1.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.3/manifests"},{"name":"v4.0.0","sha":"2658f467ede28af28a7883041677ff460dda3f69","kind":"commit","published_at":"2024-02-26T22:32:37.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.0/manifests"},{"name":"v3.0.2","sha":"863f73b9dbfcc5944d74d5106992e3cf949c4557","kind":"commit","published_at":"2024-02-23T23:30:51.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.2/manifests"},{"name":"v2.6.2","sha":"a3d307244c3bc50b25a71aa0688764c32ec419c7","kind":"commit","published_at":"2023-12-08T21:16:55.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.6.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.6.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.6.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.2/manifests"},{"name":"v3.0.1","sha":"47edce0854d533ac27795c9befd90b1f7ef87554","kind":"commit","published_at":"2023-11-08T00:39:09.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.1/manifests"},{"name":"v2.6.1","sha":"e0deb20b7736bf31a2cee85c5d2b682c6534e000","kind":"tag","published_at":"2023-01-26T02:01:16.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.6.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.1/manifests"},{"name":"v3.0.0","sha":"a563785af9481120d75c419acf7bdd86a07cc1f1","kind":"tag","published_at":"2021-07-31T20:37:49.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.0/manifests"},{"name":"v3.0.0-rc.1","sha":"a563785af9481120d75c419acf7bdd86a07cc1f1","kind":"tag","published_at":"2021-06-05T21:22:44.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.0-rc.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.0-rc.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.0-rc.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.0-rc.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.0-rc.1/manifests"},{"name":"v2.6.0","sha":"a10ff54e00bc6e833bf549e04ae976f0fe8ea2fd","kind":"tag","published_at":"2021-06-05T20:58:19.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.6.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.0/manifests"},{"name":"v2.5.1","sha":"3a5ee095dcb5030a9de84fb92c222ac652fff176","kind":"tag","published_at":"2020-05-01T02:02:59.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.5.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.5.1/manifests"},{"name":"v2.5.0","sha":"2204b3eaf539b5d4ad438a05b5e0a10e85816bf9","kind":"tag","published_at":"2020-04-13T02:15:29.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.5.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.5.0/manifests"},{"name":"v2.4.1","sha":"4ef0f1b175ccd65472d154e1207c4d7b8102545f","kind":"tag","published_at":"2019-12-16T20:56:51.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.4.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.4.1/manifests"},{"name":"v2.4.0","sha":"8fd82ff1d52a5162ff23c0a48e2c64a1fa4a3f8f","kind":"tag","published_at":"2019-10-23T04:08:19.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.4.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.4.0/manifests"},{"name":"v2.3.1","sha":"730df5f748271903322feb182be83b43ebbbe27d","kind":"tag","published_at":"2019-04-10T22:00:40.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.3.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.3.1/manifests"},{"name":"v2.3.0","sha":"628223f44a71f715d2881ea69afc795a1e9c01be","kind":"tag","published_at":"2019-02-27T00:05:37.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.3.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.3.0/manifests"},{"name":"v2.2.2","sha":"e94fb177d3668d35ab39c61cbb2f311550557e83","kind":"tag","published_at":"2019-01-02T21:08:35.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.2.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"72415094398e2f013bf50b76fd6de36df47938ea","kind":"tag","published_at":"2018-12-05T19:06:01.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.2.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"f61ac651e23224d43848a8dc387dee016d7eacf9","kind":"tag","published_at":"2018-11-30T00:37:18.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.2.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.0/manifests"},{"name":"v2.1.9","sha":"ef984e69dd356202fd4e4910d4d9c24468bdf0b8","kind":"tag","published_at":"2018-09-23T17:51:30.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.9","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.9/manifests"},{"name":"v2.1.8","sha":"8254d6c783765f38c8675fae4427a1fe73fbd09d","kind":"tag","published_at":"2018-08-08T17:29:30.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.8","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.8/manifests"},{"name":"v2.1.7","sha":"349dc03548930652802aadc09fb126e2b7cb6d80","kind":"tag","published_at":"2018-07-25T22:16:27.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.7","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.7/manifests"},{"name":"v1.1.2","sha":"56062818b5e15ee405eb8363f9498c7113e98337","kind":"tag","published_at":"2018-07-25T22:09:11.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.1.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.2/manifests"},{"name":"v2.1.6","sha":"76dd09796242edb5b897103a75df2645c028c960","kind":"tag","published_at":"2018-03-29T00:25:01.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.6","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.6/manifests"},{"name":"v2.1.5","sha":"552e98edab5d620205ff1a8960bf52a5a10aad03","kind":"tag","published_at":"2018-03-23T17:36:42.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.5","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.5/manifests"},{"name":"v1.1.1","sha":"6e50787b7338112747e64f32753fb4f9dbfb8f79","kind":"tag","published_at":"2018-03-23T00:52:00.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.1.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.1/manifests"},{"name":"v2.1.4","sha":"6ee92191fea850cdcab9a18867abf5f521cdbadb","kind":"tag","published_at":"2018-02-28T01:29:07.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.4","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.4/manifests"},{"name":"v2.1.3","sha":"f8f38de21b4dcd69d0413faf231983f5fd6634b1","kind":"tag","published_at":"2017-09-13T20:15:43.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.3/manifests"},{"name":"v2.1.2","sha":"b25e6cab129e4a54675b42ea49d38e9c33ade9e6","kind":"tag","published_at":"2017-06-07T21:53:41.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.2/manifests"},{"name":"v2.1.1","sha":"af13e1fbc7ac2df7f7eab54e5177104d546d0e9c","kind":"tag","published_at":"2017-05-03T23:45:58.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"d5683d954d08cd430460c651e2a2fff4f3b39f86","kind":"tag","published_at":"2017-02-24T23:57:24.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.0/manifests"},{"name":"v2.0.1","sha":"296c7f1463ec9b712176dc804dea0173d06dc728","kind":"tag","published_at":"2016-11-21T22:27:01.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.0.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"8c5257b2f658f86d174ae68c6a592eaf6a9608d9","kind":"tag","published_at":"2016-10-28T21:39:18.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.0.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.0.0/manifests"},{"name":"v1.1.0","sha":"aa2e30fdd1fe9dd3394119af66451ae790d50e0d","kind":"tag","published_at":"2016-09-23T00:23:00.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.1.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.0/manifests"},{"name":"v1.0.5","sha":"139276ceb5afbf13e636c44e9382f0ca75c12ba3","kind":"tag","published_at":"2016-09-03T19:23:47.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.5","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.5/manifests"},{"name":"v1.0.4","sha":"6e6dedab09005ebebd66b7cd4af9e8eada723c61","kind":"tag","published_at":"2016-08-31T22:15:56.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.4","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.4/manifests"},{"name":"v1.0.3","sha":"a3927f83df1b1516f9e9dec71839c93e6bcf1db0","kind":"tag","published_at":"2016-08-08T14:38:18.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.3/manifests"},{"name":"v1.0.2","sha":"e3f973b66b91445ec816dd7411ad1b6495a5a2fc","kind":"tag","published_at":"2016-05-02T22:58:07.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.2/manifests"},{"name":"v1.0.1","sha":"40d457b439244b546f023d056628e5184136899b","kind":"tag","published_at":"2016-03-29T20:36:57.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"7d9df93c5ee8a09ed250b3b2360972fa29b4bb3c","kind":"tag","published_at":"2016-03-26T06:33:02.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-03-25T17:00:26.797Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":1,"rankings":{"downloads":null,"dependent_repos_count":4.706401008585746,"dependent_packages_count":9.561217324694391,"stargazers_count":4.882135739890724,"forks_count":4.457357774540034,"docker_downloads_count":null,"average":5.901777961927724},"purl":"pkg:golang/github.com/go-jose/go-jose/jose-util","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-jose/go-jose/jose-util","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-jose/go-jose/jose-util","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-jose/go-jose/jose-util/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-11T23:18:31.995Z","issues_count":63,"pull_requests_count":211,"avg_time_to_close_issue":10558985.378378378,"avg_time_to_close_pull_request":3580172.9175824174,"issues_closed_count":37,"pull_requests_closed_count":182,"pull_request_authors_count":51,"issue_authors_count":49,"avg_comments_per_issue":1.3492063492063493,"avg_comments_per_pull_request":0.943127962085308,"merged_pull_requests_count":141,"bot_issues_count":2,"bot_pull_requests_count":41,"past_year_issues_count":10,"past_year_pull_requests_count":37,"past_year_avg_time_to_close_issue":1523424.5,"past_year_avg_time_to_close_pull_request":595800.9545454546,"past_year_issues_closed_count":4,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":14,"past_year_issue_authors_count":7,"past_year_avg_comments_per_issue":1.6,"past_year_avg_comments_per_pull_request":0.9459459459459459,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":7,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/issues","maintainers":[{"login":"jsha","count":59,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"},{"login":"mcpherrinm","count":28,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"aarongable","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aarongable"},{"login":"pgporada","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pgporada"}],"active_maintainers":[{"login":"mcpherrinm","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"jsha","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fjose-util/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fjose-util/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fjose-util/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fjose-util/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fjose-util/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fjose-util/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2154697,"maintainers_count":0,"namespaces_count":791356,"keywords_count":113139,"github":"golang","metadata":{"funded_packages_count":53897},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-01T05:12:27.241Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":13448202,"name":"golang-github-go-jose-go-jose.v3","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/go-jose/go-jose","licenses":"apache-2.0","normalized_licenses":[],"repository_url":"https://github.com/go-jose/go-jose","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-08T15:14:14.983Z","latest_release_published_at":"2026-02-08T15:14:14.983Z","latest_release_number":"3.0.3-6","last_synced_at":"2026-03-08T15:45:38.521Z","created_at":"2026-02-08T15:14:14.576Z","updated_at":"2026-03-25T17:00:56.185Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-go-jose-go-jose.v3","install_command":"apt-get install golang-github-go-jose-go-jose.v3","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-go-jose-go-jose.v3-dev","standards_version":"4.6.2","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-google-go-cmp-dev, golang-github-stretchr-testify-dev, golang-golang-x-crypto-dev, golang-gopkg-alecthomas-kingpin.v2-dev, txt2man \u003c!nodoc\u003e","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":39926448,"uuid":"285864234","full_name":"go-jose/go-jose","owner":"go-jose","description":"An implementation of JOSE standards (JWE, JWS, JWT) in Go","archived":false,"fork":false,"pushed_at":"2026-01-22T19:02:25.000Z","size":1244,"stargazers_count":490,"open_issues_count":32,"forks_count":109,"subscribers_count":6,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.210Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"square/go-jose","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-jose.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-08-07T15:38:05.000Z","updated_at":"2026-03-19T22:13:06.000Z","dependencies_parsed_at":"2023-12-19T01:34:59.075Z","dependency_job_id":"442666f1-5d20-4824-979f-746922d427b0","html_url":"https://github.com/go-jose/go-jose","commit_stats":null,"previous_names":[],"tags_count":50,"template":false,"template_full_name":null,"purl":"pkg:github/go-jose/go-jose","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/sbom","scorecard":{"id":432027,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-jose/go-jose","commit":"14239fdb15b88e1c42e41621ef24f1112cf31b5a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.6,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"10 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/cram.yml:1","Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/cram.yml:19","Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned","Info: 0 out of 1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:36:11.883Z","repository_id":39926448,"created_at":"2025-08-19T03:36:11.883Z","updated_at":"2025-08-19T03:36:11.883Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30897934,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:00:56.184Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-go-jose-go-jose.v3?arch=source\u0026distro=ubuntu-24.10\u0026repository_url=https://launchpad.net/ubuntu/oracular","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-go-jose-go-jose.v3","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-go-jose-go-jose.v3","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-go-jose-go-jose.v3/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-11T23:18:31.995Z","issues_count":63,"pull_requests_count":211,"avg_time_to_close_issue":10558985.378378378,"avg_time_to_close_pull_request":3580172.9175824174,"issues_closed_count":37,"pull_requests_closed_count":182,"pull_request_authors_count":51,"issue_authors_count":49,"avg_comments_per_issue":1.3492063492063493,"avg_comments_per_pull_request":0.943127962085308,"merged_pull_requests_count":141,"bot_issues_count":2,"bot_pull_requests_count":41,"past_year_issues_count":10,"past_year_pull_requests_count":37,"past_year_avg_time_to_close_issue":1523424.5,"past_year_avg_time_to_close_pull_request":595800.9545454546,"past_year_issues_closed_count":4,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":14,"past_year_issue_authors_count":7,"past_year_avg_comments_per_issue":1.6,"past_year_avg_comments_per_pull_request":0.9459459459459459,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":7,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/issues","maintainers":[{"login":"jsha","count":59,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"},{"login":"mcpherrinm","count":28,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"aarongable","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aarongable"},{"login":"pgporada","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pgporada"}],"active_maintainers":[{"login":"mcpherrinm","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"jsha","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-go-jose-go-jose.v3/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-go-jose-go-jose.v3/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-go-jose-go-jose.v3/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-go-jose-go-jose.v3/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-go-jose-go-jose.v3/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-go-jose-go-jose.v3/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.10","url":"https://launchpad.net/ubuntu/oracular","ecosystem":"ubuntu","default":false,"packages_count":38437,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"ubuntu","metadata":{"codename":"oracular","mirror":"http://old-releases.ubuntu.com/ubuntu"},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.028Z","updated_at":"2026-04-27T18:20:37.303Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/namespaces"}},{"id":3761580,"name":"github.com/go-jose/go-jose","ecosystem":"go","description":"Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards.","homepage":"https://github.com/go-jose/go-jose","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-jose/go-jose","keywords_array":[],"namespace":"github.com/go-jose","versions_count":35,"first_release_published_at":"2016-03-21T19:26:54.000Z","latest_release_published_at":"2024-03-07T22:25:21.000Z","latest_release_number":"v2.6.3+incompatible","last_synced_at":"2026-05-30T11:53:16.092Z","created_at":"2022-04-11T15:57:20.508Z","updated_at":"2026-05-30T11:53:16.093Z","registry_url":"https://pkg.go.dev/github.com/go-jose/go-jose","install_command":"go get github.com/go-jose/go-jose","documentation_url":"https://pkg.go.dev/github.com/go-jose/go-jose#section-documentation","metadata":{},"repo_metadata":{"id":39926448,"uuid":"285864234","full_name":"go-jose/go-jose","owner":"go-jose","description":"An implementation of JOSE standards (JWE, JWS, JWT) in Go","archived":false,"fork":false,"pushed_at":"2026-04-02T17:34:41.000Z","size":1351,"stargazers_count":503,"open_issues_count":34,"forks_count":116,"subscribers_count":6,"default_branch":"main","last_synced_at":"2026-05-12T02:22:21.400Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"square/go-jose","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-jose.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-08-07T15:38:05.000Z","updated_at":"2026-05-09T13:53:54.000Z","dependencies_parsed_at":"2023-12-19T01:34:59.075Z","dependency_job_id":"442666f1-5d20-4824-979f-746922d427b0","html_url":"https://github.com/go-jose/go-jose","commit_stats":null,"previous_names":[],"tags_count":53,"template":false,"template_full_name":null,"purl":"pkg:github/go-jose/go-jose","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/sbom","scorecard":{"id":432027,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-jose/go-jose","commit":"14239fdb15b88e1c42e41621ef24f1112cf31b5a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.6,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"10 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/cram.yml:1","Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/cram.yml:19","Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned","Info: 0 out of 1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:36:11.883Z","repository_id":39926448,"created_at":"2025-08-19T03:36:11.883Z","updated_at":"2025-08-19T03:36:11.883Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33041374,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-13T13:14:54.681Z","status":"online","status_checked_at":"2026-05-14T02:00:06.663Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-jose","name":"go-jose","uuid":"68707210","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/68707210?v=4","repositories_count":1,"last_synced_at":"2023-03-09T05:50:53.821Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/go-jose","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-18T19:12:47.616Z","updated_at":"2023-03-09T05:50:53.832Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose/repositories"},"tags":[{"name":"v3.0.5","sha":"be2f6548701d4ba561cd61c7d4a2f1289b66c273","kind":"commit","published_at":"2026-03-31T23:52:59.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.5","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.5/manifests"},{"name":"v4.1.4","sha":"0e59876635f3dbf46d7b5e97b52bb75a3f96e7d9","kind":"commit","published_at":"2026-03-31T23:33:50.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.1.4","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.4/manifests"},{"name":"v4.1.3","sha":"5348b9a4ba4559d2266b5af89fb5353cd1a5360a","kind":"commit","published_at":"2025-10-03T18:59:29.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.1.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.3/manifests"},{"name":"v4.1.2","sha":"a1565a41aa008ae6545e0f50a636d254de5b4596","kind":"commit","published_at":"2025-07-18T17:04:53.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.1.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.2/manifests"},{"name":"v4.1.1","sha":"04339d94f057d27548371c00a7c801c4fc2cbcdd","kind":"commit","published_at":"2025-06-23T23:41:10.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.1.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.1/manifests"},{"name":"v4.1.0","sha":"4f005daa10d11cacd7376358a5fe5d0c1c0ee487","kind":"commit","published_at":"2025-04-07T19:12:33.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.1.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.0/manifests"},{"name":"v3.0.4","sha":"5253038e3b5f64a2200b5b6c72107bf9823f4358","kind":"commit","published_at":"2025-02-26T19:59:49.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.4","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.4/manifests"},{"name":"v4.0.5","sha":"99b346cec4e86d102284642c5dcbe9bb0cacfc22","kind":"commit","published_at":"2025-02-24T20:06:34.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.5","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.5/manifests"},{"name":"v4.0.4","sha":"15bc4c2ac4575ad865f078390db61d44530f985d","kind":"commit","published_at":"2024-07-27T00:46:37.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.4","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.4/manifests"},{"name":"v4.0.3","sha":"db085150a549dadd76f4d2ce2ac3976951cc461e","kind":"commit","published_at":"2024-07-09T19:53:13.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.3/manifests"},{"name":"v4.0.2","sha":"ca3a2783c470c40cc490f801fc87ff39b92b25d6","kind":"commit","published_at":"2024-05-13T21:25:42.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.2/manifests"},{"name":"v2.6.3","sha":"0dd4dd541c665fb292d664f77604ba694726f298","kind":"commit","published_at":"2024-03-07T22:25:21.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.6.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.6.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.6.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.3/manifests"},{"name":"v3.0.3","sha":"add6a284ea0f844fd6628cba637be5451fe4b28a","kind":"commit","published_at":"2024-03-07T21:35:47.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.3/manifests"},{"name":"v4.0.1","sha":"f4c051a0653d78199a053892f7619ebf96339502","kind":"commit","published_at":"2024-03-07T19:46:13.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.1/manifests"},{"name":"v1.1.3","sha":"5778a03bd4ba705b3755010af88a21f5acd63664","kind":"commit","published_at":"2024-03-07T01:13:42.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.1.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.3/manifests"},{"name":"v4.0.0","sha":"2658f467ede28af28a7883041677ff460dda3f69","kind":"commit","published_at":"2024-02-26T22:32:37.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.0/manifests"},{"name":"v3.0.2","sha":"863f73b9dbfcc5944d74d5106992e3cf949c4557","kind":"commit","published_at":"2024-02-23T23:30:51.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.2/manifests"},{"name":"v2.6.2","sha":"a3d307244c3bc50b25a71aa0688764c32ec419c7","kind":"commit","published_at":"2023-12-08T21:16:55.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.6.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.6.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.6.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.2/manifests"},{"name":"v3.0.1","sha":"47edce0854d533ac27795c9befd90b1f7ef87554","kind":"commit","published_at":"2023-11-08T00:39:09.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.1/manifests"},{"name":"v2.6.1","sha":"e0deb20b7736bf31a2cee85c5d2b682c6534e000","kind":"tag","published_at":"2023-01-26T02:01:16.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.6.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.1/manifests"},{"name":"v3.0.0","sha":"a563785af9481120d75c419acf7bdd86a07cc1f1","kind":"tag","published_at":"2021-07-31T20:37:49.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.0/manifests"},{"name":"v3.0.0-rc.1","sha":"a563785af9481120d75c419acf7bdd86a07cc1f1","kind":"tag","published_at":"2021-06-05T21:22:44.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.0-rc.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.0-rc.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.0-rc.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.0-rc.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.0-rc.1/manifests"},{"name":"v2.6.0","sha":"a10ff54e00bc6e833bf549e04ae976f0fe8ea2fd","kind":"tag","published_at":"2021-06-05T20:58:19.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.6.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.0/manifests"},{"name":"v2.5.1","sha":"3a5ee095dcb5030a9de84fb92c222ac652fff176","kind":"tag","published_at":"2020-05-01T02:02:59.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.5.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.5.1/manifests"},{"name":"v2.5.0","sha":"2204b3eaf539b5d4ad438a05b5e0a10e85816bf9","kind":"tag","published_at":"2020-04-13T02:15:29.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.5.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.5.0/manifests"},{"name":"v2.4.1","sha":"4ef0f1b175ccd65472d154e1207c4d7b8102545f","kind":"tag","published_at":"2019-12-16T20:56:51.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.4.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.4.1/manifests"},{"name":"v2.4.0","sha":"8fd82ff1d52a5162ff23c0a48e2c64a1fa4a3f8f","kind":"tag","published_at":"2019-10-23T04:08:19.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.4.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.4.0/manifests"},{"name":"v2.3.1","sha":"730df5f748271903322feb182be83b43ebbbe27d","kind":"tag","published_at":"2019-04-10T22:00:40.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.3.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.3.1/manifests"},{"name":"v2.3.0","sha":"628223f44a71f715d2881ea69afc795a1e9c01be","kind":"tag","published_at":"2019-02-27T00:05:37.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.3.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.3.0/manifests"},{"name":"v2.2.2","sha":"e94fb177d3668d35ab39c61cbb2f311550557e83","kind":"tag","published_at":"2019-01-02T21:08:35.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.2.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"72415094398e2f013bf50b76fd6de36df47938ea","kind":"tag","published_at":"2018-12-05T19:06:01.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.2.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"f61ac651e23224d43848a8dc387dee016d7eacf9","kind":"tag","published_at":"2018-11-30T00:37:18.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.2.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.0/manifests"},{"name":"v2.1.9","sha":"ef984e69dd356202fd4e4910d4d9c24468bdf0b8","kind":"tag","published_at":"2018-09-23T17:51:30.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.9","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.9/manifests"},{"name":"v2.1.8","sha":"8254d6c783765f38c8675fae4427a1fe73fbd09d","kind":"tag","published_at":"2018-08-08T17:29:30.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.8","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.8/manifests"},{"name":"v2.1.7","sha":"349dc03548930652802aadc09fb126e2b7cb6d80","kind":"tag","published_at":"2018-07-25T22:16:27.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.7","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.7/manifests"},{"name":"v1.1.2","sha":"56062818b5e15ee405eb8363f9498c7113e98337","kind":"tag","published_at":"2018-07-25T22:09:11.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.1.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.2/manifests"},{"name":"v2.1.6","sha":"76dd09796242edb5b897103a75df2645c028c960","kind":"tag","published_at":"2018-03-29T00:25:01.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.6","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.6/manifests"},{"name":"v2.1.5","sha":"552e98edab5d620205ff1a8960bf52a5a10aad03","kind":"tag","published_at":"2018-03-23T17:36:42.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.5","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.5/manifests"},{"name":"v1.1.1","sha":"6e50787b7338112747e64f32753fb4f9dbfb8f79","kind":"tag","published_at":"2018-03-23T00:52:00.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.1.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.1/manifests"},{"name":"v2.1.4","sha":"6ee92191fea850cdcab9a18867abf5f521cdbadb","kind":"tag","published_at":"2018-02-28T01:29:07.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.4","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.4/manifests"},{"name":"v2.1.3","sha":"f8f38de21b4dcd69d0413faf231983f5fd6634b1","kind":"tag","published_at":"2017-09-13T20:15:43.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.3/manifests"},{"name":"v2.1.2","sha":"b25e6cab129e4a54675b42ea49d38e9c33ade9e6","kind":"tag","published_at":"2017-06-07T21:53:41.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.2/manifests"},{"name":"v2.1.1","sha":"af13e1fbc7ac2df7f7eab54e5177104d546d0e9c","kind":"tag","published_at":"2017-05-03T23:45:58.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"d5683d954d08cd430460c651e2a2fff4f3b39f86","kind":"tag","published_at":"2017-02-24T23:57:24.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.0/manifests"},{"name":"v2.0.1","sha":"296c7f1463ec9b712176dc804dea0173d06dc728","kind":"tag","published_at":"2016-11-21T22:27:01.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.0.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"8c5257b2f658f86d174ae68c6a592eaf6a9608d9","kind":"tag","published_at":"2016-10-28T21:39:18.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.0.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.0.0/manifests"},{"name":"v1.1.0","sha":"aa2e30fdd1fe9dd3394119af66451ae790d50e0d","kind":"tag","published_at":"2016-09-23T00:23:00.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.1.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.0/manifests"},{"name":"v1.0.5","sha":"139276ceb5afbf13e636c44e9382f0ca75c12ba3","kind":"tag","published_at":"2016-09-03T19:23:47.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.5","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.5/manifests"},{"name":"v1.0.4","sha":"6e6dedab09005ebebd66b7cd4af9e8eada723c61","kind":"tag","published_at":"2016-08-31T22:15:56.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.4","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.4/manifests"},{"name":"v1.0.3","sha":"a3927f83df1b1516f9e9dec71839c93e6bcf1db0","kind":"tag","published_at":"2016-08-08T14:38:18.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.3/manifests"},{"name":"v1.0.2","sha":"e3f973b66b91445ec816dd7411ad1b6495a5a2fc","kind":"tag","published_at":"2016-05-02T22:58:07.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.2/manifests"},{"name":"v1.0.1","sha":"40d457b439244b546f023d056628e5184136899b","kind":"tag","published_at":"2016-03-29T20:36:57.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"7d9df93c5ee8a09ed250b3b2360972fa29b4bb3c","kind":"tag","published_at":"2016-03-26T06:33:02.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-05-23T19:13:49.971Z","dependent_packages_count":9,"downloads":null,"downloads_period":null,"dependent_repos_count":1,"rankings":{"downloads":null,"dependent_repos_count":4.706401008585746,"dependent_packages_count":2.052475877573574,"stargazers_count":4.882135739890724,"forks_count":4.457357774540034,"docker_downloads_count":null,"average":4.024592600147519},"purl":"pkg:golang/github.com/go-jose/go-jose","advisories":[{"uuid":"GSA_kwCzR0hTQS03OGgyLTlmcngtMmptOM4ABUqy","url":"https://github.com/advisories/GHSA-78h2-9frx-2jm8","title":"Go JOSE Panics in JWE decryption","description":"### Impact\n\nDecrypting a JSON Web Encryption (JWE) object will panic if the `alg` field indicates a key wrapping algorithm ([one ending in `KW`](https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants), with the exception of `A128GCMKW`, `A192GCMKW`, and `A256GCMKW`) and the `encrypted_key` field is empty. The panic happens when `cipher.KeyUnwrap()` in `key_wrap.go` attempts to allocate a slice with a zero or negative length based on the length of the `encrypted_key`.\n\nThis code path is reachable from `ParseEncrypted()` / `ParseEncryptedJSON()` / `ParseEncryptedCompact()` followed by `Decrypt()` on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected.\n\nThis panic is also reachable by calling `cipher.KeyUnwrap()` directly with any `ciphertext` parameter less than 16 bytes long, but calling this function directly is less common.\n\nPanics can lead to denial of service.\n\n### Fixed In\n\n4.1.4 and v3.0.5\n\n### Workarounds\n\nIf the list of `keyAlgorithms` passed to `ParseEncrypted()` / `ParseEncryptedJSON()` / `ParseEncryptedCompact()` does not include key wrapping algorithms (those ending in `KW`), your application is unaffected.\n\nIf your application uses key wrapping, you can prevalidate to the JWE objects to ensure the `encrypted_key` field is nonempty. If your application accepts JWE Compact Serialization, apply that validation to the corresponding field of that serialization (the data between the first and second `.`).\n\n### Thanks\n\nThanks to Datadog's Security team for finding this issue.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-04-03T03:28:56.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":["https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8","https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants","https://nvd.nist.gov/vuln/detail/CVE-2026-34986","https://github.com/advisories/GHSA-78h2-9frx-2jm8"],"source_kind":"github","identifiers":["GHSA-78h2-9frx-2jm8","CVE-2026-34986"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-04-03T04:00:09.554Z","updated_at":"2026-05-27T16:01:47.330Z","epss_percentage":0.00035,"epss_percentile":0.1055,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03OGgyLTlmcngtMmptOM4ABUqy","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS03OGgyLTlmcngtMmptOM4ABUqy","packages":[{"ecosystem":"go","package_name":"github.com/go-jose/go-jose","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 2.6.3"}],"purl":"pkg:go/github.com%2Fgo-jose%2Fgo-jose"},{"ecosystem":"go","package_name":"github.com/go-jose/go-jose/v3","versions":[{"first_patched_version":"3.0.5","vulnerable_version_range":"\u003c 3.0.5"}],"purl":"pkg:go/github.com%2Fgo-jose%2Fgo-jose%2Fv3"},{"ecosystem":"go","package_name":"github.com/go-jose/go-jose/v4","versions":[{"first_patched_version":"4.1.4","vulnerable_version_range":"\u003c 4.1.4"}],"purl":"pkg:go/github.com%2Fgo-jose%2Fgo-jose%2Fv4"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03OGgyLTlmcngtMmptOM4ABUqy/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1jNmd3LXczOTgtaHY3OM4ABEvX","url":"https://github.com/advisories/GHSA-c6gw-w398-hv78","title":"DoS in go-jose Parsing","description":"### Impact\nWhen parsing compact JWS or JWE input, go-jose could use excessive memory. The code used strings.Split(token, \".\") to split JWT tokens, which is vulnerable to excessive memory consumption when processing maliciously crafted tokens with a large number of '.' characters. An attacker could exploit this by sending numerous malformed tokens, leading to memory exhaustion and a Denial of Service.\n\n### Patches\nVersion 4.0.5 fixes this issue\n\n### Workarounds\nApplications could pre-validate payloads passed to go-jose do not contain an excessive number of '.' characters.\n\n### References\nThis is the same sort of issue as in the golang.org/x/oauth2/jws package as CVE-2025-22868 and Go issue https://go.dev/issue/71490.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-02-24T22:49:19.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.9,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","references":["https://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78","https://github.com/golang/go/issues/71490","https://github.com/go-jose/go-jose/commit/99b346cec4e86d102284642c5dcbe9bb0cacfc22","https://go.dev/issue/71490","https://nvd.nist.gov/vuln/detail/CVE-2025-27144","https://github.com/go-jose/go-jose/releases/tag/v4.0.5","https://github.com/advisories/GHSA-c6gw-w398-hv78"],"source_kind":"github","identifiers":["GHSA-c6gw-w398-hv78","CVE-2025-27144"],"repository_url":"https://github.com/go-jose/go-jose","blast_radius":23.087134638510676,"created_at":"2025-02-24T23:07:30.139Z","updated_at":"2026-05-28T19:06:36.524Z","epss_percentage":0.00101,"epss_percentile":0.2731,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jNmd3LXczOTgtaHY3OM4ABEvX","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1jNmd3LXczOTgtaHY3OM4ABEvX","packages":[{"ecosystem":"go","package_name":"github.com/go-jose/go-jose","versions":[{"first_patched_version":"3.0.4","vulnerable_version_range":"\u003c 3.0.4"}],"purl":"pkg:go/github.com%2Fgo-jose%2Fgo-jose"},{"ecosystem":"go","package_name":"github.com/go-jose/go-jose/v3","versions":[{"first_patched_version":"3.0.4","vulnerable_version_range":"\u003c 3.0.4"}],"purl":"pkg:go/github.com%2Fgo-jose%2Fgo-jose%2Fv3"},{"ecosystem":"go","package_name":"github.com/go-jose/go-jose/v4","versions":[{"first_patched_version":"4.0.5","vulnerable_version_range":"\u003c 4.0.5"}],"purl":"pkg:go/github.com%2Fgo-jose%2Fgo-jose%2Fv4"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jNmd3LXczOTgtaHY3OM4ABEvX/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-jose/go-jose","docker_dependents_count":13,"docker_downloads_count":1531,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-jose/go-jose","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-jose/go-jose/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-05-17T03:01:16.963Z","issues_count":66,"pull_requests_count":215,"avg_time_to_close_issue":12780418.921052631,"avg_time_to_close_pull_request":3990082.3532608696,"issues_closed_count":38,"pull_requests_closed_count":184,"pull_request_authors_count":52,"issue_authors_count":52,"avg_comments_per_issue":1.378787878787879,"avg_comments_per_pull_request":0.9441860465116279,"merged_pull_requests_count":142,"bot_issues_count":2,"bot_pull_requests_count":41,"past_year_issues_count":8,"past_year_pull_requests_count":25,"past_year_avg_time_to_close_issue":781562.0,"past_year_avg_time_to_close_pull_request":539521.8888888889,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":9,"past_year_pull_request_authors_count":11,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":2.25,"past_year_avg_comments_per_pull_request":0.96,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":5,"past_year_merged_pull_requests_count":8,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/issues","maintainers":[{"login":"jsha","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"},{"login":"mcpherrinm","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"aarongable","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aarongable"},{"login":"pgporada","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pgporada"}],"active_maintainers":[{"login":"mcpherrinm","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"jsha","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2154697,"maintainers_count":0,"namespaces_count":791356,"keywords_count":113139,"github":"golang","metadata":{"funded_packages_count":53897},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-01T05:12:27.241Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14413563,"name":"github.com/go-jose/go-jOSE","ecosystem":"go","description":null,"homepage":null,"licenses":null,"normalized_licenses":[],"repository_url":"https://github.com/go-jose/go-jOSE","keywords_array":[],"namespace":null,"versions_count":35,"first_release_published_at":"2016-03-21T19:26:54.000Z","latest_release_published_at":"2024-03-07T22:25:21.000Z","latest_release_number":"v2.6.3+incompatible","last_synced_at":"2026-05-09T12:49:50.797Z","created_at":"2026-05-09T12:49:48.540Z","updated_at":"2026-05-09T13:43:45.299Z","registry_url":"https://pkg.go.dev/github.com/go-jose/go-jOSE","install_command":"go get github.com/go-jose/go-jOSE","documentation_url":"https://pkg.go.dev/github.com/go-jose/go-jOSE#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-05-09T13:43:45.280Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.080071416441731,"dependent_packages_count":4.759766986501993,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.919919201471862},"purl":"pkg:golang/github.com/go-jose/go-j%21o%21s%21e","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-jose/go-jOSE","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-jose/go-jOSE","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-jose/go-jOSE/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jOSE/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jOSE/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jOSE/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jOSE/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jOSE/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jOSE/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2154697,"maintainers_count":0,"namespaces_count":791356,"keywords_count":113139,"github":"golang","metadata":{"funded_packages_count":53897},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-01T05:12:27.241Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":13964098,"name":"go-gopkg-in-go-jose-go-jose-v2","ecosystem":"guix","description":"Implementation of JOSE standards (JWE, JWS, JWT) in Go","homepage":"https://github.com/go-jose/go-jose","licenses":"apache-2.0","normalized_licenses":[],"repository_url":"https://github.com/go-jose/go-jose","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-03-02T23:03:55.101Z","latest_release_published_at":"2026-03-02T23:03:55.101Z","latest_release_number":"2.6.3","last_synced_at":"2026-04-07T02:02:12.805Z","created_at":"2026-03-02T23:03:54.876Z","updated_at":"2026-04-07T02:31:54.544Z","registry_url":"https://packages.guix.gnu.org/packages/go-gopkg-in-go-jose-go-jose-v2/2.6.3/","install_command":"guix install go-gopkg-in-go-jose-go-jose-v2","documentation_url":"https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/golang-web.scm#n17947","metadata":{"location":"gnu/packages/golang-web.scm:17947","variable_name":"go-gopkg-in-go-jose-go-jose-v2"},"repo_metadata":{"id":39926448,"uuid":"285864234","full_name":"go-jose/go-jose","owner":"go-jose","description":"An implementation of JOSE standards (JWE, JWS, JWT) in Go","archived":false,"fork":false,"pushed_at":"2026-01-22T19:02:25.000Z","size":1244,"stargazers_count":490,"open_issues_count":32,"forks_count":109,"subscribers_count":6,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.210Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"square/go-jose","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-jose.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-08-07T15:38:05.000Z","updated_at":"2026-03-19T22:13:06.000Z","dependencies_parsed_at":"2023-12-19T01:34:59.075Z","dependency_job_id":"442666f1-5d20-4824-979f-746922d427b0","html_url":"https://github.com/go-jose/go-jose","commit_stats":null,"previous_names":[],"tags_count":50,"template":false,"template_full_name":null,"purl":"pkg:github/go-jose/go-jose","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/sbom","scorecard":{"id":432027,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-jose/go-jose","commit":"14239fdb15b88e1c42e41621ef24f1112cf31b5a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.6,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"10 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/cram.yml:1","Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/cram.yml:19","Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned","Info: 0 out of 1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:36:11.883Z","repository_id":39926448,"created_at":"2025-08-19T03:36:11.883Z","updated_at":"2025-08-19T03:36:11.883Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30897934,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-jose","name":"go-jose","uuid":"68707210","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/68707210?v=4","repositories_count":1,"last_synced_at":"2023-03-09T05:50:53.821Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/go-jose","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-18T19:12:47.616Z","updated_at":"2023-03-09T05:50:53.832Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose/repositories"},"tags":[{"name":"v4.1.2","sha":"a1565a41aa008ae6545e0f50a636d254de5b4596","kind":"commit","published_at":"2025-07-18T17:04:53.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.1.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.2/manifests"},{"name":"v4.1.1","sha":"04339d94f057d27548371c00a7c801c4fc2cbcdd","kind":"commit","published_at":"2025-06-23T23:41:10.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.1.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.1/manifests"},{"name":"v4.1.0","sha":"4f005daa10d11cacd7376358a5fe5d0c1c0ee487","kind":"commit","published_at":"2025-04-07T19:12:33.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.1.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.0/manifests"},{"name":"v3.0.4","sha":"5253038e3b5f64a2200b5b6c72107bf9823f4358","kind":"commit","published_at":"2025-02-26T19:59:49.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.4","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.4/manifests"},{"name":"v4.0.5","sha":"99b346cec4e86d102284642c5dcbe9bb0cacfc22","kind":"commit","published_at":"2025-02-24T20:06:34.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.5","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.5/manifests"},{"name":"v4.0.4","sha":"15bc4c2ac4575ad865f078390db61d44530f985d","kind":"commit","published_at":"2024-07-27T00:46:37.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.4","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.4/manifests"},{"name":"v4.0.3","sha":"db085150a549dadd76f4d2ce2ac3976951cc461e","kind":"commit","published_at":"2024-07-09T19:53:13.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.3/manifests"},{"name":"v4.0.2","sha":"ca3a2783c470c40cc490f801fc87ff39b92b25d6","kind":"commit","published_at":"2024-05-13T21:25:42.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.2/manifests"},{"name":"v2.6.3","sha":"0dd4dd541c665fb292d664f77604ba694726f298","kind":"commit","published_at":"2024-03-07T22:25:21.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.6.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.6.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.6.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.3/manifests"},{"name":"v3.0.3","sha":"add6a284ea0f844fd6628cba637be5451fe4b28a","kind":"commit","published_at":"2024-03-07T21:35:47.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.3/manifests"},{"name":"v4.0.1","sha":"f4c051a0653d78199a053892f7619ebf96339502","kind":"commit","published_at":"2024-03-07T19:46:13.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.1/manifests"},{"name":"v1.1.3","sha":"5778a03bd4ba705b3755010af88a21f5acd63664","kind":"commit","published_at":"2024-03-07T01:13:42.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.1.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.3/manifests"},{"name":"v4.0.0","sha":"2658f467ede28af28a7883041677ff460dda3f69","kind":"commit","published_at":"2024-02-26T22:32:37.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.0/manifests"},{"name":"v3.0.2","sha":"863f73b9dbfcc5944d74d5106992e3cf949c4557","kind":"commit","published_at":"2024-02-23T23:30:51.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.2/manifests"},{"name":"v2.6.2","sha":"a3d307244c3bc50b25a71aa0688764c32ec419c7","kind":"commit","published_at":"2023-12-08T21:16:55.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.6.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.6.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.6.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.2/manifests"},{"name":"v3.0.1","sha":"47edce0854d533ac27795c9befd90b1f7ef87554","kind":"commit","published_at":"2023-11-08T00:39:09.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.1/manifests"},{"name":"v2.6.1","sha":"e0deb20b7736bf31a2cee85c5d2b682c6534e000","kind":"tag","published_at":"2023-01-26T02:01:16.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.6.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.1/manifests"},{"name":"v3.0.0","sha":"a563785af9481120d75c419acf7bdd86a07cc1f1","kind":"tag","published_at":"2021-07-31T20:37:49.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.0/manifests"},{"name":"v3.0.0-rc.1","sha":"a563785af9481120d75c419acf7bdd86a07cc1f1","kind":"tag","published_at":"2021-06-05T21:22:44.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.0-rc.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.0-rc.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.0-rc.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.0-rc.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.0-rc.1/manifests"},{"name":"v2.6.0","sha":"a10ff54e00bc6e833bf549e04ae976f0fe8ea2fd","kind":"tag","published_at":"2021-06-05T20:58:19.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.6.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.0/manifests"},{"name":"v2.5.1","sha":"3a5ee095dcb5030a9de84fb92c222ac652fff176","kind":"tag","published_at":"2020-05-01T02:02:59.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.5.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.5.1/manifests"},{"name":"v2.5.0","sha":"2204b3eaf539b5d4ad438a05b5e0a10e85816bf9","kind":"tag","published_at":"2020-04-13T02:15:29.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.5.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.5.0/manifests"},{"name":"v2.4.1","sha":"4ef0f1b175ccd65472d154e1207c4d7b8102545f","kind":"tag","published_at":"2019-12-16T20:56:51.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.4.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.4.1/manifests"},{"name":"v2.4.0","sha":"8fd82ff1d52a5162ff23c0a48e2c64a1fa4a3f8f","kind":"tag","published_at":"2019-10-23T04:08:19.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.4.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.4.0/manifests"},{"name":"v2.3.1","sha":"730df5f748271903322feb182be83b43ebbbe27d","kind":"tag","published_at":"2019-04-10T22:00:40.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.3.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.3.1/manifests"},{"name":"v2.3.0","sha":"628223f44a71f715d2881ea69afc795a1e9c01be","kind":"tag","published_at":"2019-02-27T00:05:37.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.3.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.3.0/manifests"},{"name":"v2.2.2","sha":"e94fb177d3668d35ab39c61cbb2f311550557e83","kind":"tag","published_at":"2019-01-02T21:08:35.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.2.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"72415094398e2f013bf50b76fd6de36df47938ea","kind":"tag","published_at":"2018-12-05T19:06:01.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.2.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"f61ac651e23224d43848a8dc387dee016d7eacf9","kind":"tag","published_at":"2018-11-30T00:37:18.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.2.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.0/manifests"},{"name":"v2.1.9","sha":"ef984e69dd356202fd4e4910d4d9c24468bdf0b8","kind":"tag","published_at":"2018-09-23T17:51:30.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.9","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.9/manifests"},{"name":"v2.1.8","sha":"8254d6c783765f38c8675fae4427a1fe73fbd09d","kind":"tag","published_at":"2018-08-08T17:29:30.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.8","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.8/manifests"},{"name":"v2.1.7","sha":"349dc03548930652802aadc09fb126e2b7cb6d80","kind":"tag","published_at":"2018-07-25T22:16:27.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.7","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.7/manifests"},{"name":"v1.1.2","sha":"56062818b5e15ee405eb8363f9498c7113e98337","kind":"tag","published_at":"2018-07-25T22:09:11.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.1.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.2/manifests"},{"name":"v2.1.6","sha":"76dd09796242edb5b897103a75df2645c028c960","kind":"tag","published_at":"2018-03-29T00:25:01.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.6","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.6/manifests"},{"name":"v2.1.5","sha":"552e98edab5d620205ff1a8960bf52a5a10aad03","kind":"tag","published_at":"2018-03-23T17:36:42.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.5","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.5/manifests"},{"name":"v1.1.1","sha":"6e50787b7338112747e64f32753fb4f9dbfb8f79","kind":"tag","published_at":"2018-03-23T00:52:00.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.1.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.1/manifests"},{"name":"v2.1.4","sha":"6ee92191fea850cdcab9a18867abf5f521cdbadb","kind":"tag","published_at":"2018-02-28T01:29:07.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.4","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.4/manifests"},{"name":"v2.1.3","sha":"f8f38de21b4dcd69d0413faf231983f5fd6634b1","kind":"tag","published_at":"2017-09-13T20:15:43.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.3/manifests"},{"name":"v2.1.2","sha":"b25e6cab129e4a54675b42ea49d38e9c33ade9e6","kind":"tag","published_at":"2017-06-07T21:53:41.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.2/manifests"},{"name":"v2.1.1","sha":"af13e1fbc7ac2df7f7eab54e5177104d546d0e9c","kind":"tag","published_at":"2017-05-03T23:45:58.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"d5683d954d08cd430460c651e2a2fff4f3b39f86","kind":"tag","published_at":"2017-02-24T23:57:24.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.0/manifests"},{"name":"v2.0.1","sha":"296c7f1463ec9b712176dc804dea0173d06dc728","kind":"tag","published_at":"2016-11-21T22:27:01.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.0.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"8c5257b2f658f86d174ae68c6a592eaf6a9608d9","kind":"tag","published_at":"2016-10-28T21:39:18.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.0.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.0.0/manifests"},{"name":"v1.1.0","sha":"aa2e30fdd1fe9dd3394119af66451ae790d50e0d","kind":"tag","published_at":"2016-09-23T00:23:00.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.1.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.0/manifests"},{"name":"v1.0.5","sha":"139276ceb5afbf13e636c44e9382f0ca75c12ba3","kind":"tag","published_at":"2016-09-03T19:23:47.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.5","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.5/manifests"},{"name":"v1.0.4","sha":"6e6dedab09005ebebd66b7cd4af9e8eada723c61","kind":"tag","published_at":"2016-08-31T22:15:56.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.4","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.4/manifests"},{"name":"v1.0.3","sha":"a3927f83df1b1516f9e9dec71839c93e6bcf1db0","kind":"tag","published_at":"2016-08-08T14:38:18.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.3/manifests"},{"name":"v1.0.2","sha":"e3f973b66b91445ec816dd7411ad1b6495a5a2fc","kind":"tag","published_at":"2016-05-02T22:58:07.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.2/manifests"},{"name":"v1.0.1","sha":"40d457b439244b546f023d056628e5184136899b","kind":"tag","published_at":"2016-03-29T20:36:57.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"7d9df93c5ee8a09ed250b3b2360972fa29b4bb3c","kind":"tag","published_at":"2016-03-26T06:33:02.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-03-25T17:00:26.214Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":1.8799311665963179,"forks_count":1.746809961362382,"docker_downloads_count":null,"average":0.9066852819896749},"purl":"pkg:guix/go-gopkg-in-go-jose-go-jose-v2","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/guix/go-gopkg-in-go-jose-go-jose-v2","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/guix/go-gopkg-in-go-jose-go-jose-v2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/guix/go-gopkg-in-go-jose-go-jose-v2/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-11T23:18:31.995Z","issues_count":63,"pull_requests_count":211,"avg_time_to_close_issue":10558985.378378378,"avg_time_to_close_pull_request":3580172.9175824174,"issues_closed_count":37,"pull_requests_closed_count":182,"pull_request_authors_count":51,"issue_authors_count":49,"avg_comments_per_issue":1.3492063492063493,"avg_comments_per_pull_request":0.943127962085308,"merged_pull_requests_count":141,"bot_issues_count":2,"bot_pull_requests_count":41,"past_year_issues_count":10,"past_year_pull_requests_count":37,"past_year_avg_time_to_close_issue":1523424.5,"past_year_avg_time_to_close_pull_request":595800.9545454546,"past_year_issues_closed_count":4,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":14,"past_year_issue_authors_count":7,"past_year_avg_comments_per_issue":1.6,"past_year_avg_comments_per_pull_request":0.9459459459459459,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":7,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/issues","maintainers":[{"login":"jsha","count":59,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"},{"login":"mcpherrinm","count":28,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"aarongable","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aarongable"},{"login":"pgporada","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pgporada"}],"active_maintainers":[{"login":"mcpherrinm","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"jsha","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-gopkg-in-go-jose-go-jose-v2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-gopkg-in-go-jose-go-jose-v2/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-gopkg-in-go-jose-go-jose-v2/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-gopkg-in-go-jose-go-jose-v2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-gopkg-in-go-jose-go-jose-v2/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-gopkg-in-go-jose-go-jose-v2/codemeta","maintainers":[],"registry":{"name":"guix","url":"https://guix.gnu.org","ecosystem":"guix","default":true,"packages_count":31558,"maintainers_count":0,"namespaces_count":0,"keywords_count":1627,"github":"guix-mirror","metadata":{"funded_packages_count":352},"icon_url":"https://github.com/guix-mirror.png","created_at":"2026-03-02T16:23:46.981Z","updated_at":"2026-05-07T05:00:22.550Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/guix/namespaces"}},{"id":13940072,"name":"github.com/go-jose/go-jOSE/v3","ecosystem":"go","description":null,"homepage":null,"licenses":"apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-jose/go-jOSE","keywords_array":[],"namespace":null,"versions_count":7,"first_release_published_at":"2021-06-05T21:22:18.000Z","latest_release_published_at":"2026-03-31T23:52:59.000Z","latest_release_number":"v3.0.5","last_synced_at":"2026-05-30T15:01:11.041Z","created_at":"2026-03-02T14:37:06.936Z","updated_at":"2026-05-30T15:01:11.041Z","registry_url":"https://pkg.go.dev/github.com/go-jose/go-jOSE/v3","install_command":"go get github.com/go-jose/go-jOSE/v3","documentation_url":"https://pkg.go.dev/github.com/go-jose/go-jOSE/v3#section-documentation","metadata":{},"repo_metadata":{"id":39926448,"uuid":"285864234","full_name":"go-jose/go-jose","owner":"go-jose","description":"An implementation of JOSE standards (JWE, JWS, JWT) in Go","archived":false,"fork":false,"pushed_at":"2026-01-22T19:02:25.000Z","size":1244,"stargazers_count":490,"open_issues_count":32,"forks_count":109,"subscribers_count":6,"default_branch":"main","last_synced_at":"2026-03-24T15:22:50.210Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"square/go-jose","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-jose.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-08-07T15:38:05.000Z","updated_at":"2026-03-19T22:13:06.000Z","dependencies_parsed_at":"2023-12-19T01:34:59.075Z","dependency_job_id":"442666f1-5d20-4824-979f-746922d427b0","html_url":"https://github.com/go-jose/go-jose","commit_stats":null,"previous_names":[],"tags_count":50,"template":false,"template_full_name":null,"purl":"pkg:github/go-jose/go-jose","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/sbom","scorecard":{"id":432027,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-jose/go-jose","commit":"14239fdb15b88e1c42e41621ef24f1112cf31b5a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.6,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"10 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/cram.yml:1","Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/cram.yml:19","Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned","Info: 0 out of 1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:36:11.883Z","repository_id":39926448,"created_at":"2025-08-19T03:36:11.883Z","updated_at":"2025-08-19T03:36:11.883Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30931095,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-25T07:55:14.202Z","status":"ssl_error","status_checked_at":"2026-03-25T07:55:10.924Z","response_time":80,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:00:18.736Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.260672463976532,"dependent_packages_count":4.929478587055114,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":5.095075525515823},"purl":"pkg:golang/github.com/go-jose/go-j%21o%21s%21e/v3","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-jose/go-jOSE/v3","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-jose/go-jOSE/v3","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-jose/go-jOSE/v3/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-03-11T23:18:31.995Z","issues_count":63,"pull_requests_count":211,"avg_time_to_close_issue":10558985.378378378,"avg_time_to_close_pull_request":3580172.9175824174,"issues_closed_count":37,"pull_requests_closed_count":182,"pull_request_authors_count":51,"issue_authors_count":49,"avg_comments_per_issue":1.3492063492063493,"avg_comments_per_pull_request":0.943127962085308,"merged_pull_requests_count":141,"bot_issues_count":2,"bot_pull_requests_count":41,"past_year_issues_count":10,"past_year_pull_requests_count":37,"past_year_avg_time_to_close_issue":1523424.5,"past_year_avg_time_to_close_pull_request":595800.9545454546,"past_year_issues_closed_count":4,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":14,"past_year_issue_authors_count":7,"past_year_avg_comments_per_issue":1.6,"past_year_avg_comments_per_pull_request":0.9459459459459459,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":7,"past_year_merged_pull_requests_count":18,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/issues","maintainers":[{"login":"jsha","count":59,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"},{"login":"mcpherrinm","count":28,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"aarongable","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aarongable"},{"login":"pgporada","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pgporada"}],"active_maintainers":[{"login":"mcpherrinm","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"jsha","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jOSE%2Fv3/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jOSE%2Fv3/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jOSE%2Fv3/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jOSE%2Fv3/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jOSE%2Fv3/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jOSE%2Fv3/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2154697,"maintainers_count":0,"namespaces_count":791356,"keywords_count":113139,"github":"golang","metadata":{"funded_packages_count":53897},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-01T05:12:27.241Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14287607,"name":"github.com/Go-jose/go-jose/v4","ecosystem":"go","description":null,"homepage":null,"licenses":null,"normalized_licenses":[],"repository_url":"https://github.com/Go-jose/go-jose","keywords_array":[],"namespace":null,"versions_count":11,"first_release_published_at":"2024-02-26T22:32:37.000Z","latest_release_published_at":"2026-03-31T23:33:50.000Z","latest_release_number":"v4.1.4","last_synced_at":"2026-04-21T08:49:24.564Z","created_at":"2026-04-21T08:48:48.134Z","updated_at":"2026-04-21T10:27:36.743Z","registry_url":"https://pkg.go.dev/github.com/Go-jose/go-jose/v4","install_command":"go get github.com/Go-jose/go-jose/v4","documentation_url":"https://pkg.go.dev/github.com/Go-jose/go-jose/v4#section-documentation","metadata":{},"repo_metadata":{},"repo_metadata_updated_at":"2026-04-21T10:27:36.716Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.149326375246864,"dependent_packages_count":4.825008785582799,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.987167580414832},"purl":"pkg:golang/github.com/%21go-jose/go-jose/v4","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/Go-jose/go-jose/v4","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/Go-jose/go-jose/v4","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/Go-jose/go-jose/v4/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGo-jose%2Fgo-jose%2Fv4/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGo-jose%2Fgo-jose%2Fv4/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGo-jose%2Fgo-jose%2Fv4/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGo-jose%2Fgo-jose%2Fv4/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGo-jose%2Fgo-jose%2Fv4/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FGo-jose%2Fgo-jose%2Fv4/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2154697,"maintainers_count":0,"namespaces_count":791356,"keywords_count":113139,"github":"golang","metadata":{"funded_packages_count":53897},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-01T05:12:27.241Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":3761560,"name":"github.com/go-jose/go-jose/v3","ecosystem":"go","description":"Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards.","homepage":"https://github.com/go-jose/go-jose","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/go-jose/go-jose","keywords_array":[],"namespace":"github.com/go-jose/go-jose","versions_count":7,"first_release_published_at":"2021-06-05T21:22:18.000Z","latest_release_published_at":"2026-03-31T23:52:59.000Z","latest_release_number":"v3.0.5","last_synced_at":"2026-06-01T00:11:27.359Z","created_at":"2022-04-11T15:57:18.011Z","updated_at":"2026-06-01T12:42:08.114Z","registry_url":"https://pkg.go.dev/github.com/go-jose/go-jose/v3","install_command":"go get github.com/go-jose/go-jose/v3","documentation_url":"https://pkg.go.dev/github.com/go-jose/go-jose/v3#section-documentation","metadata":{},"repo_metadata":{"id":39926448,"uuid":"285864234","full_name":"go-jose/go-jose","owner":"go-jose","description":"An implementation of JOSE standards (JWE, JWS, JWT) in Go","archived":false,"fork":false,"pushed_at":"2026-04-02T17:34:41.000Z","size":1351,"stargazers_count":505,"open_issues_count":38,"forks_count":118,"subscribers_count":6,"default_branch":"main","last_synced_at":"2026-05-23T19:23:54.090Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"square/go-jose","license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/go-jose.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2020-08-07T15:38:05.000Z","updated_at":"2026-05-16T15:14:49.000Z","dependencies_parsed_at":"2023-12-19T01:34:59.075Z","dependency_job_id":"442666f1-5d20-4824-979f-746922d427b0","html_url":"https://github.com/go-jose/go-jose","commit_stats":null,"previous_names":[],"tags_count":53,"template":false,"template_full_name":null,"purl":"pkg:github/go-jose/go-jose","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/sbom","scorecard":{"id":432027,"data":{"date":"2025-08-11","repo":{"name":"github.com/go-jose/go-jose","commit":"14239fdb15b88e1c42e41621ef24f1112cf31b5a"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.6,"checks":[{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":10,"reason":"10 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/cram.yml:1","Warn: no topLevel permission defined: .github/workflows/go.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cram.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/cram.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/go-jose/go-jose/go.yml/main?enable=pin","Warn: pipCommand not pinned by hash: .github/workflows/cram.yml:19","Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned","Info: 0 out of 1 pipCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-19T03:36:11.883Z","repository_id":39926448,"created_at":"2025-08-19T03:36:11.883Z","updated_at":"2025-08-19T03:36:11.883Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33450728,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-24T19:21:36.376Z","status":"ssl_error","status_checked_at":"2026-05-24T19:21:10.562Z","response_time":57,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"go-jose","name":"go-jose","uuid":"68707210","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/68707210?v=4","repositories_count":1,"last_synced_at":"2023-03-09T05:50:53.821Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/go-jose","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-18T19:12:47.616Z","updated_at":"2023-03-09T05:50:53.832Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/go-jose/repositories"},"tags":[{"name":"v3.0.5","sha":"be2f6548701d4ba561cd61c7d4a2f1289b66c273","kind":"commit","published_at":"2026-03-31T23:52:59.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.5","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.5/manifests"},{"name":"v4.1.4","sha":"0e59876635f3dbf46d7b5e97b52bb75a3f96e7d9","kind":"commit","published_at":"2026-03-31T23:33:50.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.1.4","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.4/manifests"},{"name":"v4.1.3","sha":"5348b9a4ba4559d2266b5af89fb5353cd1a5360a","kind":"commit","published_at":"2025-10-03T18:59:29.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.1.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.3/manifests"},{"name":"v4.1.2","sha":"a1565a41aa008ae6545e0f50a636d254de5b4596","kind":"commit","published_at":"2025-07-18T17:04:53.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.1.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.2/manifests"},{"name":"v4.1.1","sha":"04339d94f057d27548371c00a7c801c4fc2cbcdd","kind":"commit","published_at":"2025-06-23T23:41:10.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.1.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.1/manifests"},{"name":"v4.1.0","sha":"4f005daa10d11cacd7376358a5fe5d0c1c0ee487","kind":"commit","published_at":"2025-04-07T19:12:33.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.1.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.1.0/manifests"},{"name":"v3.0.4","sha":"5253038e3b5f64a2200b5b6c72107bf9823f4358","kind":"commit","published_at":"2025-02-26T19:59:49.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.4","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.4/manifests"},{"name":"v4.0.5","sha":"99b346cec4e86d102284642c5dcbe9bb0cacfc22","kind":"commit","published_at":"2025-02-24T20:06:34.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.5","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.5/manifests"},{"name":"v4.0.4","sha":"15bc4c2ac4575ad865f078390db61d44530f985d","kind":"commit","published_at":"2024-07-27T00:46:37.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.4","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.4/manifests"},{"name":"v4.0.3","sha":"db085150a549dadd76f4d2ce2ac3976951cc461e","kind":"commit","published_at":"2024-07-09T19:53:13.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.3/manifests"},{"name":"v4.0.2","sha":"ca3a2783c470c40cc490f801fc87ff39b92b25d6","kind":"commit","published_at":"2024-05-13T21:25:42.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.2/manifests"},{"name":"v2.6.3","sha":"0dd4dd541c665fb292d664f77604ba694726f298","kind":"commit","published_at":"2024-03-07T22:25:21.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.6.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.6.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.6.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.3/manifests"},{"name":"v3.0.3","sha":"add6a284ea0f844fd6628cba637be5451fe4b28a","kind":"commit","published_at":"2024-03-07T21:35:47.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.3/manifests"},{"name":"v4.0.1","sha":"f4c051a0653d78199a053892f7619ebf96339502","kind":"commit","published_at":"2024-03-07T19:46:13.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.1/manifests"},{"name":"v1.1.3","sha":"5778a03bd4ba705b3755010af88a21f5acd63664","kind":"commit","published_at":"2024-03-07T01:13:42.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.1.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.3/manifests"},{"name":"v4.0.0","sha":"2658f467ede28af28a7883041677ff460dda3f69","kind":"commit","published_at":"2024-02-26T22:32:37.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v4.0.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v4.0.0/manifests"},{"name":"v3.0.2","sha":"863f73b9dbfcc5944d74d5106992e3cf949c4557","kind":"commit","published_at":"2024-02-23T23:30:51.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.2/manifests"},{"name":"v2.6.2","sha":"a3d307244c3bc50b25a71aa0688764c32ec419c7","kind":"commit","published_at":"2023-12-08T21:16:55.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.6.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.6.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.6.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.2/manifests"},{"name":"v3.0.1","sha":"47edce0854d533ac27795c9befd90b1f7ef87554","kind":"commit","published_at":"2023-11-08T00:39:09.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.1/manifests"},{"name":"v2.6.1","sha":"e0deb20b7736bf31a2cee85c5d2b682c6534e000","kind":"tag","published_at":"2023-01-26T02:01:16.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.6.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.6.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.1/manifests"},{"name":"v3.0.0","sha":"a563785af9481120d75c419acf7bdd86a07cc1f1","kind":"tag","published_at":"2021-07-31T20:37:49.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.0/manifests"},{"name":"v3.0.0-rc.1","sha":"a563785af9481120d75c419acf7bdd86a07cc1f1","kind":"tag","published_at":"2021-06-05T21:22:44.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v3.0.0-rc.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v3.0.0-rc.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v3.0.0-rc.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.0-rc.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v3.0.0-rc.1/manifests"},{"name":"v2.6.0","sha":"a10ff54e00bc6e833bf549e04ae976f0fe8ea2fd","kind":"tag","published_at":"2021-06-05T20:58:19.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.6.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.6.0/manifests"},{"name":"v2.5.1","sha":"3a5ee095dcb5030a9de84fb92c222ac652fff176","kind":"tag","published_at":"2020-05-01T02:02:59.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.5.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.5.1/manifests"},{"name":"v2.5.0","sha":"2204b3eaf539b5d4ad438a05b5e0a10e85816bf9","kind":"tag","published_at":"2020-04-13T02:15:29.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.5.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.5.0/manifests"},{"name":"v2.4.1","sha":"4ef0f1b175ccd65472d154e1207c4d7b8102545f","kind":"tag","published_at":"2019-12-16T20:56:51.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.4.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.4.1/manifests"},{"name":"v2.4.0","sha":"8fd82ff1d52a5162ff23c0a48e2c64a1fa4a3f8f","kind":"tag","published_at":"2019-10-23T04:08:19.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.4.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.4.0/manifests"},{"name":"v2.3.1","sha":"730df5f748271903322feb182be83b43ebbbe27d","kind":"tag","published_at":"2019-04-10T22:00:40.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.3.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.3.1/manifests"},{"name":"v2.3.0","sha":"628223f44a71f715d2881ea69afc795a1e9c01be","kind":"tag","published_at":"2019-02-27T00:05:37.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.3.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.3.0/manifests"},{"name":"v2.2.2","sha":"e94fb177d3668d35ab39c61cbb2f311550557e83","kind":"tag","published_at":"2019-01-02T21:08:35.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.2.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"72415094398e2f013bf50b76fd6de36df47938ea","kind":"tag","published_at":"2018-12-05T19:06:01.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.2.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"f61ac651e23224d43848a8dc387dee016d7eacf9","kind":"tag","published_at":"2018-11-30T00:37:18.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.2.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.2.0/manifests"},{"name":"v2.1.9","sha":"ef984e69dd356202fd4e4910d4d9c24468bdf0b8","kind":"tag","published_at":"2018-09-23T17:51:30.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.9","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.9/manifests"},{"name":"v2.1.8","sha":"8254d6c783765f38c8675fae4427a1fe73fbd09d","kind":"tag","published_at":"2018-08-08T17:29:30.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.8","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.8/manifests"},{"name":"v2.1.7","sha":"349dc03548930652802aadc09fb126e2b7cb6d80","kind":"tag","published_at":"2018-07-25T22:16:27.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.7","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.7/manifests"},{"name":"v1.1.2","sha":"56062818b5e15ee405eb8363f9498c7113e98337","kind":"tag","published_at":"2018-07-25T22:09:11.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.1.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.2/manifests"},{"name":"v2.1.6","sha":"76dd09796242edb5b897103a75df2645c028c960","kind":"tag","published_at":"2018-03-29T00:25:01.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.6","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.6/manifests"},{"name":"v2.1.5","sha":"552e98edab5d620205ff1a8960bf52a5a10aad03","kind":"tag","published_at":"2018-03-23T17:36:42.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.5","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.5/manifests"},{"name":"v1.1.1","sha":"6e50787b7338112747e64f32753fb4f9dbfb8f79","kind":"tag","published_at":"2018-03-23T00:52:00.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.1.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.1/manifests"},{"name":"v2.1.4","sha":"6ee92191fea850cdcab9a18867abf5f521cdbadb","kind":"tag","published_at":"2018-02-28T01:29:07.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.4","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.4/manifests"},{"name":"v2.1.3","sha":"f8f38de21b4dcd69d0413faf231983f5fd6634b1","kind":"tag","published_at":"2017-09-13T20:15:43.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.3/manifests"},{"name":"v2.1.2","sha":"b25e6cab129e4a54675b42ea49d38e9c33ade9e6","kind":"tag","published_at":"2017-06-07T21:53:41.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.2/manifests"},{"name":"v2.1.1","sha":"af13e1fbc7ac2df7f7eab54e5177104d546d0e9c","kind":"tag","published_at":"2017-05-03T23:45:58.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"d5683d954d08cd430460c651e2a2fff4f3b39f86","kind":"tag","published_at":"2017-02-24T23:57:24.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.1.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.1.0/manifests"},{"name":"v2.0.1","sha":"296c7f1463ec9b712176dc804dea0173d06dc728","kind":"tag","published_at":"2016-11-21T22:27:01.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.0.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"8c5257b2f658f86d174ae68c6a592eaf6a9608d9","kind":"tag","published_at":"2016-10-28T21:39:18.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v2.0.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v2.0.0/manifests"},{"name":"v1.1.0","sha":"aa2e30fdd1fe9dd3394119af66451ae790d50e0d","kind":"tag","published_at":"2016-09-23T00:23:00.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.1.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.1.0/manifests"},{"name":"v1.0.5","sha":"139276ceb5afbf13e636c44e9382f0ca75c12ba3","kind":"tag","published_at":"2016-09-03T19:23:47.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.5","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.5/manifests"},{"name":"v1.0.4","sha":"6e6dedab09005ebebd66b7cd4af9e8eada723c61","kind":"tag","published_at":"2016-08-31T22:15:56.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.4","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.4/manifests"},{"name":"v1.0.3","sha":"a3927f83df1b1516f9e9dec71839c93e6bcf1db0","kind":"tag","published_at":"2016-08-08T14:38:18.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.3","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.3/manifests"},{"name":"v1.0.2","sha":"e3f973b66b91445ec816dd7411ad1b6495a5a2fc","kind":"tag","published_at":"2016-05-02T22:58:07.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.2","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.2/manifests"},{"name":"v1.0.1","sha":"40d457b439244b546f023d056628e5184136899b","kind":"tag","published_at":"2016-03-29T20:36:57.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.1","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"7d9df93c5ee8a09ed250b3b2360972fa29b4bb3c","kind":"tag","published_at":"2016-03-26T06:33:02.000Z","download_url":"https://codeload.github.com/go-jose/go-jose/tar.gz/v1.0.0","html_url":"https://github.com/go-jose/go-jose/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/go-jose/go-jose@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-05-24T21:12:35.826Z","dependent_packages_count":2511,"downloads":null,"downloads_period":null,"dependent_repos_count":2218,"rankings":{"downloads":null,"dependent_repos_count":0.17126273447161086,"dependent_packages_count":0.10051288629316893,"stargazers_count":4.853880518939113,"forks_count":4.437899471079747,"docker_downloads_count":0.07666237090156952,"average":1.928043596337042},"purl":"pkg:golang/github.com/go-jose/go-jose/v3","advisories":[{"uuid":"GSA_kwCzR0hTQS03OGgyLTlmcngtMmptOM4ABUqy","url":"https://github.com/advisories/GHSA-78h2-9frx-2jm8","title":"Go JOSE Panics in JWE decryption","description":"### Impact\n\nDecrypting a JSON Web Encryption (JWE) object will panic if the `alg` field indicates a key wrapping algorithm ([one ending in `KW`](https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants), with the exception of `A128GCMKW`, `A192GCMKW`, and `A256GCMKW`) and the `encrypted_key` field is empty. The panic happens when `cipher.KeyUnwrap()` in `key_wrap.go` attempts to allocate a slice with a zero or negative length based on the length of the `encrypted_key`.\n\nThis code path is reachable from `ParseEncrypted()` / `ParseEncryptedJSON()` / `ParseEncryptedCompact()` followed by `Decrypt()` on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected.\n\nThis panic is also reachable by calling `cipher.KeyUnwrap()` directly with any `ciphertext` parameter less than 16 bytes long, but calling this function directly is less common.\n\nPanics can lead to denial of service.\n\n### Fixed In\n\n4.1.4 and v3.0.5\n\n### Workarounds\n\nIf the list of `keyAlgorithms` passed to `ParseEncrypted()` / `ParseEncryptedJSON()` / `ParseEncryptedCompact()` does not include key wrapping algorithms (those ending in `KW`), your application is unaffected.\n\nIf your application uses key wrapping, you can prevalidate to the JWE objects to ensure the `encrypted_key` field is nonempty. If your application accepts JWE Compact Serialization, apply that validation to the corresponding field of that serialization (the data between the first and second `.`).\n\n### Thanks\n\nThanks to Datadog's Security team for finding this issue.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-04-03T03:28:56.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","references":["https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8","https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants","https://nvd.nist.gov/vuln/detail/CVE-2026-34986","https://github.com/advisories/GHSA-78h2-9frx-2jm8"],"source_kind":"github","identifiers":["GHSA-78h2-9frx-2jm8","CVE-2026-34986"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-04-03T04:00:09.554Z","updated_at":"2026-05-27T16:01:47.330Z","epss_percentage":0.00035,"epss_percentile":0.1055,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03OGgyLTlmcngtMmptOM4ABUqy","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS03OGgyLTlmcngtMmptOM4ABUqy","packages":[{"ecosystem":"go","package_name":"github.com/go-jose/go-jose","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 2.6.3"}],"purl":"pkg:go/github.com%2Fgo-jose%2Fgo-jose"},{"ecosystem":"go","package_name":"github.com/go-jose/go-jose/v3","versions":[{"first_patched_version":"3.0.5","vulnerable_version_range":"\u003c 3.0.5"}],"purl":"pkg:go/github.com%2Fgo-jose%2Fgo-jose%2Fv3"},{"ecosystem":"go","package_name":"github.com/go-jose/go-jose/v4","versions":[{"first_patched_version":"4.1.4","vulnerable_version_range":"\u003c 4.1.4"}],"purl":"pkg:go/github.com%2Fgo-jose%2Fgo-jose%2Fv4"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03OGgyLTlmcngtMmptOM4ABUqy/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1jNmd3LXczOTgtaHY3OM4ABEvX","url":"https://github.com/advisories/GHSA-c6gw-w398-hv78","title":"DoS in go-jose Parsing","description":"### Impact\nWhen parsing compact JWS or JWE input, go-jose could use excessive memory. The code used strings.Split(token, \".\") to split JWT tokens, which is vulnerable to excessive memory consumption when processing maliciously crafted tokens with a large number of '.' characters. An attacker could exploit this by sending numerous malformed tokens, leading to memory exhaustion and a Denial of Service.\n\n### Patches\nVersion 4.0.5 fixes this issue\n\n### Workarounds\nApplications could pre-validate payloads passed to go-jose do not contain an excessive number of '.' characters.\n\n### References\nThis is the same sort of issue as in the golang.org/x/oauth2/jws package as CVE-2025-22868 and Go issue https://go.dev/issue/71490.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-02-24T22:49:19.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.9,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","references":["https://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78","https://github.com/golang/go/issues/71490","https://github.com/go-jose/go-jose/commit/99b346cec4e86d102284642c5dcbe9bb0cacfc22","https://go.dev/issue/71490","https://nvd.nist.gov/vuln/detail/CVE-2025-27144","https://github.com/go-jose/go-jose/releases/tag/v4.0.5","https://github.com/advisories/GHSA-c6gw-w398-hv78"],"source_kind":"github","identifiers":["GHSA-c6gw-w398-hv78","CVE-2025-27144"],"repository_url":"https://github.com/go-jose/go-jose","blast_radius":23.087134638510676,"created_at":"2025-02-24T23:07:30.139Z","updated_at":"2026-05-28T19:06:36.524Z","epss_percentage":0.00101,"epss_percentile":0.2731,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jNmd3LXczOTgtaHY3OM4ABEvX","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1jNmd3LXczOTgtaHY3OM4ABEvX","packages":[{"ecosystem":"go","package_name":"github.com/go-jose/go-jose","versions":[{"first_patched_version":"3.0.4","vulnerable_version_range":"\u003c 3.0.4"}],"purl":"pkg:go/github.com%2Fgo-jose%2Fgo-jose"},{"ecosystem":"go","package_name":"github.com/go-jose/go-jose/v3","versions":[{"first_patched_version":"3.0.4","vulnerable_version_range":"\u003c 3.0.4"}],"purl":"pkg:go/github.com%2Fgo-jose%2Fgo-jose%2Fv3"},{"ecosystem":"go","package_name":"github.com/go-jose/go-jose/v4","versions":[{"first_patched_version":"4.0.5","vulnerable_version_range":"\u003c 4.0.5"}],"purl":"pkg:go/github.com%2Fgo-jose%2Fgo-jose%2Fv4"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jNmd3LXczOTgtaHY3OM4ABEvX/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1jNXEyLTdyNGMtbXY2Z84AA51M","url":"https://github.com/advisories/GHSA-c5q2-7r4c-mv6g","title":"Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)","description":"### Impact\nAn attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Those functions now return an error if the decompressed data would exceed 250kB or 10x the compressed size (whichever is larger). Thanks to Enze Wang@Alioth and Jianjun Chen@Zhongguancun Lab (@zer0yu and @chenjj) for reporting.\n\n### Patches\nThe problem is fixed in the following packages and versions:\n- github.com/go-jose/go-jose/v4 version 4.0.1\n- github.com/go-jose/go-jose/v3 version 3.0.3\n- gopkg.in/go-jose/go-jose.v2 version 2.6.3\n\nThe problem will not be fixed in the following package because the package is archived:\n- gopkg.in/square/go-jose.v2","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2024-03-07T22:54:44.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","references":["https://github.com/go-jose/go-jose/security/advisories/GHSA-c5q2-7r4c-mv6g","https://github.com/go-jose/go-jose/commit/0dd4dd541c665fb292d664f77604ba694726f298","https://github.com/go-jose/go-jose/commit/add6a284ea0f844fd6628cba637be5451fe4b28a","https://github.com/go-jose/go-jose/commit/f4c051a0653d78199a053892f7619ebf96339502","https://nvd.nist.gov/vuln/detail/CVE-2024-28180","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KXKGNCRU7OTM5AHC7YIYBNOWI742PRMY","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XJDO5VSIAOGT2WP63AXAAWNRSVJCNCRH","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I6MMWFBOXJA6ZCXNVPDFJ4XMK5PVG5RG","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UJO2U5ACZVACNQXJ5EBRFLFW6DP5BROY","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IJ6LAJJ2FTA2JVVOACCV5RZTOIZLXUNJ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JNPMXL36YGS3GQEVI3Q5HKHJ7YAAQXL5","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MSOMHDKRPU3A2JEMRODT2IREDFBLVPGS","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UG5FSEYJ3GP27FZXC5YAAMMEC5XWKJHG","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GD2GSBQTBLYADASUBHHZV2CZPTSLIPQJ","https://github.com/advisories/GHSA-c5q2-7r4c-mv6g"],"source_kind":"github","identifiers":["GHSA-c5q2-7r4c-mv6g","CVE-2024-28180"],"repository_url":"https://github.com/go-jose/go-jose","blast_radius":0.0,"created_at":"2024-03-07T23:04:42.494Z","updated_at":"2026-06-01T12:06:24.338Z","epss_percentage":0.04986,"epss_percentile":0.89809,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jNXEyLTdyNGMtbXY2Z84AA51M","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1jNXEyLTdyNGMtbXY2Z84AA51M","packages":[{"ecosystem":"go","package_name":"gopkg.in/go-jose/go-jose.v2","versions":[{"first_patched_version":"2.6.3","vulnerable_version_range":"\u003c 2.6.3"}],"purl":"pkg:go/gopkg.in%2Fgo-jose%2Fgo-jose.v2","statistics":{"dependent_packages_count":200,"dependent_repos_count":289,"downloads":null,"downloads_period":null},"affected_versions":["v2.0.0","v2.0.1","v2.1.0","v2.1.1","v2.1.2","v2.1.3","v2.1.4","v2.1.5","v2.1.6","v2.1.7","v2.1.8","v2.1.9","v2.2.0","v2.2.1","v2.2.2","v2.3.0","v2.3.1","v2.4.0","v2.4.1","v2.5.0","v2.5.1","v2.6.0","v2.6.1","v2.6.2"],"unaffected_versions":["v2.6.3"]},{"ecosystem":"go","package_name":"github.com/go-jose/go-jose/v3","versions":[{"first_patched_version":"3.0.3","vulnerable_version_range":"\u003c 3.0.3"}],"purl":"pkg:go/github.com%2Fgo-jose%2Fgo-jose%2Fv3","statistics":{"dependent_packages_count":2511,"dependent_repos_count":2218,"downloads":null,"downloads_period":null},"affected_versions":["v3.0.0","v3.0.0-rc.1","v3.0.1","v3.0.2"],"unaffected_versions":["v3.0.3","v3.0.4","v3.0.5"]},{"ecosystem":"go","package_name":"github.com/go-jose/go-jose/v4","versions":[{"first_patched_version":"4.0.1","vulnerable_version_range":"\u003c 4.0.1"}],"purl":"pkg:go/github.com%2Fgo-jose%2Fgo-jose%2Fv4","statistics":{"dependent_packages_count":270,"dependent_repos_count":0,"downloads":null,"downloads_period":null},"affected_versions":["v4.0.0"],"unaffected_versions":["v4.0.1","v4.0.2","v4.0.3","v4.0.4","v4.0.5","v4.1.0","v4.1.1","v4.1.2","v4.1.3","v4.1.4"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jNXEyLTdyNGMtbXY2Z84AA51M/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS0yYzdjLTNtajktOGZxaM4AA3S1","url":"https://github.com/advisories/GHSA-2c7c-3mj9-8fqh","title":"Decryption of malicious PBES2 JWE objects can consume unbounded system resources","description":"The go-jose package is subject to a \"billion hashes attack\" causing denial-of-service when decrypting JWE inputs. This occurs when an attacker can provide a PBES2 encrypted JWE blob with a very large p2c value that, when decrypted, produces a denial-of-service.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2023-11-21T22:17:19.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/go-jose/go-jose/issues/64","https://github.com/go-jose/go-jose/commit/65351c27657d58960c2e6c9fbb2b00f818e50568","https://github.com/go-jose/go-jose/commit/a3d307244c3bc50b25a71aa0688764c32ec419c7","https://github.com/advisories/GHSA-2c7c-3mj9-8fqh"],"source_kind":"github","identifiers":["GHSA-2c7c-3mj9-8fqh"],"repository_url":"https://github.com/go-jose/go-jose","blast_radius":0.0,"created_at":"2023-11-21T23:05:44.772Z","updated_at":"2026-06-01T12:07:30.902Z","epss_percentage":null,"epss_percentile":null,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0yYzdjLTNtajktOGZxaM4AA3S1","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS0yYzdjLTNtajktOGZxaM4AA3S1","packages":[{"ecosystem":"go","package_name":"github.com/go-jose/go-jose/v3","versions":[{"first_patched_version":"3.0.1","vulnerable_version_range":"\u003c 3.0.1"}],"purl":"pkg:go/github.com%2Fgo-jose%2Fgo-jose%2Fv3","statistics":{"dependent_packages_count":2511,"dependent_repos_count":2218,"downloads":null,"downloads_period":null},"affected_versions":["v3.0.0","v3.0.0-rc.1"],"unaffected_versions":["v3.0.1","v3.0.2","v3.0.3","v3.0.4","v3.0.5"]}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0yYzdjLTNtajktOGZxaM4AA3S1/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/go-jose/go-jose/v3","docker_dependents_count":926,"docker_downloads_count":14110994357,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/go-jose/go-jose/v3","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/go-jose/go-jose/v3/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-05-17T03:01:16.963Z","issues_count":66,"pull_requests_count":215,"avg_time_to_close_issue":12780418.921052631,"avg_time_to_close_pull_request":3990082.3532608696,"issues_closed_count":38,"pull_requests_closed_count":184,"pull_request_authors_count":52,"issue_authors_count":52,"avg_comments_per_issue":1.378787878787879,"avg_comments_per_pull_request":0.9441860465116279,"merged_pull_requests_count":142,"bot_issues_count":2,"bot_pull_requests_count":41,"past_year_issues_count":8,"past_year_pull_requests_count":25,"past_year_avg_time_to_close_issue":781562.0,"past_year_avg_time_to_close_pull_request":539521.8888888889,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":9,"past_year_pull_request_authors_count":11,"past_year_issue_authors_count":6,"past_year_avg_comments_per_issue":2.25,"past_year_avg_comments_per_pull_request":0.96,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":5,"past_year_merged_pull_requests_count":8,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/go-jose%2Fgo-jose/issues","maintainers":[{"login":"jsha","count":60,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"},{"login":"mcpherrinm","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"beautifulentropy","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/beautifulentropy"},{"login":"aarongable","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aarongable"},{"login":"pgporada","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/pgporada"}],"active_maintainers":[{"login":"mcpherrinm","count":8,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mcpherrinm"},{"login":"jsha","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jsha"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv3/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv3/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv3/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv3/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv3/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgo-jose%2Fgo-jose%2Fv3/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2154697,"maintainers_count":0,"namespaces_count":791356,"keywords_count":113139,"github":"golang","metadata":{"funded_packages_count":53897},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-01T05:12:27.241Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}}],"commits":null,"issues":{"table":{}},"events":null,"keywords":[],"dependencies":null,"score":29.667366268223592,"created_at":"2026-05-14T05:21:18.149Z","updated_at":"2026-06-01T14:31:51.996Z","avatar_url":"https://github.com/go-jose.png","language":"Go","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/372454","html_url":"https://summary.ecosyste.ms/projects/372454"}