{"id":373028,"url":"https://github.com/labstack/gommon","last_synced_at":"2026-05-17T13:30:20.158Z","repository":{"id":28588610,"uuid":"32106741","full_name":"labstack/gommon","owner":"labstack","description":"Common packages for Go","archived":false,"fork":false,"pushed_at":"2026-04-19T22:13:09.000Z","size":127,"stargazers_count":582,"open_issues_count":14,"forks_count":101,"subscribers_count":18,"default_branch":"master","last_synced_at":"2026-04-28T11:26:43.647Z","etag":null,"topics":["bytes","color","email","logging","random"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/labstack.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2015-03-12T22:35:57.000Z","updated_at":"2026-04-22T20:00:18.000Z","dependencies_parsed_at":"2023-12-20T14:34:28.816Z","dependency_job_id":"cad7e580-2713-4e61-ae60-b522756fa020","html_url":"https://github.com/labstack/gommon","commit_stats":{"total_commits":163,"total_committers":19,"mean_commits":8.578947368421053,"dds":"0.31288343558282206","last_synced_commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"previous_names":[],"tags_count":19,"template":false,"template_full_name":null,"purl":"pkg:github/labstack/gommon","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/labstack","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/sbom","scorecard":{"id":576542,"data":{"date":"2025-08-11","repo":{"name":"github.com/labstack/gommon","commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Code-Review","score":4,"reason":"Found 12/28 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/gommon.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/gommon.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T17:57:27.234Z","repository_id":28588610,"created_at":"2025-08-20T17:57:27.234Z","updated_at":"2025-08-20T17:57:27.234Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":33103970,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-16T04:41:52.686Z","status":"ssl_error","status_checked_at":"2026-05-16T04:41:52.009Z","response_time":115,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"labstack","name":"LabStack LLC","uuid":"2624634","kind":"organization","description":"","email":"hello@labstack.com","website":"https://labstack.com","location":"SFO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2624634?v=4","repositories_count":20,"last_synced_at":"2025-10-06T19:56:35.599Z","metadata":{"has_sponsors_listing":true},"html_url":"https://github.com/labstack","funding_links":["https://github.com/sponsors/labstack"],"total_stars":35043,"followers":302,"following":0,"created_at":"2022-11-04T11:23:33.843Z","updated_at":"2025-10-06T19:56:35.600Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/labstack","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/labstack/repositories"},"packages":[{"id":3494304,"name":"github.com/labstack/gommon","ecosystem":"go","description":"","homepage":"https://github.com/labstack/gommon","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/labstack/gommon","keywords_array":[],"namespace":"github.com/labstack","versions_count":15,"first_release_published_at":"2015-04-03T14:41:11.000Z","latest_release_published_at":"2026-04-19T22:12:38.000Z","latest_release_number":"v0.5.0","last_synced_at":"2026-05-14T14:30:51.961Z","created_at":"2022-04-10T19:23:49.311Z","updated_at":"2026-05-14T14:30:51.961Z","registry_url":"https://pkg.go.dev/github.com/labstack/gommon","install_command":"go get github.com/labstack/gommon","documentation_url":"https://pkg.go.dev/github.com/labstack/gommon#section-documentation","metadata":{},"repo_metadata":{"id":28588610,"uuid":"32106741","full_name":"labstack/gommon","owner":"labstack","description":"Common packages for Go","archived":false,"fork":false,"pushed_at":"2023-12-20T13:02:16.000Z","size":120,"stargazers_count":579,"open_issues_count":14,"forks_count":101,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-24T15:23:37.173Z","etag":null,"topics":["bytes","color","email","logging","random"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/labstack.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2015-03-12T22:35:57.000Z","updated_at":"2026-03-09T22:47:53.000Z","dependencies_parsed_at":"2023-12-20T14:34:28.816Z","dependency_job_id":"cad7e580-2713-4e61-ae60-b522756fa020","html_url":"https://github.com/labstack/gommon","commit_stats":{"total_commits":163,"total_committers":19,"mean_commits":8.578947368421053,"dds":"0.31288343558282206","last_synced_commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"previous_names":[],"tags_count":19,"template":false,"template_full_name":null,"purl":"pkg:github/labstack/gommon","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/labstack","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/sbom","scorecard":{"id":576542,"data":{"date":"2025-08-11","repo":{"name":"github.com/labstack/gommon","commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Code-Review","score":4,"reason":"Found 12/28 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/gommon.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/gommon.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T17:57:27.234Z","repository_id":28588610,"created_at":"2025-08-20T17:57:27.234Z","updated_at":"2025-08-20T17:57:27.234Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30902814,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"labstack","name":"LabStack LLC","uuid":"2624634","kind":"organization","description":"","email":"hello@labstack.com","website":"https://labstack.com","location":"SFO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2624634?v=4","repositories_count":20,"last_synced_at":"2025-10-06T19:56:35.599Z","metadata":{"has_sponsors_listing":true},"html_url":"https://github.com/labstack","funding_links":["https://github.com/sponsors/labstack"],"total_stars":35043,"followers":302,"following":0,"created_at":"2022-11-04T11:23:33.843Z","updated_at":"2025-10-06T19:56:35.600Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/labstack","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/labstack/repositories"},"tags":[{"name":"v0.4.2","sha":"2888b9ce44ed86f3cb956f95becc724d255f0a33","kind":"commit","published_at":"2023-12-20T12:59:22.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/v0.4.2","html_url":"https://github.com/labstack/gommon/releases/tag/v0.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@v0.4.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.4.2/manifests"},{"name":"v0.4.1","sha":"bf0335abda3637e22e0d0fe5660023f22d8af857","kind":"commit","published_at":"2023-11-09T21:14:45.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/v0.4.1","html_url":"https://github.com/labstack/gommon/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"6267eb7480ded0b4c030ca5e7320417281bb4cd6","kind":"commit","published_at":"2022-06-14T19:47:25.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/v0.4.0","html_url":"https://github.com/labstack/gommon/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.4.0/manifests"},{"name":"v0.3.1","sha":"8c098ec745a2e2f9d05aaa55feb380724e9f60a1","kind":"commit","published_at":"2021-11-05T07:22:46.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/v0.3.1","html_url":"https://github.com/labstack/gommon/releases/tag/v0.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@v0.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.3.1/manifests"},{"name":"v0.3.0","sha":"4919956f6fb227b548f004da27c7c6b20fba499f","kind":"commit","published_at":"2019-08-17T14:33:23.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/v0.3.0","html_url":"https://github.com/labstack/gommon/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.3.0/manifests"},{"name":"v0.2.9","sha":"ab0bfd9a5eba33a8c364bf3390d809ed23c31f97","kind":"commit","published_at":"2019-06-04T18:32:50.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/v0.2.9","html_url":"https://github.com/labstack/gommon/releases/tag/v0.2.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@v0.2.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.2.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.2.9/manifests"},{"name":"v0.2.8","sha":"7fd9f68ece0bcb1a905fac8f1549f0083f71c51b","kind":"commit","published_at":"2018-11-10T20:33:03.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/v0.2.8","html_url":"https://github.com/labstack/gommon/releases/tag/v0.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@v0.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.2.8/manifests"},{"name":"v0.2.7","sha":"2a618302b929cc20862dda3aa6f02f64dbe740dd","kind":"commit","published_at":"2018-07-08T00:26:42.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/v0.2.7","html_url":"https://github.com/labstack/gommon/releases/tag/v0.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@v0.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.2.7/manifests"},{"name":"0.2.6","sha":"d6898124de917583f5ff5592ef931d1dfe0ddc05","kind":"commit","published_at":"2018-06-13T04:44:13.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/0.2.6","html_url":"https://github.com/labstack/gommon/releases/tag/0.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@0.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/0.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/0.2.6/manifests"},{"name":"0.2.5","sha":"588f4e8bddc6cb45c27b448e925c7fd6a5545434","kind":"commit","published_at":"2018-04-26T01:44:45.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/0.2.5","html_url":"https://github.com/labstack/gommon/releases/tag/0.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@0.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/0.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/0.2.5/manifests"},{"name":"0.2.4","sha":"6fe1405d73ec4bd4cd8a4ac8e2a2b2bf95d03954","kind":"commit","published_at":"2018-03-12T17:41:16.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/0.2.4","html_url":"https://github.com/labstack/gommon/releases/tag/0.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@0.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/0.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/0.2.4/manifests"},{"name":"0.2.3","sha":"57409ada9da0f2afad6664c49502f8c50fbd8476","kind":"commit","published_at":"2017-09-25T05:28:17.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/0.2.3","html_url":"https://github.com/labstack/gommon/releases/tag/0.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@0.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/0.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/0.2.3/manifests"},{"name":"0.2.2","sha":"779b8a8b9850a97acba6a3fe20feb628c39e17c1","kind":"commit","published_at":"2017-07-12T19:11:37.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/0.2.2","html_url":"https://github.com/labstack/gommon/releases/tag/0.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@0.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/0.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/0.2.2/manifests"},{"name":"v0.2.1","sha":"1121fd3e243c202482226a7afe4dcd07ffc4139a","kind":"commit","published_at":"2017-05-06T16:25:42.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/v0.2.1","html_url":"https://github.com/labstack/gommon/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"9cedb429ffbe71a32a3ae7c65fd109cb7ae07804","kind":"commit","published_at":"2017-03-12T01:56:59.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/v0.2.0","html_url":"https://github.com/labstack/gommon/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"2d272df536d051e737aea353b86c979d6e88bce0","kind":"commit","published_at":"2016-10-23T20:04:48.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/v0.1.0","html_url":"https://github.com/labstack/gommon/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.1.0/manifests"},{"name":"v0.0.3","sha":"fc11faa173d0671701574081bf292367d11e9a42","kind":"commit","published_at":"2015-05-17T15:41:12.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/v0.0.3","html_url":"https://github.com/labstack/gommon/releases/tag/v0.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@v0.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.0.3/manifests"},{"name":"v0.0.2","sha":"fb0d71b51099788bc16f36bfdecaf64691f1e18c","kind":"commit","published_at":"2015-05-16T19:07:13.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/v0.0.2","html_url":"https://github.com/labstack/gommon/releases/tag/v0.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@v0.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.0.2/manifests"},{"name":"v0.0.1","sha":"78ff1be5a485ecc39fe719e0f2ca891a17916dd5","kind":"commit","published_at":"2015-04-03T14:41:11.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/v0.0.1","html_url":"https://github.com/labstack/gommon/releases/tag/v0.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@v0.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.0.1/manifests"}]},"repo_metadata_updated_at":"2026-03-25T17:02:27.934Z","dependent_packages_count":6064,"downloads":null,"downloads_period":null,"dependent_repos_count":22864,"rankings":{"downloads":null,"dependent_repos_count":0.041791020011987694,"dependent_packages_count":0.03401353489809421,"stargazers_count":2.623694377471709,"forks_count":2.54997811934188,"docker_downloads_count":0.23290975421073043,"average":1.09647736118688},"purl":"pkg:golang/github.com/labstack/gommon","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/labstack/gommon","docker_dependents_count":1070,"docker_downloads_count":218563655,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/labstack/gommon","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/labstack/gommon/dependencies","status":null,"funding_links":["https://github.com/sponsors/labstack"],"critical":true,"issue_metadata":{"last_synced_at":"2025-08-31T09:08:20.419Z","issues_count":19,"pull_requests_count":41,"avg_time_to_close_issue":31323419.07142857,"avg_time_to_close_pull_request":17839934.20588235,"issues_closed_count":14,"pull_requests_closed_count":34,"pull_request_authors_count":30,"issue_authors_count":19,"avg_comments_per_issue":1.736842105263158,"avg_comments_per_pull_request":2.24390243902439,"merged_pull_requests_count":24,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/issues","maintainers":[{"login":"vishr","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vishr"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2140190,"maintainers_count":0,"namespaces_count":782439,"keywords_count":112823,"github":"golang","metadata":{"funded_packages_count":53495},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-04-19T05:14:45.920Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14035175,"name":"github.com/labstack/gommon/color","ecosystem":"go","description":"","homepage":"https://github.com/labstack/gommon","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/labstack/gommon","keywords_array":[],"namespace":"github.com/labstack/gommon","versions_count":15,"first_release_published_at":"2026-03-12T20:38:45.094Z","latest_release_published_at":"2026-04-29T13:25:33.969Z","latest_release_number":"v0.5.0","last_synced_at":"2026-04-29T13:25:55.772Z","created_at":"2026-03-12T20:38:23.928Z","updated_at":"2026-04-29T13:25:55.772Z","registry_url":"https://pkg.go.dev/github.com/labstack/gommon/color","install_command":"go get github.com/labstack/gommon/color","documentation_url":"https://pkg.go.dev/github.com/labstack/gommon/color#section-documentation","metadata":{},"repo_metadata":{"id":28588610,"uuid":"32106741","full_name":"labstack/gommon","owner":"labstack","description":"Common packages for Go","archived":false,"fork":false,"pushed_at":"2023-12-20T13:02:16.000Z","size":120,"stargazers_count":579,"open_issues_count":14,"forks_count":101,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-24T15:23:37.173Z","etag":null,"topics":["bytes","color","email","logging","random"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/labstack.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2015-03-12T22:35:57.000Z","updated_at":"2026-03-09T22:47:53.000Z","dependencies_parsed_at":"2023-12-20T14:34:28.816Z","dependency_job_id":"cad7e580-2713-4e61-ae60-b522756fa020","html_url":"https://github.com/labstack/gommon","commit_stats":{"total_commits":163,"total_committers":19,"mean_commits":8.578947368421053,"dds":"0.31288343558282206","last_synced_commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"previous_names":[],"tags_count":19,"template":false,"template_full_name":null,"purl":"pkg:github/labstack/gommon","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/labstack","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/sbom","scorecard":{"id":576542,"data":{"date":"2025-08-11","repo":{"name":"github.com/labstack/gommon","commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Code-Review","score":4,"reason":"Found 12/28 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/gommon.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/gommon.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T17:57:27.234Z","repository_id":28588610,"created_at":"2025-08-20T17:57:27.234Z","updated_at":"2025-08-20T17:57:27.234Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30902814,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:02:16.813Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.23548160009902,"dependent_packages_count":4.905882785242946,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":5.070682192670983},"purl":"pkg:golang/github.com/labstack/gommon/color","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/labstack/gommon/color","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/labstack/gommon/color","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/labstack/gommon/color/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-31T09:08:20.419Z","issues_count":19,"pull_requests_count":41,"avg_time_to_close_issue":31323419.07142857,"avg_time_to_close_pull_request":17839934.20588235,"issues_closed_count":14,"pull_requests_closed_count":34,"pull_request_authors_count":30,"issue_authors_count":19,"avg_comments_per_issue":1.736842105263158,"avg_comments_per_pull_request":2.24390243902439,"merged_pull_requests_count":24,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/issues","maintainers":[{"login":"vishr","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vishr"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon%2Fcolor/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon%2Fcolor/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon%2Fcolor/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon%2Fcolor/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon%2Fcolor/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon%2Fcolor/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2140190,"maintainers_count":0,"namespaces_count":782439,"keywords_count":112823,"github":"golang","metadata":{"funded_packages_count":53495},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-04-19T05:14:45.920Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":13438688,"name":"golang-github-labstack-gommon","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/labstack/gommon","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/labstack/gommon","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-08T01:44:11.189Z","latest_release_published_at":"2026-02-08T01:44:11.189Z","latest_release_number":"0.2.6-1ubuntu1","last_synced_at":"2026-03-08T02:58:56.559Z","created_at":"2026-02-08T01:44:10.791Z","updated_at":"2026-03-25T17:02:16.864Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-labstack-gommon","install_command":"apt-get install golang-github-labstack-gommon","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-labstack-gommon-dev","standards_version":"4.1.0","maintainer":"Ubuntu Developers \u003cubuntu-devel-discuss@lists.ubuntu.com\u003e","build_depends":"debhelper (\u003e= 10), dh-golang, golang-any, golang-github-mattn-go-colorable-dev, golang-github-mattn-go-isatty-dev, golang-github-valyala-fasttemplate-dev, golang-golang-x-sys-dev, golang-github-davecgh-go-spew-dev, golang-github-pmezard-go-difflib-dev, golang-github-stretchr-testify-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":28588610,"uuid":"32106741","full_name":"labstack/gommon","owner":"labstack","description":"Common packages for Go","archived":false,"fork":false,"pushed_at":"2023-12-20T13:02:16.000Z","size":120,"stargazers_count":579,"open_issues_count":14,"forks_count":101,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-24T15:23:37.173Z","etag":null,"topics":["bytes","color","email","logging","random"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/labstack.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2015-03-12T22:35:57.000Z","updated_at":"2026-03-09T22:47:53.000Z","dependencies_parsed_at":"2023-12-20T14:34:28.816Z","dependency_job_id":"cad7e580-2713-4e61-ae60-b522756fa020","html_url":"https://github.com/labstack/gommon","commit_stats":{"total_commits":163,"total_committers":19,"mean_commits":8.578947368421053,"dds":"0.31288343558282206","last_synced_commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"previous_names":[],"tags_count":19,"template":false,"template_full_name":null,"purl":"pkg:github/labstack/gommon","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/labstack","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/sbom","scorecard":{"id":576542,"data":{"date":"2025-08-11","repo":{"name":"github.com/labstack/gommon","commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Code-Review","score":4,"reason":"Found 12/28 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/gommon.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/gommon.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T17:57:27.234Z","repository_id":28588610,"created_at":"2025-08-20T17:57:27.234Z","updated_at":"2025-08-20T17:57:27.234Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30902814,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:02:16.864Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-labstack-gommon?arch=source\u0026distro=ubuntu-20.04\u0026repository_url=https://launchpad.net/ubuntu/focal","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-labstack-gommon","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-labstack-gommon","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-labstack-gommon/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-31T09:08:20.419Z","issues_count":19,"pull_requests_count":41,"avg_time_to_close_issue":31323419.07142857,"avg_time_to_close_pull_request":17839934.20588235,"issues_closed_count":14,"pull_requests_closed_count":34,"pull_request_authors_count":30,"issue_authors_count":19,"avg_comments_per_issue":1.736842105263158,"avg_comments_per_pull_request":2.24390243902439,"merged_pull_requests_count":24,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/issues","maintainers":[{"login":"vishr","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vishr"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-github-labstack-gommon/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-github-labstack-gommon/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-github-labstack-gommon/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-github-labstack-gommon/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-github-labstack-gommon/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/golang-github-labstack-gommon/codemeta","maintainers":[],"registry":{"name":"ubuntu-20.04","url":"https://launchpad.net/ubuntu/focal","ecosystem":"ubuntu","default":false,"packages_count":30789,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"ubuntu","metadata":{"codename":"focal"},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:47.233Z","updated_at":"2026-04-27T18:20:36.874Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/namespaces"}},{"id":13685176,"name":"golang-github-labstack-gommon","ecosystem":"debian","description":null,"homepage":"https://github.com/labstack/gommon","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/labstack/gommon","keywords_array":["golang"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T17:52:58.969Z","latest_release_published_at":"2026-02-12T17:52:58.969Z","latest_release_number":"0.2.6-2","last_synced_at":"2026-03-13T00:08:29.215Z","created_at":"2026-02-12T17:52:58.805Z","updated_at":"2026-03-25T17:02:16.817Z","registry_url":"https://tracker.debian.org/pkg/golang-github-labstack-gommon","install_command":"apt-get install golang-github-labstack-gommon","documentation_url":"https://packages.debian.org/bookworm/golang-github-labstack-gommon","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"golang-github-labstack-gommon-dev","standards_version":"4.5.1","maintainer":"Debian Go Packaging Team \u003cpkg-go-maintainers@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-mattn-go-colorable-dev, golang-github-mattn-go-isatty-dev, golang-github-valyala-fasttemplate-dev, golang-golang-x-sys-dev, golang-github-davecgh-go-spew-dev, golang-github-pmezard-go-difflib-dev, golang-github-stretchr-testify-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":28588610,"uuid":"32106741","full_name":"labstack/gommon","owner":"labstack","description":"Common packages for Go","archived":false,"fork":false,"pushed_at":"2023-12-20T13:02:16.000Z","size":120,"stargazers_count":579,"open_issues_count":14,"forks_count":101,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-24T15:23:37.173Z","etag":null,"topics":["bytes","color","email","logging","random"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/labstack.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2015-03-12T22:35:57.000Z","updated_at":"2026-03-09T22:47:53.000Z","dependencies_parsed_at":"2023-12-20T14:34:28.816Z","dependency_job_id":"cad7e580-2713-4e61-ae60-b522756fa020","html_url":"https://github.com/labstack/gommon","commit_stats":{"total_commits":163,"total_committers":19,"mean_commits":8.578947368421053,"dds":"0.31288343558282206","last_synced_commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"previous_names":[],"tags_count":19,"template":false,"template_full_name":null,"purl":"pkg:github/labstack/gommon","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/labstack","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/sbom","scorecard":{"id":576542,"data":{"date":"2025-08-11","repo":{"name":"github.com/labstack/gommon","commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Code-Review","score":4,"reason":"Found 12/28 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/gommon.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/gommon.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T17:57:27.234Z","repository_id":28588610,"created_at":"2025-08-20T17:57:27.234Z","updated_at":"2025-08-20T17:57:27.234Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30902814,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:02:16.817Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/golang-github-labstack-gommon?arch=source\u0026distro=debian-12","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/golang-github-labstack-gommon","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/golang-github-labstack-gommon","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/golang-github-labstack-gommon/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-31T09:08:20.419Z","issues_count":19,"pull_requests_count":41,"avg_time_to_close_issue":31323419.07142857,"avg_time_to_close_pull_request":17839934.20588235,"issues_closed_count":14,"pull_requests_closed_count":34,"pull_request_authors_count":30,"issue_authors_count":19,"avg_comments_per_issue":1.736842105263158,"avg_comments_per_pull_request":2.24390243902439,"merged_pull_requests_count":24,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/issues","maintainers":[{"login":"vishr","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vishr"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-labstack-gommon/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-labstack-gommon/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-labstack-gommon/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-labstack-gommon/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-labstack-gommon/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/golang-github-labstack-gommon/codemeta","maintainers":[],"registry":{"name":"debian-12","url":"https://packages.debian.org/bookworm","ecosystem":"debian","default":true,"packages_count":34734,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"debian","metadata":{"codename":"bookworm"},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:49.459Z","updated_at":"2026-04-27T18:20:38.992Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/namespaces"}},{"id":13646078,"name":"golang-github-labstack-gommon","ecosystem":"debian","description":null,"homepage":"https://github.com/labstack/gommon","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/labstack/gommon","keywords_array":["golang"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T03:24:13.940Z","latest_release_published_at":"2026-02-12T03:24:13.940Z","latest_release_number":"0.2.6-2","last_synced_at":"2026-03-13T19:16:12.534Z","created_at":"2026-02-12T03:24:13.733Z","updated_at":"2026-03-25T17:02:16.915Z","registry_url":"https://tracker.debian.org/pkg/golang-github-labstack-gommon","install_command":"apt-get install golang-github-labstack-gommon","documentation_url":"https://packages.debian.org/trixie/golang-github-labstack-gommon","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"golang-github-labstack-gommon-dev","standards_version":"4.5.1","maintainer":"Debian Go Packaging Team \u003cpkg-go-maintainers@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-mattn-go-colorable-dev, golang-github-mattn-go-isatty-dev, golang-github-valyala-fasttemplate-dev, golang-golang-x-sys-dev, golang-github-davecgh-go-spew-dev, golang-github-pmezard-go-difflib-dev, golang-github-stretchr-testify-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":28588610,"uuid":"32106741","full_name":"labstack/gommon","owner":"labstack","description":"Common packages for Go","archived":false,"fork":false,"pushed_at":"2023-12-20T13:02:16.000Z","size":120,"stargazers_count":579,"open_issues_count":14,"forks_count":101,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-24T15:23:37.173Z","etag":null,"topics":["bytes","color","email","logging","random"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/labstack.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2015-03-12T22:35:57.000Z","updated_at":"2026-03-09T22:47:53.000Z","dependencies_parsed_at":"2023-12-20T14:34:28.816Z","dependency_job_id":"cad7e580-2713-4e61-ae60-b522756fa020","html_url":"https://github.com/labstack/gommon","commit_stats":{"total_commits":163,"total_committers":19,"mean_commits":8.578947368421053,"dds":"0.31288343558282206","last_synced_commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"previous_names":[],"tags_count":19,"template":false,"template_full_name":null,"purl":"pkg:github/labstack/gommon","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/labstack","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/sbom","scorecard":{"id":576542,"data":{"date":"2025-08-11","repo":{"name":"github.com/labstack/gommon","commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Code-Review","score":4,"reason":"Found 12/28 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/gommon.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/gommon.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T17:57:27.234Z","repository_id":28588610,"created_at":"2025-08-20T17:57:27.234Z","updated_at":"2025-08-20T17:57:27.234Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30902814,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:02:16.915Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/golang-github-labstack-gommon?arch=source\u0026distro=debian-13\u0026repository_url=https://packages.debian.org/trixie","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/golang-github-labstack-gommon","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/golang-github-labstack-gommon","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/golang-github-labstack-gommon/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-31T09:08:20.419Z","issues_count":19,"pull_requests_count":41,"avg_time_to_close_issue":31323419.07142857,"avg_time_to_close_pull_request":17839934.20588235,"issues_closed_count":14,"pull_requests_closed_count":34,"pull_request_authors_count":30,"issue_authors_count":19,"avg_comments_per_issue":1.736842105263158,"avg_comments_per_pull_request":2.24390243902439,"merged_pull_requests_count":24,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/issues","maintainers":[{"login":"vishr","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vishr"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-labstack-gommon/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-labstack-gommon/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-labstack-gommon/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-labstack-gommon/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-labstack-gommon/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-labstack-gommon/codemeta","maintainers":[],"registry":{"name":"debian-13","url":"https://packages.debian.org/trixie","ecosystem":"debian","default":false,"packages_count":38024,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"debian","metadata":{"codename":"trixie"},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:50.448Z","updated_at":"2026-04-27T18:20:39.853Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/namespaces"}},{"id":13581329,"name":"golang-github-labstack-gommon","ecosystem":"debian","description":null,"homepage":"https://github.com/labstack/gommon","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/labstack/gommon","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-11T08:52:49.588Z","latest_release_published_at":"2026-02-11T08:52:49.588Z","latest_release_number":"0.2.6-1","last_synced_at":"2026-03-13T07:08:03.001Z","created_at":"2026-02-11T08:52:49.423Z","updated_at":"2026-03-25T17:02:16.864Z","registry_url":"https://tracker.debian.org/pkg/golang-github-labstack-gommon","install_command":"apt-get install golang-github-labstack-gommon","documentation_url":"https://packages.debian.org/buster/golang-github-labstack-gommon","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"golang-github-labstack-gommon-dev","standards_version":"4.1.0","maintainer":"Debian Go Packaging Team \u003cpkg-go-maintainers@lists.alioth.debian.org\u003e","build_depends":"debhelper (\u003e= 10), dh-golang, golang-any, golang-github-mattn-go-colorable-dev, golang-github-mattn-go-isatty-dev, golang-github-valyala-fasttemplate-dev, golang-golang-x-sys-dev, golang-github-davecgh-go-spew-dev, golang-github-pmezard-go-difflib-dev, golang-github-stretchr-testify-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":28588610,"uuid":"32106741","full_name":"labstack/gommon","owner":"labstack","description":"Common packages for Go","archived":false,"fork":false,"pushed_at":"2023-12-20T13:02:16.000Z","size":120,"stargazers_count":579,"open_issues_count":14,"forks_count":101,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-24T15:23:37.173Z","etag":null,"topics":["bytes","color","email","logging","random"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/labstack.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2015-03-12T22:35:57.000Z","updated_at":"2026-03-09T22:47:53.000Z","dependencies_parsed_at":"2023-12-20T14:34:28.816Z","dependency_job_id":"cad7e580-2713-4e61-ae60-b522756fa020","html_url":"https://github.com/labstack/gommon","commit_stats":{"total_commits":163,"total_committers":19,"mean_commits":8.578947368421053,"dds":"0.31288343558282206","last_synced_commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"previous_names":[],"tags_count":19,"template":false,"template_full_name":null,"purl":"pkg:github/labstack/gommon","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/labstack","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/sbom","scorecard":{"id":576542,"data":{"date":"2025-08-11","repo":{"name":"github.com/labstack/gommon","commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Code-Review","score":4,"reason":"Found 12/28 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/gommon.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/gommon.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T17:57:27.234Z","repository_id":28588610,"created_at":"2025-08-20T17:57:27.234Z","updated_at":"2025-08-20T17:57:27.234Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30902814,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:02:16.863Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/golang-github-labstack-gommon?arch=source\u0026distro=debian-10\u0026repository_url=https://packages.debian.org/buster","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/golang-github-labstack-gommon","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/golang-github-labstack-gommon","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/golang-github-labstack-gommon/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-31T09:08:20.419Z","issues_count":19,"pull_requests_count":41,"avg_time_to_close_issue":31323419.07142857,"avg_time_to_close_pull_request":17839934.20588235,"issues_closed_count":14,"pull_requests_closed_count":34,"pull_request_authors_count":30,"issue_authors_count":19,"avg_comments_per_issue":1.736842105263158,"avg_comments_per_pull_request":2.24390243902439,"merged_pull_requests_count":24,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/issues","maintainers":[{"login":"vishr","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vishr"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-github-labstack-gommon/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-github-labstack-gommon/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-github-labstack-gommon/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-github-labstack-gommon/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-github-labstack-gommon/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/golang-github-labstack-gommon/codemeta","maintainers":[],"registry":{"name":"debian-10","url":"https://packages.debian.org/buster","ecosystem":"debian","default":false,"packages_count":28836,"maintainers_count":0,"namespaces_count":3,"keywords_count":915,"github":"debian","metadata":{"codename":"buster","mirror":"http://archive.debian.org/debian","funded_packages_count":86},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:50.156Z","updated_at":"2026-05-13T05:01:00.358Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/namespaces"}},{"id":13388261,"name":"golang-github-labstack-gommon","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/labstack/gommon","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/labstack/gommon","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-05T16:22:56.912Z","latest_release_published_at":"2026-02-05T16:22:56.912Z","latest_release_number":"0.2.6-2","last_synced_at":"2026-03-05T18:47:57.869Z","created_at":"2026-02-05T16:22:24.713Z","updated_at":"2026-03-25T17:02:16.876Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-labstack-gommon","install_command":"apt-get install golang-github-labstack-gommon","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-labstack-gommon-dev","standards_version":"4.5.1","maintainer":"Debian Go Packaging Team \u003cpkg-go-maintainers@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-mattn-go-colorable-dev, golang-github-mattn-go-isatty-dev, golang-github-valyala-fasttemplate-dev, golang-golang-x-sys-dev, golang-github-davecgh-go-spew-dev, golang-github-pmezard-go-difflib-dev, golang-github-stretchr-testify-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":28588610,"uuid":"32106741","full_name":"labstack/gommon","owner":"labstack","description":"Common packages for Go","archived":false,"fork":false,"pushed_at":"2023-12-20T13:02:16.000Z","size":120,"stargazers_count":579,"open_issues_count":14,"forks_count":101,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-24T15:23:37.173Z","etag":null,"topics":["bytes","color","email","logging","random"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/labstack.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2015-03-12T22:35:57.000Z","updated_at":"2026-03-09T22:47:53.000Z","dependencies_parsed_at":"2023-12-20T14:34:28.816Z","dependency_job_id":"cad7e580-2713-4e61-ae60-b522756fa020","html_url":"https://github.com/labstack/gommon","commit_stats":{"total_commits":163,"total_committers":19,"mean_commits":8.578947368421053,"dds":"0.31288343558282206","last_synced_commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"previous_names":[],"tags_count":19,"template":false,"template_full_name":null,"purl":"pkg:github/labstack/gommon","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/labstack","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/sbom","scorecard":{"id":576542,"data":{"date":"2025-08-11","repo":{"name":"github.com/labstack/gommon","commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Code-Review","score":4,"reason":"Found 12/28 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/gommon.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/gommon.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T17:57:27.234Z","repository_id":28588610,"created_at":"2025-08-20T17:57:27.234Z","updated_at":"2025-08-20T17:57:27.234Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30902814,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:02:16.876Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-labstack-gommon?arch=source\u0026distro=ubuntu-24.04","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-labstack-gommon","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-labstack-gommon","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-labstack-gommon/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-31T09:08:20.419Z","issues_count":19,"pull_requests_count":41,"avg_time_to_close_issue":31323419.07142857,"avg_time_to_close_pull_request":17839934.20588235,"issues_closed_count":14,"pull_requests_closed_count":34,"pull_request_authors_count":30,"issue_authors_count":19,"avg_comments_per_issue":1.736842105263158,"avg_comments_per_pull_request":2.24390243902439,"merged_pull_requests_count":24,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/issues","maintainers":[{"login":"vishr","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vishr"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-labstack-gommon/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-labstack-gommon/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-labstack-gommon/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-labstack-gommon/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-labstack-gommon/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-labstack-gommon/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.04","url":"https://launchpad.net/ubuntu/noble","ecosystem":"ubuntu","default":true,"packages_count":37306,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"ubuntu","metadata":{"codename":"noble"},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:45.928Z","updated_at":"2026-04-27T18:20:35.701Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/namespaces"}},{"id":13505088,"name":"golang-github-labstack-gommon","ecosystem":"debian","description":null,"homepage":"https://github.com/labstack/gommon","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/labstack/gommon","keywords_array":["golang"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-10T19:01:11.482Z","latest_release_published_at":"2026-02-10T19:01:11.482Z","latest_release_number":"0.2.6-2","last_synced_at":"2026-03-13T16:29:00.455Z","created_at":"2026-02-10T19:01:11.231Z","updated_at":"2026-03-25T17:02:16.893Z","registry_url":"https://tracker.debian.org/pkg/golang-github-labstack-gommon","install_command":"apt-get install golang-github-labstack-gommon","documentation_url":"https://packages.debian.org/bullseye/golang-github-labstack-gommon","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"golang-github-labstack-gommon-dev","standards_version":"4.5.1","maintainer":"Debian Go Packaging Team \u003cpkg-go-maintainers@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-mattn-go-colorable-dev, golang-github-mattn-go-isatty-dev, golang-github-valyala-fasttemplate-dev, golang-golang-x-sys-dev, golang-github-davecgh-go-spew-dev, golang-github-pmezard-go-difflib-dev, golang-github-stretchr-testify-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":28588610,"uuid":"32106741","full_name":"labstack/gommon","owner":"labstack","description":"Common packages for Go","archived":false,"fork":false,"pushed_at":"2023-12-20T13:02:16.000Z","size":120,"stargazers_count":579,"open_issues_count":14,"forks_count":101,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-24T15:23:37.173Z","etag":null,"topics":["bytes","color","email","logging","random"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/labstack.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2015-03-12T22:35:57.000Z","updated_at":"2026-03-09T22:47:53.000Z","dependencies_parsed_at":"2023-12-20T14:34:28.816Z","dependency_job_id":"cad7e580-2713-4e61-ae60-b522756fa020","html_url":"https://github.com/labstack/gommon","commit_stats":{"total_commits":163,"total_committers":19,"mean_commits":8.578947368421053,"dds":"0.31288343558282206","last_synced_commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"previous_names":[],"tags_count":19,"template":false,"template_full_name":null,"purl":"pkg:github/labstack/gommon","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/labstack","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/sbom","scorecard":{"id":576542,"data":{"date":"2025-08-11","repo":{"name":"github.com/labstack/gommon","commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Code-Review","score":4,"reason":"Found 12/28 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/gommon.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/gommon.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T17:57:27.234Z","repository_id":28588610,"created_at":"2025-08-20T17:57:27.234Z","updated_at":"2025-08-20T17:57:27.234Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30902814,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:02:16.893Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/golang-github-labstack-gommon?arch=source\u0026distro=debian-11\u0026repository_url=https://packages.debian.org/bullseye","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/golang-github-labstack-gommon","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/golang-github-labstack-gommon","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/golang-github-labstack-gommon/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-31T09:08:20.419Z","issues_count":19,"pull_requests_count":41,"avg_time_to_close_issue":31323419.07142857,"avg_time_to_close_pull_request":17839934.20588235,"issues_closed_count":14,"pull_requests_closed_count":34,"pull_request_authors_count":30,"issue_authors_count":19,"avg_comments_per_issue":1.736842105263158,"avg_comments_per_pull_request":2.24390243902439,"merged_pull_requests_count":24,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/issues","maintainers":[{"login":"vishr","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vishr"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-github-labstack-gommon/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-github-labstack-gommon/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-github-labstack-gommon/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-github-labstack-gommon/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-github-labstack-gommon/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/golang-github-labstack-gommon/codemeta","maintainers":[],"registry":{"name":"debian-11","url":"https://packages.debian.org/bullseye","ecosystem":"debian","default":false,"packages_count":31268,"maintainers_count":0,"namespaces_count":3,"keywords_count":0,"github":"debian","metadata":{"codename":"bullseye"},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:49.702Z","updated_at":"2026-04-27T18:20:39.352Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/namespaces"}},{"id":13790845,"name":"golang-github-labstack-gommon","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/labstack/gommon","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/labstack/gommon","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-13T15:11:32.443Z","latest_release_published_at":"2026-02-13T15:11:32.443Z","latest_release_number":"0.2.6-2","last_synced_at":"2026-03-13T15:24:29.812Z","created_at":"2026-02-13T15:11:32.055Z","updated_at":"2026-03-25T17:02:16.925Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-labstack-gommon","install_command":"apt-get install golang-github-labstack-gommon","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-labstack-gommon-dev","standards_version":"4.5.1","maintainer":"Debian Go Packaging Team \u003cpkg-go-maintainers@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-mattn-go-colorable-dev, golang-github-mattn-go-isatty-dev, golang-github-valyala-fasttemplate-dev, golang-golang-x-sys-dev, golang-github-davecgh-go-spew-dev, golang-github-pmezard-go-difflib-dev, golang-github-stretchr-testify-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":28588610,"uuid":"32106741","full_name":"labstack/gommon","owner":"labstack","description":"Common packages for Go","archived":false,"fork":false,"pushed_at":"2023-12-20T13:02:16.000Z","size":120,"stargazers_count":579,"open_issues_count":14,"forks_count":101,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-24T15:23:37.173Z","etag":null,"topics":["bytes","color","email","logging","random"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/labstack.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2015-03-12T22:35:57.000Z","updated_at":"2026-03-09T22:47:53.000Z","dependencies_parsed_at":"2023-12-20T14:34:28.816Z","dependency_job_id":"cad7e580-2713-4e61-ae60-b522756fa020","html_url":"https://github.com/labstack/gommon","commit_stats":{"total_commits":163,"total_committers":19,"mean_commits":8.578947368421053,"dds":"0.31288343558282206","last_synced_commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"previous_names":[],"tags_count":19,"template":false,"template_full_name":null,"purl":"pkg:github/labstack/gommon","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/labstack","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/sbom","scorecard":{"id":576542,"data":{"date":"2025-08-11","repo":{"name":"github.com/labstack/gommon","commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Code-Review","score":4,"reason":"Found 12/28 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/gommon.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/gommon.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T17:57:27.234Z","repository_id":28588610,"created_at":"2025-08-20T17:57:27.234Z","updated_at":"2025-08-20T17:57:27.234Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30902814,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:02:16.925Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-labstack-gommon?arch=source\u0026distro=ubuntu-23.10\u0026repository_url=https://launchpad.net/ubuntu/mantic","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-labstack-gommon","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-labstack-gommon","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-labstack-gommon/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-31T09:08:20.419Z","issues_count":19,"pull_requests_count":41,"avg_time_to_close_issue":31323419.07142857,"avg_time_to_close_pull_request":17839934.20588235,"issues_closed_count":14,"pull_requests_closed_count":34,"pull_request_authors_count":30,"issue_authors_count":19,"avg_comments_per_issue":1.736842105263158,"avg_comments_per_pull_request":2.24390243902439,"merged_pull_requests_count":24,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/issues","maintainers":[{"login":"vishr","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vishr"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-labstack-gommon/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-labstack-gommon/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-labstack-gommon/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-labstack-gommon/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-labstack-gommon/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/golang-github-labstack-gommon/codemeta","maintainers":[],"registry":{"name":"ubuntu-23.10","url":"https://launchpad.net/ubuntu/mantic","ecosystem":"ubuntu","default":false,"packages_count":36642,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"ubuntu","metadata":{"codename":"mantic","mirror":"http://old-releases.ubuntu.com/ubuntu"},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.636Z","updated_at":"2026-04-27T18:20:38.051Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/namespaces"}},{"id":13448677,"name":"golang-github-labstack-gommon","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/labstack/gommon","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/labstack/gommon","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-08T15:55:30.084Z","latest_release_published_at":"2026-02-08T15:55:30.084Z","latest_release_number":"0.2.6-2","last_synced_at":"2026-03-08T16:52:29.598Z","created_at":"2026-02-08T15:55:29.796Z","updated_at":"2026-03-25T17:02:16.946Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-labstack-gommon","install_command":"apt-get install golang-github-labstack-gommon","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-labstack-gommon-dev","standards_version":"4.5.1","maintainer":"Debian Go Packaging Team \u003cpkg-go-maintainers@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-mattn-go-colorable-dev, golang-github-mattn-go-isatty-dev, golang-github-valyala-fasttemplate-dev, golang-golang-x-sys-dev, golang-github-davecgh-go-spew-dev, golang-github-pmezard-go-difflib-dev, golang-github-stretchr-testify-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":28588610,"uuid":"32106741","full_name":"labstack/gommon","owner":"labstack","description":"Common packages for Go","archived":false,"fork":false,"pushed_at":"2023-12-20T13:02:16.000Z","size":120,"stargazers_count":579,"open_issues_count":14,"forks_count":101,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-24T15:23:37.173Z","etag":null,"topics":["bytes","color","email","logging","random"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/labstack.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2015-03-12T22:35:57.000Z","updated_at":"2026-03-09T22:47:53.000Z","dependencies_parsed_at":"2023-12-20T14:34:28.816Z","dependency_job_id":"cad7e580-2713-4e61-ae60-b522756fa020","html_url":"https://github.com/labstack/gommon","commit_stats":{"total_commits":163,"total_committers":19,"mean_commits":8.578947368421053,"dds":"0.31288343558282206","last_synced_commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"previous_names":[],"tags_count":19,"template":false,"template_full_name":null,"purl":"pkg:github/labstack/gommon","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/labstack","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/sbom","scorecard":{"id":576542,"data":{"date":"2025-08-11","repo":{"name":"github.com/labstack/gommon","commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Code-Review","score":4,"reason":"Found 12/28 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/gommon.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/gommon.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T17:57:27.234Z","repository_id":28588610,"created_at":"2025-08-20T17:57:27.234Z","updated_at":"2025-08-20T17:57:27.234Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30902814,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:02:16.946Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-labstack-gommon?arch=source\u0026distro=ubuntu-24.10\u0026repository_url=https://launchpad.net/ubuntu/oracular","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-labstack-gommon","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-labstack-gommon","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-labstack-gommon/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-31T09:08:20.419Z","issues_count":19,"pull_requests_count":41,"avg_time_to_close_issue":31323419.07142857,"avg_time_to_close_pull_request":17839934.20588235,"issues_closed_count":14,"pull_requests_closed_count":34,"pull_request_authors_count":30,"issue_authors_count":19,"avg_comments_per_issue":1.736842105263158,"avg_comments_per_pull_request":2.24390243902439,"merged_pull_requests_count":24,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/issues","maintainers":[{"login":"vishr","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vishr"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-labstack-gommon/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-labstack-gommon/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-labstack-gommon/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-labstack-gommon/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-labstack-gommon/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-labstack-gommon/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.10","url":"https://launchpad.net/ubuntu/oracular","ecosystem":"ubuntu","default":false,"packages_count":38437,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"ubuntu","metadata":{"codename":"oracular","mirror":"http://old-releases.ubuntu.com/ubuntu"},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.028Z","updated_at":"2026-04-27T18:20:37.303Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/namespaces"}},{"id":13417910,"name":"golang-github-labstack-gommon","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/labstack/gommon","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/labstack/gommon","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-07T03:38:22.987Z","latest_release_published_at":"2026-02-07T03:38:22.987Z","latest_release_number":"0.2.6-2","last_synced_at":"2026-03-07T04:40:50.450Z","created_at":"2026-02-07T03:38:22.623Z","updated_at":"2026-03-25T17:02:16.951Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-labstack-gommon","install_command":"apt-get install golang-github-labstack-gommon","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-labstack-gommon-dev","standards_version":"4.5.1","maintainer":"Debian Go Packaging Team \u003cpkg-go-maintainers@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-mattn-go-colorable-dev, golang-github-mattn-go-isatty-dev, golang-github-valyala-fasttemplate-dev, golang-golang-x-sys-dev, golang-github-davecgh-go-spew-dev, golang-github-pmezard-go-difflib-dev, golang-github-stretchr-testify-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":28588610,"uuid":"32106741","full_name":"labstack/gommon","owner":"labstack","description":"Common packages for Go","archived":false,"fork":false,"pushed_at":"2023-12-20T13:02:16.000Z","size":120,"stargazers_count":579,"open_issues_count":14,"forks_count":101,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-24T15:23:37.173Z","etag":null,"topics":["bytes","color","email","logging","random"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/labstack.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2015-03-12T22:35:57.000Z","updated_at":"2026-03-09T22:47:53.000Z","dependencies_parsed_at":"2023-12-20T14:34:28.816Z","dependency_job_id":"cad7e580-2713-4e61-ae60-b522756fa020","html_url":"https://github.com/labstack/gommon","commit_stats":{"total_commits":163,"total_committers":19,"mean_commits":8.578947368421053,"dds":"0.31288343558282206","last_synced_commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"previous_names":[],"tags_count":19,"template":false,"template_full_name":null,"purl":"pkg:github/labstack/gommon","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/labstack","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/sbom","scorecard":{"id":576542,"data":{"date":"2025-08-11","repo":{"name":"github.com/labstack/gommon","commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Code-Review","score":4,"reason":"Found 12/28 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/gommon.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/gommon.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T17:57:27.234Z","repository_id":28588610,"created_at":"2025-08-20T17:57:27.234Z","updated_at":"2025-08-20T17:57:27.234Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30902814,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:02:16.950Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-labstack-gommon?arch=source\u0026distro=ubuntu-22.04\u0026repository_url=https://launchpad.net/ubuntu/jammy","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-labstack-gommon","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-labstack-gommon","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-labstack-gommon/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-31T09:08:20.419Z","issues_count":19,"pull_requests_count":41,"avg_time_to_close_issue":31323419.07142857,"avg_time_to_close_pull_request":17839934.20588235,"issues_closed_count":14,"pull_requests_closed_count":34,"pull_request_authors_count":30,"issue_authors_count":19,"avg_comments_per_issue":1.736842105263158,"avg_comments_per_pull_request":2.24390243902439,"merged_pull_requests_count":24,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/issues","maintainers":[{"login":"vishr","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vishr"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-labstack-gommon/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-labstack-gommon/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-labstack-gommon/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-labstack-gommon/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-labstack-gommon/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/golang-github-labstack-gommon/codemeta","maintainers":[],"registry":{"name":"ubuntu-22.04","url":"https://launchpad.net/ubuntu/jammy","ecosystem":"ubuntu","default":false,"packages_count":34289,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"ubuntu","metadata":{"codename":"jammy"},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:46.486Z","updated_at":"2026-04-27T18:20:36.155Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/namespaces"}},{"id":13546037,"name":"golang-github-labstack-gommon","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/labstack/gommon","licenses":"mit","normalized_licenses":[],"repository_url":"https://github.com/labstack/gommon","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-11T02:06:58.250Z","latest_release_published_at":"2026-02-11T02:06:58.250Z","latest_release_number":"0.2.6-2","last_synced_at":"2026-03-11T19:22:33.120Z","created_at":"2026-02-11T02:06:58.075Z","updated_at":"2026-03-25T17:02:16.985Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-labstack-gommon","install_command":"apt-get install golang-github-labstack-gommon","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-labstack-gommon-dev","standards_version":"4.5.1","maintainer":"Debian Go Packaging Team \u003cpkg-go-maintainers@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-mattn-go-colorable-dev, golang-github-mattn-go-isatty-dev, golang-github-valyala-fasttemplate-dev, golang-golang-x-sys-dev, golang-github-davecgh-go-spew-dev, golang-github-pmezard-go-difflib-dev, golang-github-stretchr-testify-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":28588610,"uuid":"32106741","full_name":"labstack/gommon","owner":"labstack","description":"Common packages for Go","archived":false,"fork":false,"pushed_at":"2023-12-20T13:02:16.000Z","size":120,"stargazers_count":579,"open_issues_count":14,"forks_count":101,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-24T15:23:37.173Z","etag":null,"topics":["bytes","color","email","logging","random"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/labstack.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2015-03-12T22:35:57.000Z","updated_at":"2026-03-09T22:47:53.000Z","dependencies_parsed_at":"2023-12-20T14:34:28.816Z","dependency_job_id":"cad7e580-2713-4e61-ae60-b522756fa020","html_url":"https://github.com/labstack/gommon","commit_stats":{"total_commits":163,"total_committers":19,"mean_commits":8.578947368421053,"dds":"0.31288343558282206","last_synced_commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"previous_names":[],"tags_count":19,"template":false,"template_full_name":null,"purl":"pkg:github/labstack/gommon","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/labstack","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/sbom","scorecard":{"id":576542,"data":{"date":"2025-08-11","repo":{"name":"github.com/labstack/gommon","commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Code-Review","score":4,"reason":"Found 12/28 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/gommon.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/gommon.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T17:57:27.234Z","repository_id":28588610,"created_at":"2025-08-20T17:57:27.234Z","updated_at":"2025-08-20T17:57:27.234Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30902814,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:02:16.985Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-labstack-gommon?arch=source\u0026distro=ubuntu-23.04\u0026repository_url=https://launchpad.net/ubuntu/lunar","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-labstack-gommon","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-labstack-gommon","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-labstack-gommon/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-31T09:08:20.419Z","issues_count":19,"pull_requests_count":41,"avg_time_to_close_issue":31323419.07142857,"avg_time_to_close_pull_request":17839934.20588235,"issues_closed_count":14,"pull_requests_closed_count":34,"pull_request_authors_count":30,"issue_authors_count":19,"avg_comments_per_issue":1.736842105263158,"avg_comments_per_pull_request":2.24390243902439,"merged_pull_requests_count":24,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/issues","maintainers":[{"login":"vishr","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vishr"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-labstack-gommon/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-labstack-gommon/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-labstack-gommon/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-labstack-gommon/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-labstack-gommon/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/golang-github-labstack-gommon/codemeta","maintainers":[],"registry":{"name":"ubuntu-23.04","url":"https://launchpad.net/ubuntu/lunar","ecosystem":"ubuntu","default":false,"packages_count":36116,"maintainers_count":0,"namespaces_count":4,"keywords_count":0,"github":"ubuntu","metadata":{"codename":"lunar","mirror":"http://old-releases.ubuntu.com/ubuntu"},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:49.117Z","updated_at":"2026-04-27T18:20:38.741Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/namespaces"}},{"id":11854618,"name":"github.com/Labstack/gommon","ecosystem":"go","description":null,"homepage":null,"licenses":"mit","normalized_licenses":["MIT"],"repository_url":"https://github.com/Labstack/gommon","keywords_array":[],"namespace":null,"versions_count":15,"first_release_published_at":"2015-04-03T14:41:11.000Z","latest_release_published_at":"2026-04-19T22:12:38.000Z","latest_release_number":"v0.5.0","last_synced_at":"2026-05-09T07:19:03.323Z","created_at":"2025-06-30T10:53:08.817Z","updated_at":"2026-05-09T07:19:03.324Z","registry_url":"https://pkg.go.dev/github.com/Labstack/gommon","install_command":"go get github.com/Labstack/gommon","documentation_url":"https://pkg.go.dev/github.com/Labstack/gommon#section-documentation","metadata":{},"repo_metadata":{"id":28588610,"uuid":"32106741","full_name":"labstack/gommon","owner":"labstack","description":"Common packages for Go","archived":false,"fork":false,"pushed_at":"2023-12-20T13:02:16.000Z","size":120,"stargazers_count":579,"open_issues_count":14,"forks_count":101,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-24T15:23:37.173Z","etag":null,"topics":["bytes","color","email","logging","random"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/labstack.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2015-03-12T22:35:57.000Z","updated_at":"2026-03-09T22:47:53.000Z","dependencies_parsed_at":"2023-12-20T14:34:28.816Z","dependency_job_id":"cad7e580-2713-4e61-ae60-b522756fa020","html_url":"https://github.com/labstack/gommon","commit_stats":{"total_commits":163,"total_committers":19,"mean_commits":8.578947368421053,"dds":"0.31288343558282206","last_synced_commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"previous_names":[],"tags_count":19,"template":false,"template_full_name":null,"purl":"pkg:github/labstack/gommon","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/labstack","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/sbom","scorecard":{"id":576542,"data":{"date":"2025-08-11","repo":{"name":"github.com/labstack/gommon","commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Code-Review","score":4,"reason":"Found 12/28 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/gommon.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/gommon.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T17:57:27.234Z","repository_id":28588610,"created_at":"2025-08-20T17:57:27.234Z","updated_at":"2025-08-20T17:57:27.234Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30931123,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-25T07:55:14.202Z","status":"ssl_error","status_checked_at":"2026-03-25T07:55:10.924Z","response_time":80,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"labstack","name":"LabStack LLC","uuid":"2624634","kind":"organization","description":"","email":"hello@labstack.com","website":"https://labstack.com","location":"SFO","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/2624634?v=4","repositories_count":20,"last_synced_at":"2025-10-06T19:56:35.599Z","metadata":{"has_sponsors_listing":true},"html_url":"https://github.com/labstack","funding_links":["https://github.com/sponsors/labstack"],"total_stars":35043,"followers":302,"following":0,"created_at":"2022-11-04T11:23:33.843Z","updated_at":"2025-10-06T19:56:35.600Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/labstack","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/labstack/repositories"},"tags":[{"name":"v0.4.2","sha":"2888b9ce44ed86f3cb956f95becc724d255f0a33","kind":"commit","published_at":"2023-12-20T12:59:22.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/v0.4.2","html_url":"https://github.com/labstack/gommon/releases/tag/v0.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@v0.4.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.4.2/manifests"},{"name":"v0.4.1","sha":"bf0335abda3637e22e0d0fe5660023f22d8af857","kind":"commit","published_at":"2023-11-09T21:14:45.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/v0.4.1","html_url":"https://github.com/labstack/gommon/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"6267eb7480ded0b4c030ca5e7320417281bb4cd6","kind":"commit","published_at":"2022-06-14T19:47:25.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/v0.4.0","html_url":"https://github.com/labstack/gommon/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.4.0/manifests"},{"name":"v0.3.1","sha":"8c098ec745a2e2f9d05aaa55feb380724e9f60a1","kind":"commit","published_at":"2021-11-05T07:22:46.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/v0.3.1","html_url":"https://github.com/labstack/gommon/releases/tag/v0.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@v0.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.3.1/manifests"},{"name":"v0.3.0","sha":"4919956f6fb227b548f004da27c7c6b20fba499f","kind":"commit","published_at":"2019-08-17T14:33:23.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/v0.3.0","html_url":"https://github.com/labstack/gommon/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.3.0/manifests"},{"name":"v0.2.9","sha":"ab0bfd9a5eba33a8c364bf3390d809ed23c31f97","kind":"commit","published_at":"2019-06-04T18:32:50.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/v0.2.9","html_url":"https://github.com/labstack/gommon/releases/tag/v0.2.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@v0.2.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.2.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.2.9/manifests"},{"name":"v0.2.8","sha":"7fd9f68ece0bcb1a905fac8f1549f0083f71c51b","kind":"commit","published_at":"2018-11-10T20:33:03.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/v0.2.8","html_url":"https://github.com/labstack/gommon/releases/tag/v0.2.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@v0.2.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.2.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.2.8/manifests"},{"name":"v0.2.7","sha":"2a618302b929cc20862dda3aa6f02f64dbe740dd","kind":"commit","published_at":"2018-07-08T00:26:42.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/v0.2.7","html_url":"https://github.com/labstack/gommon/releases/tag/v0.2.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@v0.2.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.2.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.2.7/manifests"},{"name":"0.2.6","sha":"d6898124de917583f5ff5592ef931d1dfe0ddc05","kind":"commit","published_at":"2018-06-13T04:44:13.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/0.2.6","html_url":"https://github.com/labstack/gommon/releases/tag/0.2.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@0.2.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/0.2.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/0.2.6/manifests"},{"name":"0.2.5","sha":"588f4e8bddc6cb45c27b448e925c7fd6a5545434","kind":"commit","published_at":"2018-04-26T01:44:45.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/0.2.5","html_url":"https://github.com/labstack/gommon/releases/tag/0.2.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@0.2.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/0.2.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/0.2.5/manifests"},{"name":"0.2.4","sha":"6fe1405d73ec4bd4cd8a4ac8e2a2b2bf95d03954","kind":"commit","published_at":"2018-03-12T17:41:16.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/0.2.4","html_url":"https://github.com/labstack/gommon/releases/tag/0.2.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@0.2.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/0.2.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/0.2.4/manifests"},{"name":"0.2.3","sha":"57409ada9da0f2afad6664c49502f8c50fbd8476","kind":"commit","published_at":"2017-09-25T05:28:17.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/0.2.3","html_url":"https://github.com/labstack/gommon/releases/tag/0.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@0.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/0.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/0.2.3/manifests"},{"name":"0.2.2","sha":"779b8a8b9850a97acba6a3fe20feb628c39e17c1","kind":"commit","published_at":"2017-07-12T19:11:37.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/0.2.2","html_url":"https://github.com/labstack/gommon/releases/tag/0.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@0.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/0.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/0.2.2/manifests"},{"name":"v0.2.1","sha":"1121fd3e243c202482226a7afe4dcd07ffc4139a","kind":"commit","published_at":"2017-05-06T16:25:42.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/v0.2.1","html_url":"https://github.com/labstack/gommon/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"9cedb429ffbe71a32a3ae7c65fd109cb7ae07804","kind":"commit","published_at":"2017-03-12T01:56:59.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/v0.2.0","html_url":"https://github.com/labstack/gommon/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"2d272df536d051e737aea353b86c979d6e88bce0","kind":"commit","published_at":"2016-10-23T20:04:48.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/v0.1.0","html_url":"https://github.com/labstack/gommon/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.1.0/manifests"},{"name":"v0.0.3","sha":"fc11faa173d0671701574081bf292367d11e9a42","kind":"commit","published_at":"2015-05-17T15:41:12.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/v0.0.3","html_url":"https://github.com/labstack/gommon/releases/tag/v0.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@v0.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.0.3/manifests"},{"name":"v0.0.2","sha":"fb0d71b51099788bc16f36bfdecaf64691f1e18c","kind":"commit","published_at":"2015-05-16T19:07:13.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/v0.0.2","html_url":"https://github.com/labstack/gommon/releases/tag/v0.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@v0.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.0.2/manifests"},{"name":"v0.0.1","sha":"78ff1be5a485ecc39fe719e0f2ca891a17916dd5","kind":"commit","published_at":"2015-04-03T14:41:11.000Z","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/v0.0.1","html_url":"https://github.com/labstack/gommon/releases/tag/v0.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/labstack/gommon@v0.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags/v0.0.1/manifests"}]},"repo_metadata_updated_at":"2026-03-25T17:02:27.857Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.673586424307466,"dependent_packages_count":5.316629217251324,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":5.4951078207793955},"purl":"pkg:golang/github.com/%21labstack/gommon","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/Labstack/gommon","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/Labstack/gommon","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/Labstack/gommon/dependencies","status":null,"funding_links":["https://github.com/sponsors/labstack"],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-31T09:08:20.419Z","issues_count":19,"pull_requests_count":41,"avg_time_to_close_issue":31323419.07142857,"avg_time_to_close_pull_request":17839934.20588235,"issues_closed_count":14,"pull_requests_closed_count":34,"pull_request_authors_count":30,"issue_authors_count":19,"avg_comments_per_issue":1.736842105263158,"avg_comments_per_pull_request":2.24390243902439,"merged_pull_requests_count":24,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/issues","maintainers":[{"login":"vishr","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vishr"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FLabstack%2Fgommon/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FLabstack%2Fgommon/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FLabstack%2Fgommon/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FLabstack%2Fgommon/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FLabstack%2Fgommon/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2FLabstack%2Fgommon/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2140190,"maintainers_count":0,"namespaces_count":782439,"keywords_count":112823,"github":"golang","metadata":{"funded_packages_count":53495},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-04-19T05:14:45.920Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14035174,"name":"github.com/labstack/gommon/bytes","ecosystem":"go","description":"","homepage":"https://github.com/labstack/gommon","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/labstack/gommon","keywords_array":[],"namespace":"github.com/labstack/gommon","versions_count":11,"first_release_published_at":"2026-03-12T20:38:38.311Z","latest_release_published_at":"2026-03-12T20:38:38.311Z","latest_release_number":"v0.4.2","last_synced_at":"2026-04-30T05:48:47.707Z","created_at":"2026-03-12T20:38:23.752Z","updated_at":"2026-04-30T05:48:47.707Z","registry_url":"https://pkg.go.dev/github.com/labstack/gommon/bytes","install_command":"go get github.com/labstack/gommon/bytes","documentation_url":"https://pkg.go.dev/github.com/labstack/gommon/bytes#section-documentation","metadata":{},"repo_metadata":{"id":28588610,"uuid":"32106741","full_name":"labstack/gommon","owner":"labstack","description":"Common packages for Go","archived":false,"fork":false,"pushed_at":"2023-12-20T13:02:16.000Z","size":120,"stargazers_count":579,"open_issues_count":14,"forks_count":101,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-24T15:23:37.173Z","etag":null,"topics":["bytes","color","email","logging","random"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/labstack.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2015-03-12T22:35:57.000Z","updated_at":"2026-03-09T22:47:53.000Z","dependencies_parsed_at":"2023-12-20T14:34:28.816Z","dependency_job_id":"cad7e580-2713-4e61-ae60-b522756fa020","html_url":"https://github.com/labstack/gommon","commit_stats":{"total_commits":163,"total_committers":19,"mean_commits":8.578947368421053,"dds":"0.31288343558282206","last_synced_commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"previous_names":[],"tags_count":19,"template":false,"template_full_name":null,"purl":"pkg:github/labstack/gommon","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/labstack","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/sbom","scorecard":{"id":576542,"data":{"date":"2025-08-11","repo":{"name":"github.com/labstack/gommon","commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Code-Review","score":4,"reason":"Found 12/28 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/gommon.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/gommon.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T17:57:27.234Z","repository_id":28588610,"created_at":"2025-08-20T17:57:27.234Z","updated_at":"2025-08-20T17:57:27.234Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30902814,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:02:16.826Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.23548160009902,"dependent_packages_count":4.905882785242946,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":5.070682192670983},"purl":"pkg:golang/github.com/labstack/gommon/bytes","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/labstack/gommon/bytes","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/labstack/gommon/bytes","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/labstack/gommon/bytes/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-31T09:08:20.419Z","issues_count":19,"pull_requests_count":41,"avg_time_to_close_issue":31323419.07142857,"avg_time_to_close_pull_request":17839934.20588235,"issues_closed_count":14,"pull_requests_closed_count":34,"pull_request_authors_count":30,"issue_authors_count":19,"avg_comments_per_issue":1.736842105263158,"avg_comments_per_pull_request":2.24390243902439,"merged_pull_requests_count":24,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/issues","maintainers":[{"login":"vishr","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vishr"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon%2Fbytes/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon%2Fbytes/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon%2Fbytes/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon%2Fbytes/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon%2Fbytes/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon%2Fbytes/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2140190,"maintainers_count":0,"namespaces_count":782439,"keywords_count":112823,"github":"golang","metadata":{"funded_packages_count":53495},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-04-19T05:14:45.920Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14035176,"name":"github.com/labstack/gommon/log","ecosystem":"go","description":"","homepage":"https://github.com/labstack/gommon","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/labstack/gommon","keywords_array":[],"namespace":"github.com/labstack/gommon","versions_count":11,"first_release_published_at":"2026-03-12T20:38:38.911Z","latest_release_published_at":"2026-03-12T20:38:38.911Z","latest_release_number":"v0.4.2","last_synced_at":"2026-04-27T13:15:53.047Z","created_at":"2026-03-12T20:38:24.181Z","updated_at":"2026-04-27T13:15:53.047Z","registry_url":"https://pkg.go.dev/github.com/labstack/gommon/log","install_command":"go get github.com/labstack/gommon/log","documentation_url":"https://pkg.go.dev/github.com/labstack/gommon/log#section-documentation","metadata":{},"repo_metadata":{"id":28588610,"uuid":"32106741","full_name":"labstack/gommon","owner":"labstack","description":"Common packages for Go","archived":false,"fork":false,"pushed_at":"2023-12-20T13:02:16.000Z","size":120,"stargazers_count":579,"open_issues_count":14,"forks_count":101,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-24T15:23:37.173Z","etag":null,"topics":["bytes","color","email","logging","random"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/labstack.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2015-03-12T22:35:57.000Z","updated_at":"2026-03-09T22:47:53.000Z","dependencies_parsed_at":"2023-12-20T14:34:28.816Z","dependency_job_id":"cad7e580-2713-4e61-ae60-b522756fa020","html_url":"https://github.com/labstack/gommon","commit_stats":{"total_commits":163,"total_committers":19,"mean_commits":8.578947368421053,"dds":"0.31288343558282206","last_synced_commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"previous_names":[],"tags_count":19,"template":false,"template_full_name":null,"purl":"pkg:github/labstack/gommon","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/labstack","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/sbom","scorecard":{"id":576542,"data":{"date":"2025-08-11","repo":{"name":"github.com/labstack/gommon","commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Code-Review","score":4,"reason":"Found 12/28 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/gommon.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/gommon.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T17:57:27.234Z","repository_id":28588610,"created_at":"2025-08-20T17:57:27.234Z","updated_at":"2025-08-20T17:57:27.234Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30902814,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:02:16.864Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.23548160009902,"dependent_packages_count":4.905882785242946,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":5.070682192670983},"purl":"pkg:golang/github.com/labstack/gommon/log","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/labstack/gommon/log","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/labstack/gommon/log","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/labstack/gommon/log/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-31T09:08:20.419Z","issues_count":19,"pull_requests_count":41,"avg_time_to_close_issue":31323419.07142857,"avg_time_to_close_pull_request":17839934.20588235,"issues_closed_count":14,"pull_requests_closed_count":34,"pull_request_authors_count":30,"issue_authors_count":19,"avg_comments_per_issue":1.736842105263158,"avg_comments_per_pull_request":2.24390243902439,"merged_pull_requests_count":24,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/issues","maintainers":[{"login":"vishr","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vishr"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon%2Flog/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon%2Flog/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon%2Flog/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon%2Flog/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon%2Flog/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon%2Flog/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2140190,"maintainers_count":0,"namespaces_count":782439,"keywords_count":112823,"github":"golang","metadata":{"funded_packages_count":53495},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-04-19T05:14:45.920Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":13963286,"name":"go-github-com-labstack-gommon","ecosystem":"guix","description":"Common libraries for Go","homepage":"https://github.com/labstack/gommon","licenses":"expat","normalized_licenses":["Other"],"repository_url":"https://github.com/labstack/gommon","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-03-02T22:49:24.824Z","latest_release_published_at":"2026-03-02T22:49:24.824Z","latest_release_number":"0.4.2","last_synced_at":"2026-04-27T18:17:40.117Z","created_at":"2026-03-02T22:49:24.620Z","updated_at":"2026-04-27T18:22:16.782Z","registry_url":"https://packages.guix.gnu.org/packages/go-github-com-labstack-gommon/0.4.2/","install_command":"guix install go-github-com-labstack-gommon","documentation_url":"https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/golang-xyz.scm#n16530","metadata":{"location":"gnu/packages/golang-xyz.scm:16530","variable_name":"go-github-com-labstack-gommon"},"repo_metadata":{"id":28588610,"uuid":"32106741","full_name":"labstack/gommon","owner":"labstack","description":"Common packages for Go","archived":false,"fork":false,"pushed_at":"2023-12-20T13:02:16.000Z","size":120,"stargazers_count":579,"open_issues_count":14,"forks_count":101,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-24T15:23:37.173Z","etag":null,"topics":["bytes","color","email","logging","random"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/labstack.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2015-03-12T22:35:57.000Z","updated_at":"2026-03-09T22:47:53.000Z","dependencies_parsed_at":"2023-12-20T14:34:28.816Z","dependency_job_id":"cad7e580-2713-4e61-ae60-b522756fa020","html_url":"https://github.com/labstack/gommon","commit_stats":{"total_commits":163,"total_committers":19,"mean_commits":8.578947368421053,"dds":"0.31288343558282206","last_synced_commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"previous_names":[],"tags_count":19,"template":false,"template_full_name":null,"purl":"pkg:github/labstack/gommon","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/labstack","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/sbom","scorecard":{"id":576542,"data":{"date":"2025-08-11","repo":{"name":"github.com/labstack/gommon","commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Code-Review","score":4,"reason":"Found 12/28 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/gommon.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/gommon.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T17:57:27.234Z","repository_id":28588610,"created_at":"2025-08-20T17:57:27.234Z","updated_at":"2025-08-20T17:57:27.234Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30902814,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-04-27T18:22:16.761Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:guix/go-github-com-labstack-gommon","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/guix/go-github-com-labstack-gommon","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/guix/go-github-com-labstack-gommon","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/guix/go-github-com-labstack-gommon/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-31T09:08:20.419Z","issues_count":19,"pull_requests_count":41,"avg_time_to_close_issue":31323419.07142857,"avg_time_to_close_pull_request":17839934.20588235,"issues_closed_count":14,"pull_requests_closed_count":34,"pull_request_authors_count":30,"issue_authors_count":19,"avg_comments_per_issue":1.736842105263158,"avg_comments_per_pull_request":2.24390243902439,"merged_pull_requests_count":24,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/issues","maintainers":[{"login":"vishr","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vishr"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-labstack-gommon/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-labstack-gommon/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-labstack-gommon/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-labstack-gommon/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-labstack-gommon/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-labstack-gommon/codemeta","maintainers":[],"registry":{"name":"guix","url":"https://guix.gnu.org","ecosystem":"guix","default":true,"packages_count":31358,"maintainers_count":0,"namespaces_count":0,"keywords_count":1627,"github":"guix-mirror","metadata":{"funded_packages_count":352},"icon_url":"https://github.com/guix-mirror.png","created_at":"2026-03-02T16:23:46.981Z","updated_at":"2026-05-07T05:00:22.550Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/guix/namespaces"}},{"id":14035177,"name":"github.com/labstack/gommon/random","ecosystem":"go","description":"","homepage":"https://github.com/labstack/gommon","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/labstack/gommon","keywords_array":[],"namespace":"github.com/labstack/gommon","versions_count":11,"first_release_published_at":"2026-03-12T20:38:39.255Z","latest_release_published_at":"2026-03-12T20:38:39.255Z","latest_release_number":"v0.4.2","last_synced_at":"2026-04-30T22:15:38.475Z","created_at":"2026-03-12T20:38:24.385Z","updated_at":"2026-04-30T22:15:38.475Z","registry_url":"https://pkg.go.dev/github.com/labstack/gommon/random","install_command":"go get github.com/labstack/gommon/random","documentation_url":"https://pkg.go.dev/github.com/labstack/gommon/random#section-documentation","metadata":{},"repo_metadata":{"id":28588610,"uuid":"32106741","full_name":"labstack/gommon","owner":"labstack","description":"Common packages for Go","archived":false,"fork":false,"pushed_at":"2023-12-20T13:02:16.000Z","size":120,"stargazers_count":579,"open_issues_count":14,"forks_count":101,"subscribers_count":19,"default_branch":"master","last_synced_at":"2026-03-24T15:23:37.173Z","etag":null,"topics":["bytes","color","email","logging","random"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/labstack.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2015-03-12T22:35:57.000Z","updated_at":"2026-03-09T22:47:53.000Z","dependencies_parsed_at":"2023-12-20T14:34:28.816Z","dependency_job_id":"cad7e580-2713-4e61-ae60-b522756fa020","html_url":"https://github.com/labstack/gommon","commit_stats":{"total_commits":163,"total_committers":19,"mean_commits":8.578947368421053,"dds":"0.31288343558282206","last_synced_commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"previous_names":[],"tags_count":19,"template":false,"template_full_name":null,"purl":"pkg:github/labstack/gommon","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/labstack","download_url":"https://codeload.github.com/labstack/gommon/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/sbom","scorecard":{"id":576542,"data":{"date":"2025-08-11","repo":{"name":"github.com/labstack/gommon","commit":"2888b9ce44ed86f3cb956f95becc724d255f0a33"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Code-Review","score":4,"reason":"Found 12/28 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/gommon.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gommon.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/gommon.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/labstack/gommon/gommon.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 19 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T17:57:27.234Z","repository_id":28588610,"created_at":"2025-08-20T17:57:27.234Z","updated_at":"2025-08-20T17:57:27.234Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":30902814,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-03-24T08:58:18.477Z","status":"ssl_error","status_checked_at":"2026-03-24T08:57:59.595Z","response_time":106,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-03-25T17:02:16.817Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.23548160009902,"dependent_packages_count":4.905882785242946,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":5.070682192670983},"purl":"pkg:golang/github.com/labstack/gommon/random","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/labstack/gommon/random","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/labstack/gommon/random","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/labstack/gommon/random/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-31T09:08:20.419Z","issues_count":19,"pull_requests_count":41,"avg_time_to_close_issue":31323419.07142857,"avg_time_to_close_pull_request":17839934.20588235,"issues_closed_count":14,"pull_requests_closed_count":34,"pull_request_authors_count":30,"issue_authors_count":19,"avg_comments_per_issue":1.736842105263158,"avg_comments_per_pull_request":2.24390243902439,"merged_pull_requests_count":24,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/issues","maintainers":[{"login":"vishr","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vishr"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon%2Frandom/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon%2Frandom/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon%2Frandom/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon%2Frandom/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon%2Frandom/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Flabstack%2Fgommon%2Frandom/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2140190,"maintainers_count":0,"namespaces_count":782439,"keywords_count":112823,"github":"golang","metadata":{"funded_packages_count":53495},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-04-19T05:14:45.920Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}}],"commits":{"id":8138,"full_name":"labstack/gommon","default_branch":"master","total_commits":164,"total_committers":19,"total_bot_commits":0,"total_bot_committers":0,"mean_commits":8.631578947368421,"dds":0.3109756097560976,"past_year_total_commits":1,"past_year_total_committers":1,"past_year_total_bot_commits":0,"past_year_total_bot_committers":0,"past_year_mean_commits":1.0,"past_year_dds":0.0,"last_synced_at":"2026-04-28T12:49:32.251Z","last_synced_commit":"2659cdaeb998f92ea22bbeb46892eb0e5d79fda3","created_at":"2023-03-07T09:47:31.365Z","updated_at":"2026-04-28T12:48:26.137Z","committers":[{"name":"Vishal Rana","email":"vr@labstack.com","login":"vishr","count":113},{"name":"Vishal Rana","email":"vishal@qwata.com","login":null,"count":19},{"name":"Alexey Palazhchenko","email":"alexey.palazhchenko@gmail.com","login":"AlekSi","count":6},{"name":"toimtoimtoim","email":"desinformatsioon@gmail.com","login":"aldas","count":6},{"name":"Evgeniy Kulikov","email":"im-kulikov","login":"im-kulikov","count":4},{"name":"Vishal Rana","email":"vishal.rana@verizon.com","login":null,"count":2},{"name":"muXxer","email":"git@muxxer.de","login":"muXxer","count":2},{"name":"Jeff Wentworth","email":"jeff@curvegrid.com","login":"shoenseiwaso","count":1},{"name":"Carlos Eduardo","email":"carlosedp@gmail.com","login":"carlosedp","count":1},{"name":"Martin Tournoij","email":"martin@arp242.net","login":"arp242","count":1},{"name":"Oleg Lobanov","email":"oleg@lobanov.me","login":"o1egl","count":1},{"name":"Syohei YOSHIDA","email":"syohex@gmail.com","login":"syohex","count":1},{"name":"Yasuhiro Matsumoto","email":"mattn.jp@gmail.com","login":"mattn","count":1},{"name":"asib","email":"jacob.d.fenton@gmail.com","login":"asib","count":1},{"name":"Yusuke Komatsu","email":"yusuke.komatsu@inte.co.jp","login":null,"count":1},{"name":"C. Brown","email":"hackdom@majoolr.io","login":null,"count":1},{"name":"Alexandre Stein","email":"astein58@gmail.com","login":null,"count":1},{"name":"ichigozero","email":"61618751+ichigozero","login":"ichigozero","count":1},{"name":"prabhah","email":"shichangguo@msn.com","login":"prabhah","count":1}],"past_year_committers":[{"name":"Vishal Rana","email":"vr@labstack.com","login":"vishr","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-05-16T00:00:17.015Z","repositories_count":6234907,"commits_count":894639211,"contributors_count":34908749,"owners_count":1153694,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"labstack/gommon","html_url":"https://github.com/labstack/gommon","last_synced_at":"2026-04-28T12:37:12.411Z","status":"active","issues_count":20,"pull_requests_count":44,"avg_time_to_close_issue":31323419.07142857,"avg_time_to_close_pull_request":20458941.888888888,"issues_closed_count":14,"pull_requests_closed_count":36,"pull_request_authors_count":32,"issue_authors_count":20,"avg_comments_per_issue":1.65,"avg_comments_per_pull_request":2.1136363636363638,"merged_pull_requests_count":25,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":1,"past_year_pull_requests_count":2,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":930.0,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":1,"past_year_pull_request_authors_count":2,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":1,"created_at":"2023-05-16T03:54:35.617Z","updated_at":"2026-04-28T12:37:12.411Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/labstack%2Fgommon/issues","issue_labels_count":{"table":{"bug":4,"enhancement":2,"invalid":1}},"pull_request_labels_count":{"table":{"enhancement":1}},"issue_author_associations_count":{"table":{"NONE":18,"MEMBER":1,"CONTRIBUTOR":1}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":25,"NONE":18,"MEMBER":1}},"issue_authors":{"table":{"suntong":1,"shoenseiwaso":1,"ferhatelmas":1,"mdouchement":1,"vishr":1,"cboitel":1,"ar-siddiqui":1,"aboukirev":1,"xponrails":1,"mwhudson":1,"ghost":1,"hansbogert":1,"sam701":1,"cristosal":1,"Mr-Dai":1,"vicanso":1,"andreGarvin":1,"jakubjakubik":1,"flytoofly":1,"Kallinteris-Andreas":1}},"pull_request_authors":{"table":{"aldas":5,"im-kulikov":4,"AlekSi":3,"servusdei2018":2,"alexandrestein":2,"ondrejbudai":2,"carlosedp":1,"diegofernandes":1,"jhlange":1,"mozey":1,"mattn":1,"o1egl":1,"usk81":1,"shoenseiwaso":1,"sanae10001":1,"mmorel-35":1,"arp242":1,"aderouineau":1,"ni3mm4nd":1,"ichigozero":1,"ChrisRx":1,"lesismal":1,"muXxer":1,"jamesgoodhouse":1,"vicanso":1,"CBDotGuru":1,"syohex":1,"hansbogert":1,"wingyplus":1,"asib":1,"prabhah":1,"vishr":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-05-16T00:00:24.458Z","repositories_count":14616067,"issues_count":34235734,"pull_requests_count":112074489,"authors_count":11264002,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{}},"past_year_pull_request_labels_count":{"table":{}},"past_year_issue_author_associations_count":{"table":{"NONE":1}},"past_year_pull_request_author_associations_count":{"table":{"MEMBER":1,"NONE":1}},"past_year_issue_authors":{"table":{"flytoofly":1}},"past_year_pull_request_authors":{"table":{"ni3mm4nd":1,"vishr":1}},"maintainers":[{"table":{"login":"vishr","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vishr"}}],"active_maintainers":[{"table":{"login":"vishr","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/vishr"}}]}},"events":{"total":{"PullRequestEvent":3,"ForkEvent":1,"WatchEvent":23,"PushEvent":3,"PullRequestReviewEvent":2},"last_year":{"PullRequestEvent":1,"ForkEvent":1,"WatchEvent":11,"PushEvent":3,"PullRequestReviewEvent":2}},"keywords":["bytes","color","email","logging","random"],"dependencies":[{"ecosystem":"go","filepath":"go.mod","sha":null,"kind":"manifest","created_at":"2022-08-07T14:00:17.399Z","updated_at":"2022-08-07T14:00:17.399Z","repository_link":"https://github.com/labstack/gommon/blob/master/go.mod","dependencies":[{"id":598509777,"package_name":"github.com/davecgh/go-spew","ecosystem":"go","requirements":"v1.1.1","direct":true,"kind":"runtime","optional":false},{"id":598509778,"package_name":"github.com/mattn/go-colorable","ecosystem":"go","requirements":"v0.1.11","direct":true,"kind":"runtime","optional":false},{"id":598509779,"package_name":"github.com/mattn/go-isatty","ecosystem":"go","requirements":"v0.0.14","direct":true,"kind":"runtime","optional":false},{"id":598509780,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.7.0","direct":true,"kind":"runtime","optional":false},{"id":598509781,"package_name":"github.com/valyala/fasttemplate","ecosystem":"go","requirements":"v1.2.1","direct":true,"kind":"runtime","optional":false},{"id":598509782,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20211103235746-7861aae1554b","direct":true,"kind":"runtime","optional":false},{"id":598509783,"package_name":"gopkg.in/yaml.v3","ecosystem":"go","requirements":"v3.0.0-20210107192922-496545a6307b","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"go","filepath":"go.sum","sha":null,"kind":"lockfile","created_at":"2022-08-07T14:00:17.449Z","updated_at":"2022-08-07T14:00:17.449Z","repository_link":"https://github.com/labstack/gommon/blob/master/go.sum","dependencies":[{"id":598509807,"package_name":"github.com/davecgh/go-spew","ecosystem":"go","requirements":"v1.1.0","direct":false,"kind":"runtime","optional":false},{"id":598509808,"package_name":"github.com/davecgh/go-spew","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":598509809,"package_name":"github.com/mattn/go-colorable","ecosystem":"go","requirements":"v0.1.11","direct":false,"kind":"runtime","optional":false},{"id":598509810,"package_name":"github.com/mattn/go-isatty","ecosystem":"go","requirements":"v0.0.14","direct":false,"kind":"runtime","optional":false},{"id":598509811,"package_name":"github.com/pmezard/go-difflib","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":598509812,"package_name":"github.com/stretchr/objx","ecosystem":"go","requirements":"v0.1.0","direct":false,"kind":"runtime","optional":false},{"id":598509813,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.7.0","direct":false,"kind":"runtime","optional":false},{"id":598509814,"package_name":"github.com/valyala/bytebufferpool","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":598509815,"package_name":"github.com/valyala/fasttemplate","ecosystem":"go","requirements":"v1.2.1","direct":false,"kind":"runtime","optional":false},{"id":598509816,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210630005230-0f9fa26af87c","direct":false,"kind":"runtime","optional":false},{"id":598509817,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210927094055-39ccf1dd6fa6","direct":false,"kind":"runtime","optional":false},{"id":598509818,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20211103235746-7861aae1554b","direct":false,"kind":"runtime","optional":false},{"id":598509819,"package_name":"gopkg.in/check.v1","ecosystem":"go","requirements":"v0.0.0-20161208181325-20d25e280405","direct":false,"kind":"runtime","optional":false},{"id":598509820,"package_name":"gopkg.in/yaml.v3","ecosystem":"go","requirements":"v3.0.0-20200313102051-9f266ea9e77c","direct":false,"kind":"runtime","optional":false},{"id":598509821,"package_name":"gopkg.in/yaml.v3","ecosystem":"go","requirements":"v3.0.0-20210107192922-496545a6307b","direct":false,"kind":"runtime","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/gommon.yml","sha":null,"kind":"manifest","created_at":"2023-12-20T14:34:28.790Z","updated_at":"2023-12-20T14:34:28.790Z","repository_link":"https://github.com/labstack/gommon/blob/master/.github/workflows/gommon.yml","dependencies":[{"id":15190270797,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false},{"id":15190270798,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false},{"id":15190270799,"package_name":"codecov/codecov-action","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]}],"score":28.53740474475029,"created_at":"2026-05-14T11:35:40.283Z","updated_at":"2026-05-17T13:30:20.159Z","avatar_url":"https://github.com/labstack.png","language":"Go","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/373028","html_url":"https://summary.ecosyste.ms/projects/373028"}