{"id":377703,"url":"https://github.com/transparency-dev/merkle","last_synced_at":"2026-09-11T22:02:41.086Z","repository":{"id":39706652,"uuid":"423523582","full_name":"transparency-dev/merkle","owner":"transparency-dev","description":null,"archived":false,"fork":false,"pushed_at":"2026-09-10T10:36:42.000Z","size":892,"stargazers_count":40,"open_issues_count":5,"forks_count":13,"subscribers_count":9,"default_branch":"main","last_synced_at":"2026-09-10T21:55:33.953Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://transparency.dev","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/transparency-dev.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2021-11-01T15:48:04.000Z","updated_at":"2026-09-10T10:36:50.000Z","dependencies_parsed_at":"2026-09-10T21:44:23.465Z","dependency_job_id":null,"html_url":"https://github.com/transparency-dev/merkle","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/transparency-dev/merkle","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/transparency-dev","download_url":"https://codeload.github.com/transparency-dev/merkle/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/sbom","scorecard":{"id":897157,"data":{"date":"2025-08-20T03:50:05Z","repo":{"name":"github.com/transparency-dev/merkle","commit":"a6c41a40408ae9718059e277485ee4239899b4d1"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":8.9,"checks":[{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:  11 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   7 out of   7 third-party GitHubAction dependencies pinned","Info:   1 out of   1 containerImage dependencies pinned","Info:   2 out of   2 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"Maintained","score":9,"reason":"11 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:31","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:32","Info: jobLevel 'contents' permission set to 'read': .github/workflows/scorecard.yml:30","Info: topLevel permissions set to 'read-all': .github/workflows/cflite_build.yml:6","Info: topLevel permissions set to 'read-all': .github/workflows/cflite_pr.yml:6","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: topLevel 'contents' permission set to 'read': .github/workflows/go_test.yml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/golangci-lint.yml:6","Info: topLevel 'contents' permission set to 'read': .github/workflows/govulncheck.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/scorecard.yml:18","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: ClusterFuzzLite integration found","Info: GoBuiltInFuzzer integration found: compact/node_fuzz_test.go:11","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:16","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:50","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:77","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:101","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:129"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"Contributors","score":6,"reason":"project has 2 contributing companies or organizations -- score normalized to 6","details":["Info: found contributions from: cockroachlabs, google"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}},{"name":"CI-Tests","score":10,"reason":"30 out of 30 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}}]},"last_synced_at":"2025-08-24T14:08:54.827Z","repository_id":39706652,"created_at":"2025-08-24T14:08:54.827Z","updated_at":"2025-08-24T14:08:54.827Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":341189360,"owners_count":37219822,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-11T02:00:05.857Z","response_time":56,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"transparency-dev","name":"transparency-dev","uuid":"92176100","kind":"organization","description":"","email":"transparency-dev@google.com","website":"https://transparency.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/92176100?v=4","repositories_count":5,"last_synced_at":"2023-03-08T22:00:25.805Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/transparency-dev","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-18T11:57:43.790Z","updated_at":"2023-03-08T22:00:25.976Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/transparency-dev","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/transparency-dev/repositories"},"packages":[{"id":13646805,"name":"golang-github-transparency-dev-merkle","ecosystem":"debian","description":null,"homepage":"https://github.com/transparency-dev/merkle","licenses":"apache-2.0","normalized_licenses":[],"repository_url":"https://github.com/transparency-dev/merkle","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T03:40:16.261Z","latest_release_published_at":"2026-02-12T03:40:16.261Z","latest_release_number":"0.0.2-2","last_synced_at":"2026-03-13T11:14:16.147Z","created_at":"2026-02-12T03:40:16.051Z","updated_at":"2026-09-04T14:20:01.094Z","registry_url":"https://tracker.debian.org/pkg/golang-github-transparency-dev-merkle","install_command":"apt-get install golang-github-transparency-dev-merkle","documentation_url":"https://packages.debian.org/trixie/golang-github-transparency-dev-merkle","metadata":{"component":"main","architecture":"all","priority":"optional","binary":"golang-github-transparency-dev-merkle-dev","standards_version":"4.6.2","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-google-go-cmp-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":39706652,"uuid":"423523582","full_name":"transparency-dev/merkle","owner":"transparency-dev","description":null,"archived":false,"fork":false,"pushed_at":"2026-09-01T08:45:30.000Z","size":890,"stargazers_count":40,"open_issues_count":5,"forks_count":13,"subscribers_count":9,"default_branch":"main","last_synced_at":"2026-09-03T18:07:39.965Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://transparency.dev","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/transparency-dev.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2021-11-01T15:48:04.000Z","updated_at":"2026-09-01T08:54:37.000Z","dependencies_parsed_at":"2026-09-03T18:05:39.604Z","dependency_job_id":"101331e1-2c7a-43ff-9973-364acfdbe016","html_url":"https://github.com/transparency-dev/merkle","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/transparency-dev/merkle","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/transparency-dev","download_url":"https://codeload.github.com/transparency-dev/merkle/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/sbom","scorecard":{"id":897157,"data":{"date":"2025-08-20T03:50:05Z","repo":{"name":"github.com/transparency-dev/merkle","commit":"a6c41a40408ae9718059e277485ee4239899b4d1"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":8.9,"checks":[{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:  11 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   7 out of   7 third-party GitHubAction dependencies pinned","Info:   1 out of   1 containerImage dependencies pinned","Info:   2 out of   2 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"Maintained","score":9,"reason":"11 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:31","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:32","Info: jobLevel 'contents' permission set to 'read': .github/workflows/scorecard.yml:30","Info: topLevel permissions set to 'read-all': .github/workflows/cflite_build.yml:6","Info: topLevel permissions set to 'read-all': .github/workflows/cflite_pr.yml:6","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: topLevel 'contents' permission set to 'read': .github/workflows/go_test.yml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/golangci-lint.yml:6","Info: topLevel 'contents' permission set to 'read': .github/workflows/govulncheck.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/scorecard.yml:18","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: ClusterFuzzLite integration found","Info: GoBuiltInFuzzer integration found: compact/node_fuzz_test.go:11","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:16","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:50","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:77","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:101","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:129"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"Contributors","score":6,"reason":"project has 2 contributing companies or organizations -- score normalized to 6","details":["Info: found contributions from: cockroachlabs, google"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}},{"name":"CI-Tests","score":10,"reason":"30 out of 30 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}}]},"last_synced_at":"2025-08-24T14:08:54.827Z","repository_id":39706652,"created_at":"2025-08-24T14:08:54.827Z","updated_at":"2025-08-24T14:08:54.827Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":37020024,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-04T02:00:06.169Z","response_time":115,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"transparency-dev","name":"transparency-dev","uuid":"92176100","kind":"organization","description":"","email":"transparency-dev@google.com","website":"https://transparency.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/92176100?v=4","repositories_count":5,"last_synced_at":"2023-03-08T22:00:25.805Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/transparency-dev","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-18T11:57:43.790Z","updated_at":"2023-03-08T22:00:25.976Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/transparency-dev","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/transparency-dev/repositories"},"tags":[{"name":"v0.0.2","sha":"036047b5d2f7faf3b1ee643d391e60fe5b1defcf","kind":"commit","published_at":"2023-05-05T09:59:12.000Z","download_url":"https://codeload.github.com/transparency-dev/merkle/tar.gz/v0.0.2","html_url":"https://github.com/transparency-dev/merkle/releases/tag/v0.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/transparency-dev/merkle@v0.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags/v0.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags/v0.0.2/manifests"},{"name":"v0.0.1","sha":"616662aaac757337c2c3713ea2e9fabad2ac50ec","kind":"commit","published_at":"2022-05-04T11:43:08.000Z","download_url":"https://codeload.github.com/transparency-dev/merkle/tar.gz/v0.0.1","html_url":"https://github.com/transparency-dev/merkle/releases/tag/v0.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/transparency-dev/merkle@v0.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags/v0.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags/v0.0.1/manifests"}]},"repo_metadata_updated_at":"2026-09-04T14:20:01.094Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/golang-github-transparency-dev-merkle?arch=source\u0026distro=debian-13\u0026repository_url=https://packages.debian.org/trixie","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/golang-github-transparency-dev-merkle","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/golang-github-transparency-dev-merkle","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/golang-github-transparency-dev-merkle/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-03T18:05:06.904Z","issues_count":7,"pull_requests_count":174,"avg_time_to_close_issue":6799170.166666667,"avg_time_to_close_pull_request":318014.2789115646,"issues_closed_count":6,"pull_requests_closed_count":147,"pull_request_authors_count":9,"issue_authors_count":6,"avg_comments_per_issue":1.0,"avg_comments_per_pull_request":0.7758620689655172,"merged_pull_requests_count":140,"bot_issues_count":1,"bot_pull_requests_count":106,"past_year_issues_count":1,"past_year_pull_requests_count":23,"past_year_avg_time_to_close_issue":5343325.0,"past_year_avg_time_to_close_pull_request":175935.14285714287,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":21,"past_year_pull_request_authors_count":3,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.8695652173913043,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":13,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/issues","maintainers":[{"login":"AlCutter","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AlCutter"}],"active_maintainers":[{"login":"AlCutter","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AlCutter"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-transparency-dev-merkle/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-transparency-dev-merkle/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-transparency-dev-merkle/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-transparency-dev-merkle/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-transparency-dev-merkle/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-transparency-dev-merkle/codemeta","maintainers":[],"registry":{"name":"debian-13","url":"https://packages.debian.org/trixie","ecosystem":"debian","default":false,"packages_count":38024,"maintainers_count":0,"namespaces_count":4,"keywords_count":1985,"github":"debian","metadata":{"codename":"trixie","funded_packages_count":1942},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:50.448Z","updated_at":"2026-09-10T05:05:23.251Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/namespaces"}},{"id":13449215,"name":"golang-github-transparency-dev-merkle","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/transparency-dev/merkle","licenses":"apache-2.0","normalized_licenses":[],"repository_url":"https://github.com/transparency-dev/merkle","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-08T16:36:34.093Z","latest_release_published_at":"2026-02-08T16:36:34.093Z","latest_release_number":"0.0.2-2","last_synced_at":"2026-03-08T16:50:05.182Z","created_at":"2026-02-08T16:36:31.724Z","updated_at":"2026-09-06T16:12:03.235Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-transparency-dev-merkle","install_command":"apt-get install golang-github-transparency-dev-merkle","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-transparency-dev-merkle-dev","standards_version":"4.6.2","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-google-go-cmp-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":39706652,"uuid":"423523582","full_name":"transparency-dev/merkle","owner":"transparency-dev","description":null,"archived":false,"fork":false,"pushed_at":"2026-09-01T08:45:30.000Z","size":890,"stargazers_count":40,"open_issues_count":5,"forks_count":13,"subscribers_count":9,"default_branch":"main","last_synced_at":"2026-09-03T18:07:39.965Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://transparency.dev","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/transparency-dev.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2021-11-01T15:48:04.000Z","updated_at":"2026-09-01T08:54:37.000Z","dependencies_parsed_at":"2026-09-03T18:05:39.604Z","dependency_job_id":"101331e1-2c7a-43ff-9973-364acfdbe016","html_url":"https://github.com/transparency-dev/merkle","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/transparency-dev/merkle","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/transparency-dev","download_url":"https://codeload.github.com/transparency-dev/merkle/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/sbom","scorecard":{"id":897157,"data":{"date":"2025-08-20T03:50:05Z","repo":{"name":"github.com/transparency-dev/merkle","commit":"a6c41a40408ae9718059e277485ee4239899b4d1"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":8.9,"checks":[{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:  11 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   7 out of   7 third-party GitHubAction dependencies pinned","Info:   1 out of   1 containerImage dependencies pinned","Info:   2 out of   2 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"Maintained","score":9,"reason":"11 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:31","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:32","Info: jobLevel 'contents' permission set to 'read': .github/workflows/scorecard.yml:30","Info: topLevel permissions set to 'read-all': .github/workflows/cflite_build.yml:6","Info: topLevel permissions set to 'read-all': .github/workflows/cflite_pr.yml:6","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: topLevel 'contents' permission set to 'read': .github/workflows/go_test.yml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/golangci-lint.yml:6","Info: topLevel 'contents' permission set to 'read': .github/workflows/govulncheck.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/scorecard.yml:18","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: ClusterFuzzLite integration found","Info: GoBuiltInFuzzer integration found: compact/node_fuzz_test.go:11","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:16","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:50","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:77","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:101","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:129"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"Contributors","score":6,"reason":"project has 2 contributing companies or organizations -- score normalized to 6","details":["Info: found contributions from: cockroachlabs, google"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}},{"name":"CI-Tests","score":10,"reason":"30 out of 30 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}}]},"last_synced_at":"2025-08-24T14:08:54.827Z","repository_id":39706652,"created_at":"2025-08-24T14:08:54.827Z","updated_at":"2025-08-24T14:08:54.827Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":336071963,"owners_count":37021112,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-04T02:00:06.169Z","response_time":115,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"transparency-dev","name":"transparency-dev","uuid":"92176100","kind":"organization","description":"","email":"transparency-dev@google.com","website":"https://transparency.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/92176100?v=4","repositories_count":5,"last_synced_at":"2023-03-08T22:00:25.805Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/transparency-dev","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-18T11:57:43.790Z","updated_at":"2023-03-08T22:00:25.976Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/transparency-dev","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/transparency-dev/repositories"},"tags":[{"name":"v0.0.2","sha":"036047b5d2f7faf3b1ee643d391e60fe5b1defcf","kind":"commit","published_at":"2023-05-05T09:59:12.000Z","download_url":"https://codeload.github.com/transparency-dev/merkle/tar.gz/v0.0.2","html_url":"https://github.com/transparency-dev/merkle/releases/tag/v0.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/transparency-dev/merkle@v0.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags/v0.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags/v0.0.2/manifests"},{"name":"v0.0.1","sha":"616662aaac757337c2c3713ea2e9fabad2ac50ec","kind":"commit","published_at":"2022-05-04T11:43:08.000Z","download_url":"https://codeload.github.com/transparency-dev/merkle/tar.gz/v0.0.1","html_url":"https://github.com/transparency-dev/merkle/releases/tag/v0.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/transparency-dev/merkle@v0.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags/v0.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags/v0.0.1/manifests"}]},"repo_metadata_updated_at":"2026-09-06T16:12:03.235Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-transparency-dev-merkle?arch=source\u0026distro=ubuntu-24.10\u0026repository_url=https://launchpad.net/ubuntu/oracular","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-transparency-dev-merkle","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-transparency-dev-merkle","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-transparency-dev-merkle/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-05T19:03:31.344Z","issues_count":7,"pull_requests_count":174,"avg_time_to_close_issue":6799170.166666667,"avg_time_to_close_pull_request":318014.2789115646,"issues_closed_count":6,"pull_requests_closed_count":147,"pull_request_authors_count":9,"issue_authors_count":6,"avg_comments_per_issue":1.0,"avg_comments_per_pull_request":0.7758620689655172,"merged_pull_requests_count":140,"bot_issues_count":1,"bot_pull_requests_count":106,"past_year_issues_count":1,"past_year_pull_requests_count":23,"past_year_avg_time_to_close_issue":5343325.0,"past_year_avg_time_to_close_pull_request":175935.14285714287,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":21,"past_year_pull_request_authors_count":3,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.8695652173913043,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":13,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/issues","maintainers":[{"login":"AlCutter","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AlCutter"}],"active_maintainers":[{"login":"AlCutter","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AlCutter"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-transparency-dev-merkle/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-transparency-dev-merkle/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-transparency-dev-merkle/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-transparency-dev-merkle/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-transparency-dev-merkle/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-transparency-dev-merkle/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.10","url":"https://launchpad.net/ubuntu/oracular","ecosystem":"ubuntu","default":false,"packages_count":38437,"maintainers_count":0,"namespaces_count":4,"keywords_count":1440,"github":"ubuntu","metadata":{"codename":"oracular","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":1557},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.028Z","updated_at":"2026-09-10T05:05:25.290Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/namespaces"}},{"id":13963629,"name":"go-github-com-transparency-dev-merkle","ecosystem":"guix","description":"Merkle trees in Golang","homepage":"https://github.com/transparency-dev/merkle","licenses":"asl2.0","normalized_licenses":["CERN-OHL-P-2.0"],"repository_url":"https://github.com/transparency-dev/merkle","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-03-02T22:55:52.065Z","latest_release_published_at":"2026-03-02T22:55:52.065Z","latest_release_number":"0.0.2","last_synced_at":"2026-04-27T18:12:33.058Z","created_at":"2026-03-02T22:55:51.890Z","updated_at":"2026-09-04T03:38:22.930Z","registry_url":"https://packages.guix.gnu.org/packages/go-github-com-transparency-dev-merkle/0.0.2/","install_command":"guix install go-github-com-transparency-dev-merkle","documentation_url":"https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/golang-xyz.scm#n26464","metadata":{"location":"gnu/packages/golang-xyz.scm:26464","variable_name":"go-github-com-transparency-dev-merkle"},"repo_metadata":{"id":39706652,"uuid":"423523582","full_name":"transparency-dev/merkle","owner":"transparency-dev","description":null,"archived":false,"fork":false,"pushed_at":"2026-09-01T08:45:30.000Z","size":890,"stargazers_count":40,"open_issues_count":5,"forks_count":13,"subscribers_count":9,"default_branch":"main","last_synced_at":"2026-09-03T18:07:39.965Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://transparency.dev","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/transparency-dev.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2021-11-01T15:48:04.000Z","updated_at":"2026-09-01T08:54:37.000Z","dependencies_parsed_at":"2026-09-03T18:05:39.604Z","dependency_job_id":"101331e1-2c7a-43ff-9973-364acfdbe016","html_url":"https://github.com/transparency-dev/merkle","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/transparency-dev/merkle","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/transparency-dev","download_url":"https://codeload.github.com/transparency-dev/merkle/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/sbom","scorecard":{"id":897157,"data":{"date":"2025-08-20T03:50:05Z","repo":{"name":"github.com/transparency-dev/merkle","commit":"a6c41a40408ae9718059e277485ee4239899b4d1"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":8.9,"checks":[{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:  11 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   7 out of   7 third-party GitHubAction dependencies pinned","Info:   1 out of   1 containerImage dependencies pinned","Info:   2 out of   2 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"Maintained","score":9,"reason":"11 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:31","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:32","Info: jobLevel 'contents' permission set to 'read': .github/workflows/scorecard.yml:30","Info: topLevel permissions set to 'read-all': .github/workflows/cflite_build.yml:6","Info: topLevel permissions set to 'read-all': .github/workflows/cflite_pr.yml:6","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: topLevel 'contents' permission set to 'read': .github/workflows/go_test.yml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/golangci-lint.yml:6","Info: topLevel 'contents' permission set to 'read': .github/workflows/govulncheck.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/scorecard.yml:18","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: ClusterFuzzLite integration found","Info: GoBuiltInFuzzer integration found: compact/node_fuzz_test.go:11","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:16","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:50","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:77","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:101","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:129"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"Contributors","score":6,"reason":"project has 2 contributing companies or organizations -- score normalized to 6","details":["Info: found contributions from: cockroachlabs, google"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}},{"name":"CI-Tests","score":10,"reason":"30 out of 30 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}}]},"last_synced_at":"2025-08-24T14:08:54.827Z","repository_id":39706652,"created_at":"2025-08-24T14:08:54.827Z","updated_at":"2025-08-24T14:08:54.827Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":37020024,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-04T02:00:06.169Z","response_time":115,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"transparency-dev","name":"transparency-dev","uuid":"92176100","kind":"organization","description":"","email":"transparency-dev@google.com","website":"https://transparency.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/92176100?v=4","repositories_count":5,"last_synced_at":"2023-03-08T22:00:25.805Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/transparency-dev","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-18T11:57:43.790Z","updated_at":"2023-03-08T22:00:25.976Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/transparency-dev","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/transparency-dev/repositories"},"tags":[{"name":"v0.0.2","sha":"036047b5d2f7faf3b1ee643d391e60fe5b1defcf","kind":"commit","published_at":"2023-05-05T09:59:12.000Z","download_url":"https://codeload.github.com/transparency-dev/merkle/tar.gz/v0.0.2","html_url":"https://github.com/transparency-dev/merkle/releases/tag/v0.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/transparency-dev/merkle@v0.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags/v0.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags/v0.0.2/manifests"},{"name":"v0.0.1","sha":"616662aaac757337c2c3713ea2e9fabad2ac50ec","kind":"commit","published_at":"2022-05-04T11:43:08.000Z","download_url":"https://codeload.github.com/transparency-dev/merkle/tar.gz/v0.0.1","html_url":"https://github.com/transparency-dev/merkle/releases/tag/v0.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/transparency-dev/merkle@v0.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags/v0.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags/v0.0.1/manifests"}]},"repo_metadata_updated_at":"2026-09-04T03:38:22.930Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:guix/go-github-com-transparency-dev-merkle","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/guix/go-github-com-transparency-dev-merkle","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/guix/go-github-com-transparency-dev-merkle","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/guix/go-github-com-transparency-dev-merkle/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-03T18:05:06.904Z","issues_count":7,"pull_requests_count":174,"avg_time_to_close_issue":6799170.166666667,"avg_time_to_close_pull_request":318014.2789115646,"issues_closed_count":6,"pull_requests_closed_count":147,"pull_request_authors_count":9,"issue_authors_count":6,"avg_comments_per_issue":1.0,"avg_comments_per_pull_request":0.7758620689655172,"merged_pull_requests_count":140,"bot_issues_count":1,"bot_pull_requests_count":106,"past_year_issues_count":1,"past_year_pull_requests_count":23,"past_year_avg_time_to_close_issue":5343325.0,"past_year_avg_time_to_close_pull_request":175935.14285714287,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":21,"past_year_pull_request_authors_count":3,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.8695652173913043,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":13,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/issues","maintainers":[{"login":"AlCutter","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AlCutter"}],"active_maintainers":[{"login":"AlCutter","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AlCutter"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-transparency-dev-merkle/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-transparency-dev-merkle/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-transparency-dev-merkle/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-transparency-dev-merkle/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-transparency-dev-merkle/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-transparency-dev-merkle/codemeta","maintainers":[],"registry":{"name":"guix","url":"https://guix.gnu.org","ecosystem":"guix","default":true,"packages_count":32496,"maintainers_count":0,"namespaces_count":0,"keywords_count":1654,"github":"guix-mirror","metadata":{"funded_packages_count":1422},"icon_url":"https://github.com/guix-mirror.png","created_at":"2026-03-02T16:23:46.981Z","updated_at":"2026-09-10T05:05:29.870Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/guix/namespaces"}},{"id":4166006,"name":"github.com/transparency-dev/merkle","ecosystem":"go","description":"Package merkle provides Merkle tree interfaces and implementation.","homepage":"https://github.com/transparency-dev/merkle","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/transparency-dev/merkle","keywords_array":[],"namespace":"github.com/transparency-dev","versions_count":2,"first_release_published_at":"2022-05-04T11:43:08.000Z","latest_release_published_at":"2023-05-05T09:59:12.000Z","latest_release_number":"v0.0.2","last_synced_at":"2026-09-10T21:41:03.252Z","created_at":"2022-04-12T18:08:09.995Z","updated_at":"2026-09-10T21:41:03.253Z","registry_url":"https://pkg.go.dev/github.com/transparency-dev/merkle","install_command":"go get github.com/transparency-dev/merkle","documentation_url":"https://pkg.go.dev/github.com/transparency-dev/merkle#section-documentation","metadata":{},"repo_metadata":{"id":39706652,"uuid":"423523582","full_name":"transparency-dev/merkle","owner":"transparency-dev","description":null,"archived":false,"fork":false,"pushed_at":"2026-08-10T12:49:18.000Z","size":875,"stargazers_count":39,"open_issues_count":5,"forks_count":13,"subscribers_count":9,"default_branch":"main","last_synced_at":"2026-08-12T23:39:42.301Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://transparency.dev","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/transparency-dev.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2021-11-01T15:48:04.000Z","updated_at":"2026-08-10T12:52:13.000Z","dependencies_parsed_at":"2026-08-05T19:42:28.958Z","dependency_job_id":null,"html_url":"https://github.com/transparency-dev/merkle","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/transparency-dev/merkle","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/transparency-dev","download_url":"https://codeload.github.com/transparency-dev/merkle/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/sbom","scorecard":{"id":897157,"data":{"date":"2025-08-20T03:50:05Z","repo":{"name":"github.com/transparency-dev/merkle","commit":"a6c41a40408ae9718059e277485ee4239899b4d1"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":8.9,"checks":[{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:  11 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   7 out of   7 third-party GitHubAction dependencies pinned","Info:   1 out of   1 containerImage dependencies pinned","Info:   2 out of   2 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"Maintained","score":9,"reason":"11 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:31","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:32","Info: jobLevel 'contents' permission set to 'read': .github/workflows/scorecard.yml:30","Info: topLevel permissions set to 'read-all': .github/workflows/cflite_build.yml:6","Info: topLevel permissions set to 'read-all': .github/workflows/cflite_pr.yml:6","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: topLevel 'contents' permission set to 'read': .github/workflows/go_test.yml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/golangci-lint.yml:6","Info: topLevel 'contents' permission set to 'read': .github/workflows/govulncheck.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/scorecard.yml:18","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: ClusterFuzzLite integration found","Info: GoBuiltInFuzzer integration found: compact/node_fuzz_test.go:11","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:16","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:50","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:77","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:101","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:129"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"Contributors","score":6,"reason":"project has 2 contributing companies or organizations -- score normalized to 6","details":["Info: found contributions from: cockroachlabs, google"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}},{"name":"CI-Tests","score":10,"reason":"30 out of 30 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}}]},"last_synced_at":"2025-08-24T14:08:54.827Z","repository_id":39706652,"created_at":"2025-08-24T14:08:54.827Z","updated_at":"2025-08-24T14:08:54.827Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36625314,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-13T02:00:06.325Z","response_time":111,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"transparency-dev","name":"transparency-dev","uuid":"92176100","kind":"organization","description":"","email":"transparency-dev@google.com","website":"https://transparency.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/92176100?v=4","repositories_count":5,"last_synced_at":"2023-03-08T22:00:25.805Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/transparency-dev","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-18T11:57:43.790Z","updated_at":"2023-03-08T22:00:25.976Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/transparency-dev","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/transparency-dev/repositories"},"tags":[{"name":"v0.0.2","sha":"036047b5d2f7faf3b1ee643d391e60fe5b1defcf","kind":"commit","published_at":"2023-05-05T09:59:12.000Z","download_url":"https://codeload.github.com/transparency-dev/merkle/tar.gz/v0.0.2","html_url":"https://github.com/transparency-dev/merkle/releases/tag/v0.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/transparency-dev/merkle@v0.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags/v0.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags/v0.0.2/manifests"},{"name":"v0.0.1","sha":"616662aaac757337c2c3713ea2e9fabad2ac50ec","kind":"commit","published_at":"2022-05-04T11:43:08.000Z","download_url":"https://codeload.github.com/transparency-dev/merkle/tar.gz/v0.0.1","html_url":"https://github.com/transparency-dev/merkle/releases/tag/v0.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/transparency-dev/merkle@v0.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags/v0.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags/v0.0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-20T03:22:07.738Z","dependent_packages_count":304,"downloads":null,"downloads_period":null,"dependent_repos_count":592,"rankings":{"downloads":null,"dependent_repos_count":0.29448233106013644,"dependent_packages_count":0.2471851688898666,"stargazers_count":8.835369877807333,"forks_count":7.8373497290996506,"docker_downloads_count":0.5433673979561227,"average":3.5515509009626216},"purl":"pkg:golang/github.com/transparency-dev/merkle","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/transparency-dev/merkle","docker_dependents_count":162,"docker_downloads_count":10533677,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/transparency-dev/merkle","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/transparency-dev/merkle/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T02:30:43.483Z","issues_count":7,"pull_requests_count":172,"avg_time_to_close_issue":6799170.166666667,"avg_time_to_close_pull_request":319396.0342465753,"issues_closed_count":6,"pull_requests_closed_count":146,"pull_request_authors_count":9,"issue_authors_count":6,"avg_comments_per_issue":1.0,"avg_comments_per_pull_request":0.7732558139534884,"merged_pull_requests_count":139,"bot_issues_count":1,"bot_pull_requests_count":104,"past_year_issues_count":1,"past_year_pull_requests_count":22,"past_year_avg_time_to_close_issue":5343325.0,"past_year_avg_time_to_close_pull_request":171902.85714285713,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":21,"past_year_pull_request_authors_count":3,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.8181818181818182,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/issues","maintainers":[{"login":"AlCutter","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AlCutter"}],"active_maintainers":[{"login":"AlCutter","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AlCutter"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Ftransparency-dev%2Fmerkle/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Ftransparency-dev%2Fmerkle/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Ftransparency-dev%2Fmerkle/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Ftransparency-dev%2Fmerkle/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Ftransparency-dev%2Fmerkle/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Ftransparency-dev%2Fmerkle/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2313267,"maintainers_count":0,"namespaces_count":840996,"keywords_count":127476,"github":"golang","metadata":{"funded_packages_count":80046,"sync_missing_packages_cursor":{"timestamp":"2026-09-10T00:02:38.001811Z","path":"github.com/tm-acode/dependabot_core","version":"v0.27.11"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-11T05:01:08.531Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":13716888,"name":"golang-github-transparency-dev-merkle","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/transparency-dev/merkle","licenses":"apache-2.0","normalized_licenses":[],"repository_url":"https://github.com/transparency-dev/merkle","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-13T00:20:02.913Z","latest_release_published_at":"2026-02-13T00:20:02.913Z","latest_release_number":"0.0.2-2","last_synced_at":"2026-03-13T01:06:42.997Z","created_at":"2026-02-13T00:20:02.624Z","updated_at":"2026-09-08T16:53:10.271Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-transparency-dev-merkle","install_command":"apt-get install golang-github-transparency-dev-merkle","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-transparency-dev-merkle-dev","standards_version":"4.6.2","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-google-go-cmp-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":39706652,"uuid":"423523582","full_name":"transparency-dev/merkle","owner":"transparency-dev","description":null,"archived":false,"fork":false,"pushed_at":"2026-09-01T08:45:30.000Z","size":890,"stargazers_count":40,"open_issues_count":5,"forks_count":13,"subscribers_count":9,"default_branch":"main","last_synced_at":"2026-09-03T18:07:39.965Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://transparency.dev","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/transparency-dev.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2021-11-01T15:48:04.000Z","updated_at":"2026-09-01T08:54:37.000Z","dependencies_parsed_at":"2026-09-03T18:05:39.604Z","dependency_job_id":"101331e1-2c7a-43ff-9973-364acfdbe016","html_url":"https://github.com/transparency-dev/merkle","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/transparency-dev/merkle","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/transparency-dev","download_url":"https://codeload.github.com/transparency-dev/merkle/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/sbom","scorecard":{"id":897157,"data":{"date":"2025-08-20T03:50:05Z","repo":{"name":"github.com/transparency-dev/merkle","commit":"a6c41a40408ae9718059e277485ee4239899b4d1"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":8.9,"checks":[{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:  11 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   7 out of   7 third-party GitHubAction dependencies pinned","Info:   1 out of   1 containerImage dependencies pinned","Info:   2 out of   2 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"Maintained","score":9,"reason":"11 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:31","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:32","Info: jobLevel 'contents' permission set to 'read': .github/workflows/scorecard.yml:30","Info: topLevel permissions set to 'read-all': .github/workflows/cflite_build.yml:6","Info: topLevel permissions set to 'read-all': .github/workflows/cflite_pr.yml:6","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: topLevel 'contents' permission set to 'read': .github/workflows/go_test.yml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/golangci-lint.yml:6","Info: topLevel 'contents' permission set to 'read': .github/workflows/govulncheck.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/scorecard.yml:18","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: ClusterFuzzLite integration found","Info: GoBuiltInFuzzer integration found: compact/node_fuzz_test.go:11","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:16","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:50","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:77","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:101","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:129"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"Contributors","score":6,"reason":"project has 2 contributing companies or organizations -- score normalized to 6","details":["Info: found contributions from: cockroachlabs, google"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}},{"name":"CI-Tests","score":10,"reason":"30 out of 30 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}}]},"last_synced_at":"2025-08-24T14:08:54.827Z","repository_id":39706652,"created_at":"2025-08-24T14:08:54.827Z","updated_at":"2025-08-24T14:08:54.827Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":336071963,"owners_count":37021112,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-04T02:00:06.169Z","response_time":115,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"transparency-dev","name":"transparency-dev","uuid":"92176100","kind":"organization","description":"","email":"transparency-dev@google.com","website":"https://transparency.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/92176100?v=4","repositories_count":5,"last_synced_at":"2023-03-08T22:00:25.805Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/transparency-dev","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-18T11:57:43.790Z","updated_at":"2023-03-08T22:00:25.976Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/transparency-dev","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/transparency-dev/repositories"},"tags":[{"name":"v0.0.2","sha":"036047b5d2f7faf3b1ee643d391e60fe5b1defcf","kind":"commit","published_at":"2023-05-05T09:59:12.000Z","download_url":"https://codeload.github.com/transparency-dev/merkle/tar.gz/v0.0.2","html_url":"https://github.com/transparency-dev/merkle/releases/tag/v0.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/transparency-dev/merkle@v0.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags/v0.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags/v0.0.2/manifests"},{"name":"v0.0.1","sha":"616662aaac757337c2c3713ea2e9fabad2ac50ec","kind":"commit","published_at":"2022-05-04T11:43:08.000Z","download_url":"https://codeload.github.com/transparency-dev/merkle/tar.gz/v0.0.1","html_url":"https://github.com/transparency-dev/merkle/releases/tag/v0.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/transparency-dev/merkle@v0.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags/v0.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags/v0.0.1/manifests"}]},"repo_metadata_updated_at":"2026-09-08T16:53:10.271Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-transparency-dev-merkle?arch=source\u0026distro=ubuntu-24.04","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-transparency-dev-merkle","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-transparency-dev-merkle","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-transparency-dev-merkle/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-07T20:03:23.664Z","issues_count":7,"pull_requests_count":174,"avg_time_to_close_issue":6799170.166666667,"avg_time_to_close_pull_request":318014.2789115646,"issues_closed_count":6,"pull_requests_closed_count":147,"pull_request_authors_count":9,"issue_authors_count":6,"avg_comments_per_issue":1.0,"avg_comments_per_pull_request":0.7758620689655172,"merged_pull_requests_count":140,"bot_issues_count":1,"bot_pull_requests_count":106,"past_year_issues_count":1,"past_year_pull_requests_count":23,"past_year_avg_time_to_close_issue":5343325.0,"past_year_avg_time_to_close_pull_request":175935.14285714287,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":21,"past_year_pull_request_authors_count":3,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.8695652173913043,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":13,"past_year_merged_pull_requests_count":19,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/issues","maintainers":[{"login":"AlCutter","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AlCutter"}],"active_maintainers":[{"login":"AlCutter","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AlCutter"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-transparency-dev-merkle/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-transparency-dev-merkle/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-transparency-dev-merkle/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-transparency-dev-merkle/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-transparency-dev-merkle/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-transparency-dev-merkle/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.04","url":"https://launchpad.net/ubuntu/noble","ecosystem":"ubuntu","default":true,"packages_count":37306,"maintainers_count":0,"namespaces_count":4,"keywords_count":1697,"github":"ubuntu","metadata":{"codename":"noble","funded_packages_count":1479},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:45.928Z","updated_at":"2026-09-10T05:05:53.832Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/namespaces"}}],"commits":{"id":11059683,"full_name":"transparency-dev/merkle","default_branch":"main","total_commits":279,"total_committers":9,"total_bot_commits":160,"total_bot_committers":1,"mean_commits":31.0,"dds":0.42652329749103945,"past_year_total_commits":71,"past_year_total_committers":4,"past_year_total_bot_commits":43,"past_year_total_bot_committers":1,"past_year_mean_commits":17.75,"past_year_dds":0.3943661971830986,"last_synced_at":"2026-09-10T21:33:58.047Z","last_synced_commit":"a09734cdbeb471b1dac7760f893665483661320b","created_at":"2025-09-09T13:09:23.355Z","updated_at":"2026-09-10T21:33:57.916Z","committers":[{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":160},{"name":"Pavel Kalinnikov","email":"pkalinnikov@google.com","login":"pav-kv","count":35},{"name":"Philippe Boneff","email":"phb@google.com","login":"phbnf","count":28},{"name":"Al Cutter","email":"al@google.com","login":"AlCutter","count":24},{"name":"Martin Hutchinson","email":"mhutchinson@gmail.com","login":"mhutchinson","count":21},{"name":"M Hickford","email":"hickford@google.com","login":"hickford","count":5},{"name":"Roger Ng","email":"roger2hk@gmail.com","login":"roger2hk","count":4},{"name":"Tanner Gill","email":"contacttannergill@gmail.com","login":"tannaurus","count":1},{"name":"Kat Joyce","email":"kat@taknira.com","login":"taknira","count":1}],"past_year_committers":[{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":43},{"name":"Philippe Boneff","email":"phb@google.com","login":"phbnf","count":26},{"name":"Martin Hutchinson","email":"mhutchinson@gmail.com","login":"mhutchinson","count":1},{"name":"Al Cutter","email":"al@google.com","login":"AlCutter","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-09-11T00:00:07.522Z","repositories_count":7241071,"commits_count":1085039249,"contributors_count":47918144,"owners_count":1448384,"committers_count":3498221,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"transparency-dev/merkle","html_url":"https://github.com/transparency-dev/merkle","last_synced_at":"2026-09-10T21:34:04.164Z","status":null,"issues_count":7,"pull_requests_count":175,"avg_time_to_close_issue":6799170.166666667,"avg_time_to_close_pull_request":316423.25675675675,"issues_closed_count":6,"pull_requests_closed_count":148,"pull_request_authors_count":9,"issue_authors_count":6,"avg_comments_per_issue":1.0,"avg_comments_per_pull_request":0.7828571428571428,"merged_pull_requests_count":141,"bot_issues_count":1,"bot_pull_requests_count":106,"past_year_issues_count":1,"past_year_pull_requests_count":23,"past_year_avg_time_to_close_issue":5343325.0,"past_year_avg_time_to_close_pull_request":171690.04545454544,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":22,"past_year_pull_request_authors_count":4,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.9565217391304348,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":12,"past_year_merged_pull_requests_count":20,"created_at":"2023-05-19T00:05:30.982Z","updated_at":"2026-09-10T21:34:04.164Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/issues","issue_labels_count":{"table":{"enhancement":2,"github_actions":1,"documentation":1,"bug":1,"dependencies":1}},"pull_request_labels_count":{"table":{"dependencies":107,"github_actions":104,"documentation":2,"go":1}},"issue_author_associations_count":{"table":{"CONTRIBUTOR":5,"NONE":2}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":163,"COLLABORATOR":11,"NONE":1}},"issue_authors":{"table":{"pavelkalinnikov":2,"phbnf":1,"mhutchinson":1,"dependabot[bot]":1,"Barre":1,"rozbb":1}},"pull_request_authors":{"table":{"dependabot[bot]":106,"pavelkalinnikov":21,"mhutchinson":17,"AlCutter":11,"phbnf":11,"hickford":5,"pav-kv":2,"roger2hk":1,"tannaurus":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-09-11T00:00:06.637Z","repositories_count":17119468,"issues_count":45292275,"pull_requests_count":142535392,"authors_count":11706834,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{"enhancement":1}},"past_year_pull_request_labels_count":{"table":{"dependencies":12,"github_actions":12}},"past_year_issue_author_associations_count":{"table":{"CONTRIBUTOR":1}},"past_year_pull_request_author_associations_count":{"table":{"CONTRIBUTOR":22,"COLLABORATOR":1}},"past_year_issue_authors":{"table":{"phbnf":1}},"past_year_pull_request_authors":{"table":{"dependabot[bot]":12,"phbnf":9,"AlCutter":1,"mhutchinson":1}},"maintainers":[{"table":{"login":"AlCutter","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AlCutter"}}],"active_maintainers":[{"table":{"login":"AlCutter","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AlCutter"}}]}},"events":{"total":{"CreateEvent":48,"DeleteEvent":52,"ForkEvent":6,"IssueCommentEvent":21,"IssuesEvent":3,"PullRequestEvent":123,"PullRequestReviewCommentEvent":14,"PullRequestReviewEvent":58,"PushEvent":65,"WatchEvent":4},"last_year":{"CreateEvent":14,"DeleteEvent":19,"ForkEvent":3,"IssueCommentEvent":4,"PullRequestEvent":50,"PullRequestReviewEvent":7,"PushEvent":28}},"keywords":[],"dependencies":[{"ecosystem":"go","filepath":"go.mod","sha":null,"kind":"manifest","created_at":"2022-08-09T15:24:48.832Z","updated_at":"2022-08-09T15:24:48.832Z","repository_link":"https://github.com/transparency-dev/merkle/blob/main/go.mod","dependencies":[{"id":918269329,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.6","direct":true,"kind":"runtime","optional":false},{"id":918269330,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20191204190536-9bdfabe68543","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"go","filepath":"go.sum","sha":null,"kind":"lockfile","created_at":"2022-08-09T15:24:48.949Z","updated_at":"2022-08-09T15:24:48.949Z","repository_link":"https://github.com/transparency-dev/merkle/blob/main/go.sum","dependencies":[{"id":918269707,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.6","direct":false,"kind":"runtime","optional":false},{"id":918269708,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20191204190536-9bdfabe68543","direct":false,"kind":"runtime","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/cflite_build.yml","sha":null,"kind":"manifest","created_at":"2023-02-08T12:01:07.759Z","updated_at":"2023-02-08T12:01:07.759Z","repository_link":"https://github.com/transparency-dev/merkle/blob/main/.github/workflows/cflite_build.yml","dependencies":[{"id":7450770823,"package_name":"google/clusterfuzzlite/actions/build_fuzzers","ecosystem":"actions","requirements":"1e163f06cba7820da5154ac9fe1a32d7fe6f73a3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/cflite_pr.yml","sha":null,"kind":"manifest","created_at":"2023-02-08T12:01:07.846Z","updated_at":"2023-02-08T12:01:07.846Z","repository_link":"https://github.com/transparency-dev/merkle/blob/main/.github/workflows/cflite_pr.yml","dependencies":[{"id":7450771984,"package_name":"google/clusterfuzzlite/actions/build_fuzzers","ecosystem":"actions","requirements":"1e163f06cba7820da5154ac9fe1a32d7fe6f73a3","direct":true,"kind":"composite","optional":false},{"id":7450771985,"package_name":"google/clusterfuzzlite/actions/run_fuzzers","ecosystem":"actions","requirements":"1e163f06cba7820da5154ac9fe1a32d7fe6f73a3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/codeql-analysis.yml","sha":null,"kind":"manifest","created_at":"2023-02-08T12:01:08.155Z","updated_at":"2023-02-08T12:01:08.155Z","repository_link":"https://github.com/transparency-dev/merkle/blob/main/.github/workflows/codeql-analysis.yml","dependencies":[{"id":7450772189,"package_name":"actions/checkout","ecosystem":"actions","requirements":"e2f20e631ae6d7dd3b768f56a5d2af784dd54791","direct":true,"kind":"composite","optional":false},{"id":7450772190,"package_name":"github/codeql-action/init","ecosystem":"actions","requirements":"ea25ff07d1d19b19a3bb9fc8a1392902a203f988","direct":true,"kind":"composite","optional":false},{"id":7450772191,"package_name":"github/codeql-action/autobuild","ecosystem":"actions","requirements":"ea25ff07d1d19b19a3bb9fc8a1392902a203f988","direct":true,"kind":"composite","optional":false},{"id":7450772192,"package_name":"github/codeql-action/analyze","ecosystem":"actions","requirements":"ea25ff07d1d19b19a3bb9fc8a1392902a203f988","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/go_test.yml","sha":null,"kind":"manifest","created_at":"2023-02-08T12:01:08.252Z","updated_at":"2023-02-08T12:01:08.252Z","repository_link":"https://github.com/transparency-dev/merkle/blob/main/.github/workflows/go_test.yml","dependencies":[{"id":7450772219,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"c4a742cab115ed795e34d4513e2cf7d472deb55f","direct":true,"kind":"composite","optional":false},{"id":7450772220,"package_name":"actions/checkout","ecosystem":"actions","requirements":"93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8","direct":true,"kind":"composite","optional":false},{"id":7450772221,"package_name":"codecov/codecov-action","ecosystem":"actions","requirements":"f32b3a3741e1053eb607407145bc9619351dc93b","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/golangci-lint.yml","sha":null,"kind":"manifest","created_at":"2023-02-08T12:01:08.316Z","updated_at":"2023-02-08T12:01:08.316Z","repository_link":"https://github.com/transparency-dev/merkle/blob/main/.github/workflows/golangci-lint.yml","dependencies":[{"id":7450773420,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"c4a742cab115ed795e34d4513e2cf7d472deb55f","direct":true,"kind":"composite","optional":false},{"id":7450773421,"package_name":"actions/checkout","ecosystem":"actions","requirements":"93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8","direct":true,"kind":"composite","optional":false},{"id":7450773422,"package_name":"golangci/golangci-lint-action","ecosystem":"actions","requirements":"07db5389c99593f11ad7b44463c2d4233066a9b1","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"docker","filepath":".clusterfuzzlite/Dockerfile","sha":null,"kind":"manifest","created_at":"2023-02-08T12:01:08.813Z","updated_at":"2023-02-08T12:01:08.813Z","repository_link":"https://github.com/transparency-dev/merkle/blob/main/.clusterfuzzlite/Dockerfile","dependencies":[{"id":7450775995,"package_name":"gcr.io/oss-fuzz-base/base-builder-go@sha256","ecosystem":"docker","requirements":"c7f01a616db0fc554d98edbd7d49a7177197f77fd4e1371bcb7774d7eac8216d","direct":true,"kind":"build","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/govulncheck.yml","sha":null,"kind":"manifest","created_at":"2026-08-05T19:42:26.810Z","updated_at":"2026-08-05T19:42:26.810Z","repository_link":"https://github.com/transparency-dev/merkle/blob/main/.github/workflows/govulncheck.yml","dependencies":[{"id":25892733720,"package_name":"golang/govulncheck-action","ecosystem":"actions","requirements":"032d45514ae346b1db93c04b0c90b841c370344f","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/scorecard.yml","sha":null,"kind":"manifest","created_at":"2026-08-05T19:42:28.348Z","updated_at":"2026-08-05T19:42:28.348Z","repository_link":"https://github.com/transparency-dev/merkle/blob/main/.github/workflows/scorecard.yml","dependencies":[{"id":25892733788,"package_name":"actions/checkout","ecosystem":"actions","requirements":"3d3c42e5aac5ba805825da76410c181273ba90b1","direct":true,"kind":"composite","optional":false},{"id":25892733789,"package_name":"ossf/scorecard-action","ecosystem":"actions","requirements":"2d1146689b8cda280b9bc96326124645441f03bc","direct":true,"kind":"composite","optional":false},{"id":25892733790,"package_name":"actions/upload-artifact","ecosystem":"actions","requirements":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a","direct":true,"kind":"composite","optional":false},{"id":25892733791,"package_name":"github/codeql-action/upload-sarif","ecosystem":"actions","requirements":"f205ea1c3313d32999d8d6a48b4f6530d4437b38","direct":true,"kind":"composite","optional":false}]}],"score":22.174075517762848,"created_at":"2026-07-08T05:16:37.801Z","updated_at":"2026-09-11T22:02:41.086Z","avatar_url":"https://github.com/transparency-dev.png","language":"Go","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/377703","html_url":"https://summary.ecosyste.ms/projects/377703"}