{"id":377703,"url":"https://github.com/transparency-dev/merkle","last_synced_at":"2026-07-22T12:30:32.643Z","repository":{"id":39706652,"uuid":"423523582","full_name":"transparency-dev/merkle","owner":"transparency-dev","description":null,"archived":false,"fork":false,"pushed_at":"2026-07-07T14:02:19.000Z","size":822,"stargazers_count":39,"open_issues_count":8,"forks_count":13,"subscribers_count":9,"default_branch":"main","last_synced_at":"2026-07-09T06:02:19.563Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://transparency.dev","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/transparency-dev.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2021-11-01T15:48:04.000Z","updated_at":"2026-07-07T14:05:19.000Z","dependencies_parsed_at":"2023-02-08T12:01:08.920Z","dependency_job_id":"5779732b-d15a-40ab-97e7-946ac92df29e","html_url":"https://github.com/transparency-dev/merkle","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/transparency-dev/merkle","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/transparency-dev","download_url":"https://codeload.github.com/transparency-dev/merkle/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/sbom","scorecard":{"id":897157,"data":{"date":"2025-08-20T03:50:05Z","repo":{"name":"github.com/transparency-dev/merkle","commit":"a6c41a40408ae9718059e277485ee4239899b4d1"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":8.9,"checks":[{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:  11 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   7 out of   7 third-party GitHubAction dependencies pinned","Info:   1 out of   1 containerImage dependencies pinned","Info:   2 out of   2 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"Maintained","score":9,"reason":"11 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:31","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:32","Info: jobLevel 'contents' permission set to 'read': .github/workflows/scorecard.yml:30","Info: topLevel permissions set to 'read-all': .github/workflows/cflite_build.yml:6","Info: topLevel permissions set to 'read-all': .github/workflows/cflite_pr.yml:6","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: topLevel 'contents' permission set to 'read': .github/workflows/go_test.yml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/golangci-lint.yml:6","Info: topLevel 'contents' permission set to 'read': .github/workflows/govulncheck.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/scorecard.yml:18","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: ClusterFuzzLite integration found","Info: GoBuiltInFuzzer integration found: compact/node_fuzz_test.go:11","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:16","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:50","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:77","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:101","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:129"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"Contributors","score":6,"reason":"project has 2 contributing companies or organizations -- score normalized to 6","details":["Info: found contributions from: cockroachlabs, google"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}},{"name":"CI-Tests","score":10,"reason":"30 out of 30 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}}]},"last_synced_at":"2025-08-24T14:08:54.827Z","repository_id":39706652,"created_at":"2025-08-24T14:08:54.827Z","updated_at":"2025-08-24T14:08:54.827Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":35315784,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-07-09T02:00:07.329Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"transparency-dev","name":"transparency-dev","uuid":"92176100","kind":"organization","description":"","email":"transparency-dev@google.com","website":"https://transparency.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/92176100?v=4","repositories_count":5,"last_synced_at":"2023-03-08T22:00:25.805Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/transparency-dev","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-18T11:57:43.790Z","updated_at":"2023-03-08T22:00:25.976Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/transparency-dev","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/transparency-dev/repositories"},"packages":[{"id":13646805,"name":"golang-github-transparency-dev-merkle","ecosystem":"debian","description":null,"homepage":"https://github.com/transparency-dev/merkle","licenses":null,"normalized_licenses":[],"repository_url":"https://github.com/transparency-dev/merkle","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T03:40:16.261Z","latest_release_published_at":"2026-02-12T03:40:16.261Z","latest_release_number":"0.0.2-2","last_synced_at":"2026-03-13T11:14:16.147Z","created_at":"2026-02-12T03:40:16.051Z","updated_at":"2026-03-13T11:14:16.148Z","registry_url":"https://tracker.debian.org/pkg/golang-github-transparency-dev-merkle","install_command":"apt-get install golang-github-transparency-dev-merkle","documentation_url":"https://packages.debian.org/trixie/golang-github-transparency-dev-merkle","metadata":{"component":"main","architecture":"all","priority":"optional","binary":"golang-github-transparency-dev-merkle-dev","standards_version":"4.6.2","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-google-go-cmp-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{},"repo_metadata_updated_at":"2026-02-12T03:40:17.045Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/golang-github-transparency-dev-merkle?arch=source\u0026distro=debian-13\u0026repository_url=https://packages.debian.org/trixie","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/golang-github-transparency-dev-merkle","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/golang-github-transparency-dev-merkle","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/golang-github-transparency-dev-merkle/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-transparency-dev-merkle/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-transparency-dev-merkle/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-transparency-dev-merkle/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-transparency-dev-merkle/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-transparency-dev-merkle/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/golang-github-transparency-dev-merkle/codemeta","maintainers":[],"registry":{"name":"debian-13","url":"https://packages.debian.org/trixie","ecosystem":"debian","default":false,"packages_count":38024,"maintainers_count":0,"namespaces_count":4,"keywords_count":1987,"github":"debian","metadata":{"codename":"trixie","funded_packages_count":316},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:50.448Z","updated_at":"2026-06-10T05:17:04.542Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/namespaces"}},{"id":4166006,"name":"github.com/transparency-dev/merkle","ecosystem":"go","description":"Package merkle provides Merkle tree interfaces and implementation.","homepage":"https://github.com/transparency-dev/merkle","licenses":"Apache-2.0","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/transparency-dev/merkle","keywords_array":[],"namespace":"github.com/transparency-dev","versions_count":2,"first_release_published_at":"2022-05-04T11:43:08.000Z","latest_release_published_at":"2023-05-05T09:59:12.000Z","latest_release_number":"v0.0.2","last_synced_at":"2026-07-09T06:02:25.296Z","created_at":"2022-04-12T18:08:09.995Z","updated_at":"2026-07-09T06:02:25.296Z","registry_url":"https://pkg.go.dev/github.com/transparency-dev/merkle","install_command":"go get github.com/transparency-dev/merkle","documentation_url":"https://pkg.go.dev/github.com/transparency-dev/merkle#section-documentation","metadata":{},"repo_metadata":{"id":39706652,"uuid":"423523582","full_name":"transparency-dev/merkle","owner":"transparency-dev","description":null,"archived":false,"fork":false,"pushed_at":"2025-09-15T09:05:15.000Z","size":728,"stargazers_count":35,"open_issues_count":4,"forks_count":11,"subscribers_count":10,"default_branch":"main","last_synced_at":"2025-09-15T11:18:22.764Z","etag":null,"topics":["compact-range","discoverability","merkle","merkle-tree","transparency"],"latest_commit_sha":null,"homepage":"https://transparency.dev","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/transparency-dev.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2021-11-01T15:48:04.000Z","updated_at":"2025-09-15T09:05:18.000Z","dependencies_parsed_at":"2023-02-08T12:01:08.920Z","dependency_job_id":"5779732b-d15a-40ab-97e7-946ac92df29e","html_url":"https://github.com/transparency-dev/merkle","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"purl":"pkg:github/transparency-dev/merkle","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/transparency-dev","download_url":"https://codeload.github.com/transparency-dev/merkle/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/sbom","scorecard":{"id":897157,"data":{"date":"2025-08-20T03:50:05Z","repo":{"name":"github.com/transparency-dev/merkle","commit":"a6c41a40408ae9718059e277485ee4239899b4d1"},"scorecard":{"version":"v5.2.1","commit":"ab2f6e92482462fe66246d9e32f642855a691dc1"},"score":8.9,"checks":[{"name":"Dependency-Update-Tool","score":10,"reason":"update tool detected","details":["Info: detected update tool: Dependabot: .github/dependabot.yml:1"],"documentation":{"short":"Determines if the project uses a dependency update tool.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dependency-update-tool"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#packaging"}},{"name":"Pinned-Dependencies","score":10,"reason":"all dependencies are pinned","details":["Info:  11 out of  11 GitHub-owned GitHubAction dependencies pinned","Info:   7 out of   7 third-party GitHubAction dependencies pinned","Info:   1 out of   1 containerImage dependencies pinned","Info:   2 out of   2 goCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#pinned-dependencies"}},{"name":"Maintained","score":9,"reason":"11 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 9","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":10,"reason":"GitHub workflow tokens follow principle of least privilege","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:31","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:32","Info: jobLevel 'contents' permission set to 'read': .github/workflows/scorecard.yml:30","Info: topLevel permissions set to 'read-all': .github/workflows/cflite_build.yml:6","Info: topLevel permissions set to 'read-all': .github/workflows/cflite_pr.yml:6","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: topLevel 'contents' permission set to 'read': .github/workflows/go_test.yml:4","Info: topLevel 'contents' permission set to 'read': .github/workflows/golangci-lint.yml:6","Info: topLevel 'contents' permission set to 'read': .github/workflows/govulncheck.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/scorecard.yml:18","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#cii-best-practices"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#signed-releases"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#vulnerabilities"}},{"name":"SAST","score":10,"reason":"SAST tool is run on all commits","details":["Info: SAST configuration detected: CodeQL","Info: all commits (30) are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#sast"}},{"name":"Fuzzing","score":10,"reason":"project is fuzzed","details":["Info: ClusterFuzzLite integration found","Info: GoBuiltInFuzzer integration found: compact/node_fuzz_test.go:11","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:16","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:50","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:77","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:101","Info: GoBuiltInFuzzer integration found: testonly/tree_fuzz_test.go:129"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#license"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#security-policy"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#branch-protection"}},{"name":"Contributors","score":6,"reason":"project has 2 contributing companies or organizations -- score normalized to 6","details":["Info: found contributions from: cockroachlabs, google"],"documentation":{"short":"Determines if the project has a set of contributors from multiple organizations (e.g., companies).","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#contributors"}},{"name":"CI-Tests","score":10,"reason":"30 out of 30 merged PRs checked by a CI test -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project runs tests before pull requests are merged.","url":"https://github.com/ossf/scorecard/blob/ab2f6e92482462fe66246d9e32f642855a691dc1/docs/checks.md#ci-tests"}}]},"last_synced_at":"2025-08-24T14:08:54.827Z","repository_id":39706652,"created_at":"2025-08-24T14:08:54.827Z","updated_at":"2025-08-24T14:08:54.827Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":275631897,"owners_count":25500067,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-17T02:00:09.119Z","response_time":84,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"transparency-dev","name":"transparency-dev","uuid":"92176100","kind":"organization","description":"","email":"transparency-dev@google.com","website":"https://transparency.dev","location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/92176100?v=4","repositories_count":5,"last_synced_at":"2023-03-08T22:00:25.805Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/transparency-dev","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-18T11:57:43.790Z","updated_at":"2023-03-08T22:00:25.976Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/transparency-dev","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/transparency-dev/repositories"},"tags":[{"name":"v0.0.2","sha":"036047b5d2f7faf3b1ee643d391e60fe5b1defcf","kind":"commit","published_at":"2023-05-05T09:59:12.000Z","download_url":"https://codeload.github.com/transparency-dev/merkle/tar.gz/v0.0.2","html_url":"https://github.com/transparency-dev/merkle/releases/tag/v0.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/transparency-dev/merkle@v0.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags/v0.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags/v0.0.2/manifests"},{"name":"v0.0.1","sha":"616662aaac757337c2c3713ea2e9fabad2ac50ec","kind":"commit","published_at":"2022-05-04T11:43:08.000Z","download_url":"https://codeload.github.com/transparency-dev/merkle/tar.gz/v0.0.1","html_url":"https://github.com/transparency-dev/merkle/releases/tag/v0.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/transparency-dev/merkle@v0.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags/v0.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/tags/v0.0.1/manifests"}]},"repo_metadata_updated_at":"2025-09-17T17:18:59.310Z","dependent_packages_count":304,"downloads":null,"downloads_period":null,"dependent_repos_count":592,"rankings":{"downloads":null,"dependent_repos_count":0.29448233106013644,"dependent_packages_count":0.2471851688898666,"stargazers_count":8.835369877807333,"forks_count":7.8373497290996506,"docker_downloads_count":0.5433673979561227,"average":3.5515509009626216},"purl":"pkg:golang/github.com/transparency-dev/merkle","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/transparency-dev/merkle","docker_dependents_count":162,"docker_downloads_count":10533677,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/transparency-dev/merkle","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/transparency-dev/merkle/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-09-16T11:06:03.240Z","issues_count":6,"pull_requests_count":152,"avg_time_to_close_issue":7090339.2,"avg_time_to_close_pull_request":339258.905511811,"issues_closed_count":5,"pull_requests_closed_count":127,"pull_request_authors_count":9,"issue_authors_count":5,"avg_comments_per_issue":1.1666666666666667,"avg_comments_per_pull_request":0.7302631578947368,"merged_pull_requests_count":122,"bot_issues_count":1,"bot_pull_requests_count":95,"past_year_issues_count":2,"past_year_pull_requests_count":49,"past_year_avg_time_to_close_issue":18694.0,"past_year_avg_time_to_close_pull_request":90282.15625,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":32,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":1.5,"past_year_avg_comments_per_pull_request":0.32653061224489793,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":41,"past_year_merged_pull_requests_count":31,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/issues","maintainers":[{"login":"AlCutter","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AlCutter"}],"active_maintainers":[{"login":"AlCutter","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AlCutter"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Ftransparency-dev%2Fmerkle/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Ftransparency-dev%2Fmerkle/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Ftransparency-dev%2Fmerkle/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Ftransparency-dev%2Fmerkle/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Ftransparency-dev%2Fmerkle/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Ftransparency-dev%2Fmerkle/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2206443,"maintainers_count":0,"namespaces_count":792747,"keywords_count":113213,"github":"golang","metadata":{"funded_packages_count":53976},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-06-10T05:03:23.672Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":13449215,"name":"golang-github-transparency-dev-merkle","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/transparency-dev/merkle","licenses":null,"normalized_licenses":[],"repository_url":"https://github.com/transparency-dev/merkle","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-08T16:36:34.093Z","latest_release_published_at":"2026-02-08T16:36:34.093Z","latest_release_number":"0.0.2-2","last_synced_at":"2026-03-08T16:50:05.182Z","created_at":"2026-02-08T16:36:31.724Z","updated_at":"2026-03-08T17:04:02.992Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-transparency-dev-merkle","install_command":"apt-get install golang-github-transparency-dev-merkle","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-transparency-dev-merkle-dev","standards_version":"4.6.2","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-google-go-cmp-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{},"repo_metadata_updated_at":null,"dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-transparency-dev-merkle?arch=source\u0026distro=ubuntu-24.10\u0026repository_url=https://launchpad.net/ubuntu/oracular","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-transparency-dev-merkle","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-transparency-dev-merkle","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-transparency-dev-merkle/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-transparency-dev-merkle/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-transparency-dev-merkle/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-transparency-dev-merkle/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-transparency-dev-merkle/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-transparency-dev-merkle/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/golang-github-transparency-dev-merkle/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.10","url":"https://launchpad.net/ubuntu/oracular","ecosystem":"ubuntu","default":false,"packages_count":38437,"maintainers_count":0,"namespaces_count":4,"keywords_count":1473,"github":"ubuntu","metadata":{"codename":"oracular","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":214},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.028Z","updated_at":"2026-06-10T05:17:05.787Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/namespaces"}},{"id":13963629,"name":"go-github-com-transparency-dev-merkle","ecosystem":"guix","description":"Merkle trees in Golang","homepage":"https://github.com/transparency-dev/merkle","licenses":"asl2.0","normalized_licenses":["CERN-OHL-P-2.0"],"repository_url":"https://github.com/transparency-dev/merkle","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-03-02T22:55:52.065Z","latest_release_published_at":"2026-03-02T22:55:52.065Z","latest_release_number":"0.0.2","last_synced_at":"2026-04-27T18:12:33.058Z","created_at":"2026-03-02T22:55:51.890Z","updated_at":"2026-04-27T18:12:33.873Z","registry_url":"https://packages.guix.gnu.org/packages/go-github-com-transparency-dev-merkle/0.0.2/","install_command":"guix install go-github-com-transparency-dev-merkle","documentation_url":"https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/golang-xyz.scm#n26464","metadata":{"location":"gnu/packages/golang-xyz.scm:26464","variable_name":"go-github-com-transparency-dev-merkle"},"repo_metadata":{},"repo_metadata_updated_at":"2026-04-27T18:12:33.846Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:guix/go-github-com-transparency-dev-merkle","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/guix/go-github-com-transparency-dev-merkle","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/guix/go-github-com-transparency-dev-merkle","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/guix/go-github-com-transparency-dev-merkle/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-transparency-dev-merkle/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-transparency-dev-merkle/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-transparency-dev-merkle/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-transparency-dev-merkle/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-transparency-dev-merkle/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/go-github-com-transparency-dev-merkle/codemeta","maintainers":[],"registry":{"name":"guix","url":"https://guix.gnu.org","ecosystem":"guix","default":true,"packages_count":32052,"maintainers_count":0,"namespaces_count":0,"keywords_count":1627,"github":"guix-mirror","metadata":{"funded_packages_count":368},"icon_url":"https://github.com/guix-mirror.png","created_at":"2026-03-02T16:23:46.981Z","updated_at":"2026-06-10T05:17:25.224Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/guix/namespaces"}},{"id":13716888,"name":"golang-github-transparency-dev-merkle","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/transparency-dev/merkle","licenses":null,"normalized_licenses":[],"repository_url":"https://github.com/transparency-dev/merkle","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-13T00:20:02.913Z","latest_release_published_at":"2026-02-13T00:20:02.913Z","latest_release_number":"0.0.2-2","last_synced_at":"2026-03-13T01:06:42.997Z","created_at":"2026-02-13T00:20:02.624Z","updated_at":"2026-03-13T01:06:42.997Z","registry_url":"https://launchpad.net/ubuntu/+source/golang-github-transparency-dev-merkle","install_command":"apt-get install golang-github-transparency-dev-merkle","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"golang-github-transparency-dev-merkle-dev","standards_version":"4.6.2","maintainer":"Debian Go Packaging Team \u003cteam+pkg-go@tracker.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-golang, golang-any, golang-github-google-go-cmp-dev","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{},"repo_metadata_updated_at":"2026-02-13T00:20:04.357Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/golang-github-transparency-dev-merkle?arch=source\u0026distro=ubuntu-24.04","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/golang-github-transparency-dev-merkle","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/golang-github-transparency-dev-merkle","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/golang-github-transparency-dev-merkle/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-transparency-dev-merkle/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-transparency-dev-merkle/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-transparency-dev-merkle/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-transparency-dev-merkle/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-transparency-dev-merkle/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/golang-github-transparency-dev-merkle/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.04","url":"https://launchpad.net/ubuntu/noble","ecosystem":"ubuntu","default":true,"packages_count":37306,"maintainers_count":0,"namespaces_count":4,"keywords_count":1701,"github":"ubuntu","metadata":{"codename":"noble","funded_packages_count":198},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:45.928Z","updated_at":"2026-06-10T05:17:44.581Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/namespaces"}}],"commits":{"id":11059683,"full_name":"transparency-dev/merkle","default_branch":"master","total_commits":263,"total_committers":9,"total_bot_commits":152,"total_bot_committers":1,"mean_commits":29.22222222222222,"dds":0.42205323193916355,"past_year_total_commits":63,"past_year_total_committers":4,"past_year_total_bot_commits":41,"past_year_total_bot_committers":1,"past_year_mean_commits":15.75,"past_year_dds":0.3492063492063492,"last_synced_at":"2026-07-09T06:01:29.002Z","last_synced_commit":"77df88e508fa9bc242c69eb489f88803aef9a737","created_at":"2025-09-09T13:09:23.355Z","updated_at":"2026-07-09T06:01:28.932Z","committers":[{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":152},{"name":"Pavel Kalinnikov","email":"pkalinnikov@google.com","login":"pav-kv","count":35},{"name":"Al Cutter","email":"al@google.com","login":"AlCutter","count":23},{"name":"Philippe Boneff","email":"phb@google.com","login":"phbnf","count":22},{"name":"Martin Hutchinson","email":"mhutchinson@gmail.com","login":"mhutchinson","count":20},{"name":"M Hickford","email":"hickford@google.com","login":"hickford","count":5},{"name":"Roger Ng","email":"roger2hk@gmail.com","login":"roger2hk","count":4},{"name":"Tanner Gill","email":"contacttannergill@gmail.com","login":"tannaurus","count":1},{"name":"Kat Joyce","email":"kat@taknira.com","login":"taknira","count":1}],"past_year_committers":[{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":41},{"name":"Philippe Boneff","email":"phb@google.com","login":"phbnf","count":20},{"name":"Roger Ng","email":"rogerng@google.com","login":"roger2hk","count":1},{"name":"Kat Joyce","email":"kat@taknira.com","login":"taknira","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-07-11T00:00:14.669Z","repositories_count":6302966,"commits_count":864249709,"contributors_count":35280638,"owners_count":1189452,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"transparency-dev/merkle","html_url":"https://github.com/transparency-dev/merkle","last_synced_at":"2026-07-09T06:01:08.039Z","status":"active","issues_count":7,"pull_requests_count":158,"avg_time_to_close_issue":7090339.2,"avg_time_to_close_pull_request":329784.54198473284,"issues_closed_count":5,"pull_requests_closed_count":131,"pull_request_authors_count":9,"issue_authors_count":6,"avg_comments_per_issue":1.0,"avg_comments_per_pull_request":0.7531645569620253,"merged_pull_requests_count":126,"bot_issues_count":1,"bot_pull_requests_count":98,"past_year_issues_count":1,"past_year_pull_requests_count":13,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":30696.75,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":8,"past_year_pull_request_authors_count":3,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.38461538461538464,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":10,"past_year_merged_pull_requests_count":8,"created_at":"2023-05-19T00:05:30.982Z","updated_at":"2026-07-09T06:01:08.039Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/transparency-dev%2Fmerkle/issues","issue_labels_count":{"table":{"enhancement":2,"github_actions":1,"documentation":1,"bug":1,"dependencies":1}},"pull_request_labels_count":{"table":{"dependencies":99,"github_actions":96,"documentation":2,"go":1}},"issue_author_associations_count":{"table":{"CONTRIBUTOR":5,"NONE":2}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":147,"COLLABORATOR":10,"NONE":1}},"issue_authors":{"table":{"pavelkalinnikov":2,"phbnf":1,"mhutchinson":1,"dependabot[bot]":1,"Barre":1,"rozbb":1}},"pull_request_authors":{"table":{"dependabot[bot]":98,"pavelkalinnikov":21,"mhutchinson":16,"AlCutter":10,"hickford":5,"phbnf":4,"pav-kv":2,"roger2hk":1,"tannaurus":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-07-11T00:00:21.140Z","repositories_count":14862673,"issues_count":32274151,"pull_requests_count":106137461,"authors_count":11341982,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{"enhancement":1}},"past_year_pull_request_labels_count":{"table":{"dependencies":10,"github_actions":10}},"past_year_issue_author_associations_count":{"table":{"CONTRIBUTOR":1}},"past_year_pull_request_author_associations_count":{"table":{"CONTRIBUTOR":13}},"past_year_issue_authors":{"table":{"phbnf":1}},"past_year_pull_request_authors":{"table":{"dependabot[bot]":10,"phbnf":2,"roger2hk":1}},"maintainers":[{"table":{"login":"AlCutter","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AlCutter"}}],"active_maintainers":[]}},"events":{"total":{"DeleteEvent":51,"PullRequestEvent":123,"ForkEvent":6,"IssuesEvent":3,"WatchEvent":4,"IssueCommentEvent":21,"PushEvent":63,"PullRequestReviewCommentEvent":14,"PullRequestReviewEvent":56,"CreateEvent":47},"last_year":{"DeleteEvent":24,"PullRequestEvent":59,"ForkEvent":4,"IssueCommentEvent":4,"PushEvent":33,"PullRequestReviewEvent":8,"CreateEvent":18}},"keywords":[],"dependencies":[{"ecosystem":"go","filepath":"go.mod","sha":null,"kind":"manifest","created_at":"2022-08-09T15:24:48.832Z","updated_at":"2022-08-09T15:24:48.832Z","repository_link":"https://github.com/transparency-dev/merkle/blob/main/go.mod","dependencies":[{"id":918269329,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.6","direct":true,"kind":"runtime","optional":false},{"id":918269330,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20191204190536-9bdfabe68543","direct":true,"kind":"runtime","optional":false}]},{"ecosystem":"go","filepath":"go.sum","sha":null,"kind":"lockfile","created_at":"2022-08-09T15:24:48.949Z","updated_at":"2022-08-09T15:24:48.949Z","repository_link":"https://github.com/transparency-dev/merkle/blob/main/go.sum","dependencies":[{"id":918269707,"package_name":"github.com/google/go-cmp","ecosystem":"go","requirements":"v0.5.6","direct":false,"kind":"runtime","optional":false},{"id":918269708,"package_name":"golang.org/x/xerrors","ecosystem":"go","requirements":"v0.0.0-20191204190536-9bdfabe68543","direct":false,"kind":"runtime","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/cflite_build.yml","sha":null,"kind":"manifest","created_at":"2023-02-08T12:01:07.759Z","updated_at":"2023-02-08T12:01:07.759Z","repository_link":"https://github.com/transparency-dev/merkle/blob/main/.github/workflows/cflite_build.yml","dependencies":[{"id":7450770823,"package_name":"google/clusterfuzzlite/actions/build_fuzzers","ecosystem":"actions","requirements":"1e163f06cba7820da5154ac9fe1a32d7fe6f73a3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/cflite_pr.yml","sha":null,"kind":"manifest","created_at":"2023-02-08T12:01:07.846Z","updated_at":"2023-02-08T12:01:07.846Z","repository_link":"https://github.com/transparency-dev/merkle/blob/main/.github/workflows/cflite_pr.yml","dependencies":[{"id":7450771984,"package_name":"google/clusterfuzzlite/actions/build_fuzzers","ecosystem":"actions","requirements":"1e163f06cba7820da5154ac9fe1a32d7fe6f73a3","direct":true,"kind":"composite","optional":false},{"id":7450771985,"package_name":"google/clusterfuzzlite/actions/run_fuzzers","ecosystem":"actions","requirements":"1e163f06cba7820da5154ac9fe1a32d7fe6f73a3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/codeql-analysis.yml","sha":null,"kind":"manifest","created_at":"2023-02-08T12:01:08.155Z","updated_at":"2023-02-08T12:01:08.155Z","repository_link":"https://github.com/transparency-dev/merkle/blob/main/.github/workflows/codeql-analysis.yml","dependencies":[{"id":7450772189,"package_name":"actions/checkout","ecosystem":"actions","requirements":"e2f20e631ae6d7dd3b768f56a5d2af784dd54791","direct":true,"kind":"composite","optional":false},{"id":7450772190,"package_name":"github/codeql-action/init","ecosystem":"actions","requirements":"ea25ff07d1d19b19a3bb9fc8a1392902a203f988","direct":true,"kind":"composite","optional":false},{"id":7450772191,"package_name":"github/codeql-action/autobuild","ecosystem":"actions","requirements":"ea25ff07d1d19b19a3bb9fc8a1392902a203f988","direct":true,"kind":"composite","optional":false},{"id":7450772192,"package_name":"github/codeql-action/analyze","ecosystem":"actions","requirements":"ea25ff07d1d19b19a3bb9fc8a1392902a203f988","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/go_test.yml","sha":null,"kind":"manifest","created_at":"2023-02-08T12:01:08.252Z","updated_at":"2023-02-08T12:01:08.252Z","repository_link":"https://github.com/transparency-dev/merkle/blob/main/.github/workflows/go_test.yml","dependencies":[{"id":7450772219,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"c4a742cab115ed795e34d4513e2cf7d472deb55f","direct":true,"kind":"composite","optional":false},{"id":7450772220,"package_name":"actions/checkout","ecosystem":"actions","requirements":"93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8","direct":true,"kind":"composite","optional":false},{"id":7450772221,"package_name":"codecov/codecov-action","ecosystem":"actions","requirements":"f32b3a3741e1053eb607407145bc9619351dc93b","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/golangci-lint.yml","sha":null,"kind":"manifest","created_at":"2023-02-08T12:01:08.316Z","updated_at":"2023-02-08T12:01:08.316Z","repository_link":"https://github.com/transparency-dev/merkle/blob/main/.github/workflows/golangci-lint.yml","dependencies":[{"id":7450773420,"package_name":"actions/setup-go","ecosystem":"actions","requirements":"c4a742cab115ed795e34d4513e2cf7d472deb55f","direct":true,"kind":"composite","optional":false},{"id":7450773421,"package_name":"actions/checkout","ecosystem":"actions","requirements":"93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8","direct":true,"kind":"composite","optional":false},{"id":7450773422,"package_name":"golangci/golangci-lint-action","ecosystem":"actions","requirements":"07db5389c99593f11ad7b44463c2d4233066a9b1","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/scorecards.yml","sha":null,"kind":"manifest","created_at":"2023-02-08T12:01:08.561Z","updated_at":"2023-02-08T12:01:08.561Z","repository_link":"https://github.com/transparency-dev/merkle/blob/main/.github/workflows/scorecards.yml","dependencies":[{"id":7450774723,"package_name":"actions/checkout","ecosystem":"actions","requirements":"93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8","direct":true,"kind":"composite","optional":false},{"id":7450774726,"package_name":"ossf/scorecard-action","ecosystem":"actions","requirements":"99c53751e09b9529366343771cc321ec74e9bd3d","direct":true,"kind":"composite","optional":false},{"id":7450774728,"package_name":"actions/upload-artifact","ecosystem":"actions","requirements":"3cea5372237819ed00197afe530f5a7ea3e805c8","direct":true,"kind":"composite","optional":false},{"id":7450774729,"package_name":"github/codeql-action/upload-sarif","ecosystem":"actions","requirements":"807578363a7869ca324a79039e6db9c843e0e100","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"docker","filepath":".clusterfuzzlite/Dockerfile","sha":null,"kind":"manifest","created_at":"2023-02-08T12:01:08.813Z","updated_at":"2023-02-08T12:01:08.813Z","repository_link":"https://github.com/transparency-dev/merkle/blob/main/.clusterfuzzlite/Dockerfile","dependencies":[{"id":7450775995,"package_name":"gcr.io/oss-fuzz-base/base-builder-go@sha256","ecosystem":"docker","requirements":"c7f01a616db0fc554d98edbd7d49a7177197f77fd4e1371bcb7774d7eac8216d","direct":true,"kind":"build","optional":false}]}],"score":22.217560629702586,"created_at":"2026-07-08T05:16:37.801Z","updated_at":"2026-07-22T12:30:32.643Z","avatar_url":"https://github.com/transparency-dev.png","language":"Go","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/377703","html_url":"https://summary.ecosyste.ms/projects/377703"}