{"id":377711,"url":"https://github.com/alexeyraspopov/picocolors","last_synced_at":"2026-09-11T22:01:27.866Z","repository":{"id":37537050,"uuid":"410740124","full_name":"alexeyraspopov/picocolors","owner":"alexeyraspopov","description":"The tiniest and the fastest library for terminal output formatting with ANSI colors","archived":false,"fork":false,"pushed_at":"2024-11-18T17:46:33.000Z","size":81,"stargazers_count":1751,"open_issues_count":17,"forks_count":52,"subscribers_count":10,"default_branch":"main","last_synced_at":"2026-09-03T18:05:51.391Z","etag":null,"topics":["ansi","colors","console","terminal","zero-dependency"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/alexeyraspopov.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-09-27T04:22:36.000Z","updated_at":"2026-09-01T23:06:11.000Z","dependencies_parsed_at":"2024-02-26T01:49:17.170Z","dependency_job_id":"33859a2e-db2a-4506-83e3-e9bfa7b6c5b8","html_url":"https://github.com/alexeyraspopov/picocolors","commit_stats":{"total_commits":73,"total_committers":14,"mean_commits":5.214285714285714,"dds":0.547945205479452,"last_synced_commit":"7249f8c5d4825550f70bc1ea98652639933d3bbd"},"previous_names":[],"tags_count":8,"template":false,"template_full_name":null,"purl":"pkg:github/alexeyraspopov/picocolors","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/sbom","scorecard":{"id":181384,"data":{"date":"2025-08-11","repo":{"name":"github.com/alexeyraspopov/picocolors","commit":"0e7c4af2de299dd7bc5916f2bddd151fa2f66740"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":4,"reason":"Found 11/23 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:22","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:26","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:28","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:27","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:43","Info:   0 out of   6 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   5 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/benchmarks.yaml:1","Warn: no topLevel permission defined: .github/workflows/testing.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}}]},"last_synced_at":"2025-08-16T18:55:48.325Z","repository_id":37537050,"created_at":"2025-08-16T18:55:48.325Z","updated_at":"2025-08-16T18:55:48.325Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":336071963,"owners_count":37020715,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-04T02:00:06.169Z","response_time":115,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"alexeyraspopov","name":"Oleksii","uuid":"858295","kind":"user","description":"Curious developer.","email":"","website":"attitude.dev","location":"Brooklyn, NY","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/858295?u=6918b013b2a838c9b3e3836ebbdc266e8d1bac61\u0026v=4","repositories_count":189,"last_synced_at":"2026-09-04T21:43:48.946Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/alexeyraspopov","funding_links":[],"total_stars":2716,"followers":326,"following":63,"created_at":"2022-11-02T16:20:34.534Z","updated_at":"2026-09-04T21:43:48.956Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov/repositories"},"packages":[{"id":13772110,"name":"node-picocolors","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/alexeyraspopov/picocolors","licenses":"isc","normalized_licenses":[],"repository_url":"https://github.com/alexeyraspopov/picocolors","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-13T11:59:59.322Z","latest_release_published_at":"2026-02-13T11:59:59.322Z","latest_release_number":"1.0.0-3","last_synced_at":"2026-03-13T18:44:34.838Z","created_at":"2026-02-13T11:59:59.099Z","updated_at":"2026-09-07T12:56:06.370Z","registry_url":"https://launchpad.net/ubuntu/+source/node-picocolors","install_command":"apt-get install node-picocolors","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"node-picocolors","standards_version":"4.6.0","maintainer":"Debian Javascript Maintainers \u003cpkg-javascript-devel@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-sequence-nodejs","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":37537050,"uuid":"410740124","full_name":"alexeyraspopov/picocolors","owner":"alexeyraspopov","description":"The tiniest and the fastest library for terminal output formatting with ANSI colors","archived":false,"fork":false,"pushed_at":"2024-11-18T17:46:33.000Z","size":81,"stargazers_count":1751,"open_issues_count":17,"forks_count":52,"subscribers_count":10,"default_branch":"main","last_synced_at":"2026-09-03T18:05:51.391Z","etag":null,"topics":["ansi","colors","console","terminal","zero-dependency"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/alexeyraspopov.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-09-27T04:22:36.000Z","updated_at":"2026-09-01T23:06:11.000Z","dependencies_parsed_at":"2024-02-26T01:49:17.170Z","dependency_job_id":"33859a2e-db2a-4506-83e3-e9bfa7b6c5b8","html_url":"https://github.com/alexeyraspopov/picocolors","commit_stats":{"total_commits":73,"total_committers":14,"mean_commits":5.214285714285714,"dds":0.547945205479452,"last_synced_commit":"7249f8c5d4825550f70bc1ea98652639933d3bbd"},"previous_names":[],"tags_count":8,"template":false,"template_full_name":null,"purl":"pkg:github/alexeyraspopov/picocolors","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/sbom","scorecard":{"id":181384,"data":{"date":"2025-08-11","repo":{"name":"github.com/alexeyraspopov/picocolors","commit":"0e7c4af2de299dd7bc5916f2bddd151fa2f66740"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":4,"reason":"Found 11/23 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:22","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:26","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:28","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:27","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:43","Info:   0 out of   6 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   5 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/benchmarks.yaml:1","Warn: no topLevel permission defined: .github/workflows/testing.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}}]},"last_synced_at":"2025-08-16T18:55:48.325Z","repository_id":37537050,"created_at":"2025-08-16T18:55:48.325Z","updated_at":"2025-08-16T18:55:48.325Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":336071963,"owners_count":37020715,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-04T02:00:06.169Z","response_time":115,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"alexeyraspopov","name":"Oleksii","uuid":"858295","kind":"user","description":"Curious developer.","email":"","website":"attitude.dev","location":"Brooklyn, NY","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/858295?u=6918b013b2a838c9b3e3836ebbdc266e8d1bac61\u0026v=4","repositories_count":189,"last_synced_at":"2026-09-04T21:43:48.946Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/alexeyraspopov","funding_links":[],"total_stars":2716,"followers":326,"following":63,"created_at":"2022-11-02T16:20:34.534Z","updated_at":"2026-09-04T21:43:48.956Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov/repositories"},"tags":[{"name":"v1.1.1","sha":"7249f8c5d4825550f70bc1ea98652639933d3bbd","kind":"tag","published_at":"2024-10-16T18:22:21.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.1.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"4e946891bb511accf089f4d52003afbcbc1bb928","kind":"tag","published_at":"2024-09-02T23:46:55.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.1.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.0/manifests"},{"name":"v1.0.1","sha":"5f0c047cd61b51e5d794e3ac1ef700095e9bb6a8","kind":"tag","published_at":"2024-05-14T02:46:08.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.0.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.1/manifests"},{"name":"show","sha":"5f0c047cd61b51e5d794e3ac1ef700095e9bb6a8","kind":"tag","published_at":"2024-05-14T02:46:08.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/show","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/show","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@show","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/show","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/show/manifests"},{"name":"v1.0.0","sha":"228cea3fa726857785b8c069cccc58e9743cd71d","kind":"tag","published_at":"2021-10-13T02:47:45.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.0.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.0/manifests"},{"name":"v0.2.1","sha":"06b6c8683c4b6a5dbbf4daf0742b822ae4a00f57","kind":"tag","published_at":"2021-10-04T15:53:02.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.2.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"5f2afbfa8ebd0e0e597d3791b213bba08473a45e","kind":"tag","published_at":"2021-10-04T04:26:56.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.2.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"0364ab9c066fa7aca213f46bdcde5b2da4822e9b","kind":"tag","published_at":"2021-09-27T17:10:47.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.1.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-09-07T12:56:06.370Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/node-picocolors?arch=source\u0026distro=ubuntu-22.04\u0026repository_url=https://launchpad.net/ubuntu/jammy","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/node-picocolors","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/node-picocolors","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/node-picocolors/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-06T19:30:51.192Z","issues_count":43,"pull_requests_count":81,"avg_time_to_close_issue":16803590.38235294,"avg_time_to_close_pull_request":11452140.940298507,"issues_closed_count":34,"pull_requests_closed_count":67,"pull_request_authors_count":30,"issue_authors_count":30,"avg_comments_per_issue":2.627906976744186,"avg_comments_per_pull_request":2.0864197530864197,"merged_pull_requests_count":32,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1676831.0,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":1.5,"past_year_avg_comments_per_pull_request":1.1111111111111112,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/issues","maintainers":[{"login":"alexeyraspopov","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alexeyraspopov"},{"login":"denysovkos","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/denysovkos"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/node-picocolors/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/node-picocolors/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/node-picocolors/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/node-picocolors/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/node-picocolors/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/node-picocolors/codemeta","maintainers":[],"registry":{"name":"ubuntu-22.04","url":"https://launchpad.net/ubuntu/jammy","ecosystem":"ubuntu","default":false,"packages_count":34289,"maintainers_count":0,"namespaces_count":4,"keywords_count":1498,"github":"ubuntu","metadata":{"codename":"jammy","funded_packages_count":1149},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:46.486Z","updated_at":"2026-09-10T05:05:52.205Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/namespaces"}},{"id":13702167,"name":"node-picocolors","ecosystem":"debian","description":null,"homepage":"https://github.com/alexeyraspopov/picocolors","licenses":"isc","normalized_licenses":[],"repository_url":"https://github.com/alexeyraspopov/picocolors","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T21:21:50.487Z","latest_release_published_at":"2026-02-12T21:21:50.487Z","latest_release_number":"1.0.0-4","last_synced_at":"2026-03-13T20:43:11.893Z","created_at":"2026-02-12T21:21:50.202Z","updated_at":"2026-09-07T12:56:06.374Z","registry_url":"https://tracker.debian.org/pkg/node-picocolors","install_command":"apt-get install node-picocolors","documentation_url":"https://packages.debian.org/bookworm/node-picocolors","metadata":{"component":"main","architecture":"all","priority":"optional","binary":"node-picocolors","standards_version":"4.6.0","maintainer":"Debian Javascript Maintainers \u003cpkg-javascript-devel@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-sequence-nodejs","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":37537050,"uuid":"410740124","full_name":"alexeyraspopov/picocolors","owner":"alexeyraspopov","description":"The tiniest and the fastest library for terminal output formatting with ANSI colors","archived":false,"fork":false,"pushed_at":"2024-11-18T17:46:33.000Z","size":81,"stargazers_count":1751,"open_issues_count":17,"forks_count":52,"subscribers_count":10,"default_branch":"main","last_synced_at":"2026-09-03T18:05:51.391Z","etag":null,"topics":["ansi","colors","console","terminal","zero-dependency"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/alexeyraspopov.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-09-27T04:22:36.000Z","updated_at":"2026-09-01T23:06:11.000Z","dependencies_parsed_at":"2024-02-26T01:49:17.170Z","dependency_job_id":"33859a2e-db2a-4506-83e3-e9bfa7b6c5b8","html_url":"https://github.com/alexeyraspopov/picocolors","commit_stats":{"total_commits":73,"total_committers":14,"mean_commits":5.214285714285714,"dds":0.547945205479452,"last_synced_commit":"7249f8c5d4825550f70bc1ea98652639933d3bbd"},"previous_names":[],"tags_count":8,"template":false,"template_full_name":null,"purl":"pkg:github/alexeyraspopov/picocolors","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/sbom","scorecard":{"id":181384,"data":{"date":"2025-08-11","repo":{"name":"github.com/alexeyraspopov/picocolors","commit":"0e7c4af2de299dd7bc5916f2bddd151fa2f66740"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":4,"reason":"Found 11/23 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:22","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:26","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:28","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:27","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:43","Info:   0 out of   6 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   5 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/benchmarks.yaml:1","Warn: no topLevel permission defined: .github/workflows/testing.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}}]},"last_synced_at":"2025-08-16T18:55:48.325Z","repository_id":37537050,"created_at":"2025-08-16T18:55:48.325Z","updated_at":"2025-08-16T18:55:48.325Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":336071963,"owners_count":37020715,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-04T02:00:06.169Z","response_time":115,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"alexeyraspopov","name":"Oleksii","uuid":"858295","kind":"user","description":"Curious developer.","email":"","website":"attitude.dev","location":"Brooklyn, NY","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/858295?u=6918b013b2a838c9b3e3836ebbdc266e8d1bac61\u0026v=4","repositories_count":189,"last_synced_at":"2026-09-04T21:43:48.946Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/alexeyraspopov","funding_links":[],"total_stars":2716,"followers":326,"following":63,"created_at":"2022-11-02T16:20:34.534Z","updated_at":"2026-09-04T21:43:48.956Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov/repositories"},"tags":[{"name":"v1.1.1","sha":"7249f8c5d4825550f70bc1ea98652639933d3bbd","kind":"tag","published_at":"2024-10-16T18:22:21.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.1.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"4e946891bb511accf089f4d52003afbcbc1bb928","kind":"tag","published_at":"2024-09-02T23:46:55.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.1.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.0/manifests"},{"name":"v1.0.1","sha":"5f0c047cd61b51e5d794e3ac1ef700095e9bb6a8","kind":"tag","published_at":"2024-05-14T02:46:08.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.0.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.1/manifests"},{"name":"show","sha":"5f0c047cd61b51e5d794e3ac1ef700095e9bb6a8","kind":"tag","published_at":"2024-05-14T02:46:08.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/show","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/show","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@show","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/show","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/show/manifests"},{"name":"v1.0.0","sha":"228cea3fa726857785b8c069cccc58e9743cd71d","kind":"tag","published_at":"2021-10-13T02:47:45.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.0.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.0/manifests"},{"name":"v0.2.1","sha":"06b6c8683c4b6a5dbbf4daf0742b822ae4a00f57","kind":"tag","published_at":"2021-10-04T15:53:02.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.2.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"5f2afbfa8ebd0e0e597d3791b213bba08473a45e","kind":"tag","published_at":"2021-10-04T04:26:56.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.2.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"0364ab9c066fa7aca213f46bdcde5b2da4822e9b","kind":"tag","published_at":"2021-09-27T17:10:47.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.1.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-09-07T12:56:06.373Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/node-picocolors?arch=source\u0026distro=debian-12","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/node-picocolors","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/node-picocolors","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/node-picocolors/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-06T19:30:51.192Z","issues_count":43,"pull_requests_count":81,"avg_time_to_close_issue":16803590.38235294,"avg_time_to_close_pull_request":11452140.940298507,"issues_closed_count":34,"pull_requests_closed_count":67,"pull_request_authors_count":30,"issue_authors_count":30,"avg_comments_per_issue":2.627906976744186,"avg_comments_per_pull_request":2.0864197530864197,"merged_pull_requests_count":32,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1676831.0,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":1.5,"past_year_avg_comments_per_pull_request":1.1111111111111112,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/issues","maintainers":[{"login":"alexeyraspopov","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alexeyraspopov"},{"login":"denysovkos","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/denysovkos"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/node-picocolors/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/node-picocolors/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/node-picocolors/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/node-picocolors/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/node-picocolors/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/node-picocolors/codemeta","maintainers":[],"registry":{"name":"debian-12","url":"https://packages.debian.org/bookworm","ecosystem":"debian","default":true,"packages_count":34734,"maintainers_count":0,"namespaces_count":4,"keywords_count":2635,"github":"debian","metadata":{"codename":"bookworm","funded_packages_count":1400},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:49.459Z","updated_at":"2026-09-10T05:05:48.174Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/namespaces"}},{"id":13558733,"name":"node-picocolors","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/alexeyraspopov/picocolors","licenses":"isc","normalized_licenses":[],"repository_url":"https://github.com/alexeyraspopov/picocolors","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-11T04:51:10.697Z","latest_release_published_at":"2026-02-11T04:51:10.697Z","latest_release_number":"1.0.0-4","last_synced_at":"2026-03-11T12:04:23.174Z","created_at":"2026-02-11T04:51:10.528Z","updated_at":"2026-09-09T11:35:16.130Z","registry_url":"https://launchpad.net/ubuntu/+source/node-picocolors","install_command":"apt-get install node-picocolors","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"node-picocolors","standards_version":"4.6.0","maintainer":"Debian Javascript Maintainers \u003cpkg-javascript-devel@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-sequence-nodejs","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":37537050,"uuid":"410740124","full_name":"alexeyraspopov/picocolors","owner":"alexeyraspopov","description":"The tiniest and the fastest library for terminal output formatting with ANSI colors","archived":false,"fork":false,"pushed_at":"2024-11-18T17:46:33.000Z","size":81,"stargazers_count":1751,"open_issues_count":17,"forks_count":52,"subscribers_count":10,"default_branch":"main","last_synced_at":"2026-09-03T18:05:51.391Z","etag":null,"topics":["ansi","colors","console","terminal","zero-dependency"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/alexeyraspopov.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-09-27T04:22:36.000Z","updated_at":"2026-09-01T23:06:11.000Z","dependencies_parsed_at":"2024-02-26T01:49:17.170Z","dependency_job_id":"33859a2e-db2a-4506-83e3-e9bfa7b6c5b8","html_url":"https://github.com/alexeyraspopov/picocolors","commit_stats":{"total_commits":73,"total_committers":14,"mean_commits":5.214285714285714,"dds":0.547945205479452,"last_synced_commit":"7249f8c5d4825550f70bc1ea98652639933d3bbd"},"previous_names":[],"tags_count":8,"template":false,"template_full_name":null,"purl":"pkg:github/alexeyraspopov/picocolors","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/sbom","scorecard":{"id":181384,"data":{"date":"2025-08-11","repo":{"name":"github.com/alexeyraspopov/picocolors","commit":"0e7c4af2de299dd7bc5916f2bddd151fa2f66740"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":4,"reason":"Found 11/23 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:22","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:26","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:28","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:27","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:43","Info:   0 out of   6 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   5 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/benchmarks.yaml:1","Warn: no topLevel permission defined: .github/workflows/testing.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}}]},"last_synced_at":"2025-08-16T18:55:48.325Z","repository_id":37537050,"created_at":"2025-08-16T18:55:48.325Z","updated_at":"2025-08-16T18:55:48.325Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":336071963,"owners_count":37020715,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-04T02:00:06.169Z","response_time":115,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"alexeyraspopov","name":"Oleksii","uuid":"858295","kind":"user","description":"Curious developer.","email":"","website":"attitude.dev","location":"Brooklyn, NY","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/858295?u=6918b013b2a838c9b3e3836ebbdc266e8d1bac61\u0026v=4","repositories_count":189,"last_synced_at":"2026-09-04T21:43:48.946Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/alexeyraspopov","funding_links":[],"total_stars":2716,"followers":326,"following":63,"created_at":"2022-11-02T16:20:34.534Z","updated_at":"2026-09-04T21:43:48.956Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov/repositories"},"tags":[{"name":"v1.1.1","sha":"7249f8c5d4825550f70bc1ea98652639933d3bbd","kind":"tag","published_at":"2024-10-16T18:22:21.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.1.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"4e946891bb511accf089f4d52003afbcbc1bb928","kind":"tag","published_at":"2024-09-02T23:46:55.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.1.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.0/manifests"},{"name":"v1.0.1","sha":"5f0c047cd61b51e5d794e3ac1ef700095e9bb6a8","kind":"tag","published_at":"2024-05-14T02:46:08.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.0.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.1/manifests"},{"name":"show","sha":"5f0c047cd61b51e5d794e3ac1ef700095e9bb6a8","kind":"tag","published_at":"2024-05-14T02:46:08.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/show","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/show","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@show","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/show","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/show/manifests"},{"name":"v1.0.0","sha":"228cea3fa726857785b8c069cccc58e9743cd71d","kind":"tag","published_at":"2021-10-13T02:47:45.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.0.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.0/manifests"},{"name":"v0.2.1","sha":"06b6c8683c4b6a5dbbf4daf0742b822ae4a00f57","kind":"tag","published_at":"2021-10-04T15:53:02.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.2.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"5f2afbfa8ebd0e0e597d3791b213bba08473a45e","kind":"tag","published_at":"2021-10-04T04:26:56.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.2.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"0364ab9c066fa7aca213f46bdcde5b2da4822e9b","kind":"tag","published_at":"2021-09-27T17:10:47.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.1.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-09-09T11:35:16.130Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/node-picocolors?arch=source\u0026distro=ubuntu-23.04\u0026repository_url=https://launchpad.net/ubuntu/lunar","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/node-picocolors","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/node-picocolors","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/node-picocolors/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-08T20:31:39.839Z","issues_count":43,"pull_requests_count":81,"avg_time_to_close_issue":16803590.38235294,"avg_time_to_close_pull_request":11452140.940298507,"issues_closed_count":34,"pull_requests_closed_count":67,"pull_request_authors_count":30,"issue_authors_count":30,"avg_comments_per_issue":2.627906976744186,"avg_comments_per_pull_request":2.0864197530864197,"merged_pull_requests_count":32,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1676831.0,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":1.5,"past_year_avg_comments_per_pull_request":1.1111111111111112,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/issues","maintainers":[{"login":"alexeyraspopov","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alexeyraspopov"},{"login":"denysovkos","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/denysovkos"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/node-picocolors/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/node-picocolors/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/node-picocolors/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/node-picocolors/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/node-picocolors/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/node-picocolors/codemeta","maintainers":[],"registry":{"name":"ubuntu-23.04","url":"https://launchpad.net/ubuntu/lunar","ecosystem":"ubuntu","default":false,"packages_count":36116,"maintainers_count":0,"namespaces_count":4,"keywords_count":999,"github":"ubuntu","metadata":{"codename":"lunar","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":1301},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:49.117Z","updated_at":"2026-09-10T05:05:57.112Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/namespaces"}},{"id":11772313,"name":"org.mvnpm:picocolors","ecosystem":"maven","description":"The tiniest and the fastest library for terminal output formatting with ANSI colors","homepage":"https://github.com/alexeyraspopov/picocolors#readme","licenses":"ISC","normalized_licenses":["ISC"],"repository_url":"https://github.com/alexeyraspopov/picocolors","keywords_array":[],"namespace":"org.mvnpm","versions_count":5,"first_release_published_at":"2026-07-02T21:17:34.000Z","latest_release_published_at":"2024-10-16T20:02:08.000Z","latest_release_number":"1.1.1","last_synced_at":"2026-09-10T21:32:47.821Z","created_at":"2025-06-07T21:21:15.580Z","updated_at":"2026-09-10T21:32:47.821Z","registry_url":"https://central.sonatype.com/artifact/org.mvnpm/picocolors/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.mvnpm/picocolors/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":37537050,"uuid":"410740124","full_name":"alexeyraspopov/picocolors","owner":"alexeyraspopov","description":"The tiniest and the fastest library for terminal output formatting with ANSI colors","archived":false,"fork":false,"pushed_at":"2024-11-18T17:46:33.000Z","size":81,"stargazers_count":1751,"open_issues_count":17,"forks_count":52,"subscribers_count":10,"default_branch":"main","last_synced_at":"2026-09-03T18:05:51.391Z","etag":null,"topics":["ansi","colors","console","terminal","zero-dependency"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/alexeyraspopov.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-09-27T04:22:36.000Z","updated_at":"2026-09-01T23:06:11.000Z","dependencies_parsed_at":"2024-02-26T01:49:17.170Z","dependency_job_id":"33859a2e-db2a-4506-83e3-e9bfa7b6c5b8","html_url":"https://github.com/alexeyraspopov/picocolors","commit_stats":{"total_commits":73,"total_committers":14,"mean_commits":5.214285714285714,"dds":0.547945205479452,"last_synced_commit":"7249f8c5d4825550f70bc1ea98652639933d3bbd"},"previous_names":[],"tags_count":8,"template":false,"template_full_name":null,"purl":"pkg:github/alexeyraspopov/picocolors","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/sbom","scorecard":{"id":181384,"data":{"date":"2025-08-11","repo":{"name":"github.com/alexeyraspopov/picocolors","commit":"0e7c4af2de299dd7bc5916f2bddd151fa2f66740"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":4,"reason":"Found 11/23 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:22","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:26","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:28","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:27","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:43","Info:   0 out of   6 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   5 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/benchmarks.yaml:1","Warn: no topLevel permission defined: .github/workflows/testing.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}}]},"last_synced_at":"2025-08-16T18:55:48.325Z","repository_id":37537050,"created_at":"2025-08-16T18:55:48.325Z","updated_at":"2025-08-16T18:55:48.325Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":336071963,"owners_count":37020715,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-04T02:00:06.169Z","response_time":115,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"alexeyraspopov","name":"Oleksii","uuid":"858295","kind":"user","description":"Curious developer.","email":"","website":"attitude.dev","location":"Brooklyn, NY","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/858295?u=6918b013b2a838c9b3e3836ebbdc266e8d1bac61\u0026v=4","repositories_count":189,"last_synced_at":"2026-09-04T21:43:48.946Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/alexeyraspopov","funding_links":[],"total_stars":2716,"followers":326,"following":63,"created_at":"2022-11-02T16:20:34.534Z","updated_at":"2026-09-04T21:43:48.956Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov/repositories"},"tags":[{"name":"v1.1.1","sha":"7249f8c5d4825550f70bc1ea98652639933d3bbd","kind":"tag","published_at":"2024-10-16T18:22:21.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.1.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"4e946891bb511accf089f4d52003afbcbc1bb928","kind":"tag","published_at":"2024-09-02T23:46:55.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.1.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.0/manifests"},{"name":"v1.0.1","sha":"5f0c047cd61b51e5d794e3ac1ef700095e9bb6a8","kind":"tag","published_at":"2024-05-14T02:46:08.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.0.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.1/manifests"},{"name":"show","sha":"5f0c047cd61b51e5d794e3ac1ef700095e9bb6a8","kind":"tag","published_at":"2024-05-14T02:46:08.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/show","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/show","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@show","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/show","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/show/manifests"},{"name":"v1.0.0","sha":"228cea3fa726857785b8c069cccc58e9743cd71d","kind":"tag","published_at":"2021-10-13T02:47:45.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.0.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.0/manifests"},{"name":"v0.2.1","sha":"06b6c8683c4b6a5dbbf4daf0742b822ae4a00f57","kind":"tag","published_at":"2021-10-04T15:53:02.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.2.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"5f2afbfa8ebd0e0e597d3791b213bba08473a45e","kind":"tag","published_at":"2021-10-04T04:26:56.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.2.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"0364ab9c066fa7aca213f46bdcde5b2da4822e9b","kind":"tag","published_at":"2021-09-27T17:10:47.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.1.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-09-09T15:54:29.255Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":34.026626466074966,"dependent_packages_count":48.64554336343237,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":41.33608491475367},"purl":"pkg:maven/org.mvnpm/picocolors","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.mvnpm:picocolors","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.mvnpm:picocolors","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.mvnpm:picocolors/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-08T20:31:39.839Z","issues_count":43,"pull_requests_count":81,"avg_time_to_close_issue":16803590.38235294,"avg_time_to_close_pull_request":11452140.940298507,"issues_closed_count":34,"pull_requests_closed_count":67,"pull_request_authors_count":30,"issue_authors_count":30,"avg_comments_per_issue":2.627906976744186,"avg_comments_per_pull_request":2.0864197530864197,"merged_pull_requests_count":32,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1676831.0,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":1.5,"past_year_avg_comments_per_pull_request":1.1111111111111112,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/issues","maintainers":[{"login":"alexeyraspopov","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alexeyraspopov"},{"login":"denysovkos","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/denysovkos"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm:picocolors/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm:picocolors/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm:picocolors/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm:picocolors/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm:picocolors/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm:picocolors/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":622836,"maintainers_count":0,"namespaces_count":82695,"keywords_count":37244,"github":"maven-central","metadata":{"funded_packages_count":51590,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-09-11T05:02:29.819Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":13399760,"name":"node-picocolors","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/alexeyraspopov/picocolors","licenses":"isc","normalized_licenses":[],"repository_url":"https://github.com/alexeyraspopov/picocolors","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-06T06:09:26.577Z","latest_release_published_at":"2026-02-06T06:09:26.577Z","latest_release_number":"1.0.0-4","last_synced_at":"2026-09-03T09:29:47.680Z","created_at":"2026-02-06T06:09:26.305Z","updated_at":"2026-09-08T06:08:07.464Z","registry_url":"https://launchpad.net/ubuntu/+source/node-picocolors","install_command":"apt-get install node-picocolors","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"node-picocolors","standards_version":"4.6.0","maintainer":"Debian Javascript Maintainers \u003cpkg-javascript-devel@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-sequence-nodejs","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":37537050,"uuid":"410740124","full_name":"alexeyraspopov/picocolors","owner":"alexeyraspopov","description":"The tiniest and the fastest library for terminal output formatting with ANSI colors","archived":false,"fork":false,"pushed_at":"2024-11-18T17:46:33.000Z","size":81,"stargazers_count":1751,"open_issues_count":17,"forks_count":52,"subscribers_count":10,"default_branch":"main","last_synced_at":"2026-09-03T18:05:51.391Z","etag":null,"topics":["ansi","colors","console","terminal","zero-dependency"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/alexeyraspopov.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-09-27T04:22:36.000Z","updated_at":"2026-09-01T23:06:11.000Z","dependencies_parsed_at":"2024-02-26T01:49:17.170Z","dependency_job_id":"33859a2e-db2a-4506-83e3-e9bfa7b6c5b8","html_url":"https://github.com/alexeyraspopov/picocolors","commit_stats":{"total_commits":73,"total_committers":14,"mean_commits":5.214285714285714,"dds":0.547945205479452,"last_synced_commit":"7249f8c5d4825550f70bc1ea98652639933d3bbd"},"previous_names":[],"tags_count":8,"template":false,"template_full_name":null,"purl":"pkg:github/alexeyraspopov/picocolors","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/sbom","scorecard":{"id":181384,"data":{"date":"2025-08-11","repo":{"name":"github.com/alexeyraspopov/picocolors","commit":"0e7c4af2de299dd7bc5916f2bddd151fa2f66740"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":4,"reason":"Found 11/23 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:22","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:26","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:28","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:27","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:43","Info:   0 out of   6 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   5 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/benchmarks.yaml:1","Warn: no topLevel permission defined: .github/workflows/testing.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}}]},"last_synced_at":"2025-08-16T18:55:48.325Z","repository_id":37537050,"created_at":"2025-08-16T18:55:48.325Z","updated_at":"2025-08-16T18:55:48.325Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":336071963,"owners_count":37020715,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-04T02:00:06.169Z","response_time":115,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"alexeyraspopov","name":"Oleksii","uuid":"858295","kind":"user","description":"Curious developer.","email":"","website":"attitude.dev","location":"Brooklyn, NY","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/858295?u=6918b013b2a838c9b3e3836ebbdc266e8d1bac61\u0026v=4","repositories_count":189,"last_synced_at":"2026-09-04T21:43:48.946Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/alexeyraspopov","funding_links":[],"total_stars":2716,"followers":326,"following":63,"created_at":"2022-11-02T16:20:34.534Z","updated_at":"2026-09-04T21:43:48.956Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov/repositories"},"tags":[{"name":"v1.1.1","sha":"7249f8c5d4825550f70bc1ea98652639933d3bbd","kind":"tag","published_at":"2024-10-16T18:22:21.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.1.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"4e946891bb511accf089f4d52003afbcbc1bb928","kind":"tag","published_at":"2024-09-02T23:46:55.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.1.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.0/manifests"},{"name":"v1.0.1","sha":"5f0c047cd61b51e5d794e3ac1ef700095e9bb6a8","kind":"tag","published_at":"2024-05-14T02:46:08.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.0.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.1/manifests"},{"name":"show","sha":"5f0c047cd61b51e5d794e3ac1ef700095e9bb6a8","kind":"tag","published_at":"2024-05-14T02:46:08.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/show","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/show","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@show","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/show","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/show/manifests"},{"name":"v1.0.0","sha":"228cea3fa726857785b8c069cccc58e9743cd71d","kind":"tag","published_at":"2021-10-13T02:47:45.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.0.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.0/manifests"},{"name":"v0.2.1","sha":"06b6c8683c4b6a5dbbf4daf0742b822ae4a00f57","kind":"tag","published_at":"2021-10-04T15:53:02.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.2.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"5f2afbfa8ebd0e0e597d3791b213bba08473a45e","kind":"tag","published_at":"2021-10-04T04:26:56.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.2.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"0364ab9c066fa7aca213f46bdcde5b2da4822e9b","kind":"tag","published_at":"2021-09-27T17:10:47.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.1.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-09-08T06:08:07.463Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/node-picocolors?arch=source\u0026distro=ubuntu-24.04","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/node-picocolors","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/node-picocolors","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/node-picocolors/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-07T20:02:10.670Z","issues_count":43,"pull_requests_count":81,"avg_time_to_close_issue":16803590.38235294,"avg_time_to_close_pull_request":11452140.940298507,"issues_closed_count":34,"pull_requests_closed_count":67,"pull_request_authors_count":30,"issue_authors_count":30,"avg_comments_per_issue":2.627906976744186,"avg_comments_per_pull_request":2.0864197530864197,"merged_pull_requests_count":32,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1676831.0,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":1.5,"past_year_avg_comments_per_pull_request":1.1111111111111112,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/issues","maintainers":[{"login":"alexeyraspopov","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alexeyraspopov"},{"login":"denysovkos","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/denysovkos"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/node-picocolors/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/node-picocolors/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/node-picocolors/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/node-picocolors/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/node-picocolors/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/node-picocolors/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.04","url":"https://launchpad.net/ubuntu/noble","ecosystem":"ubuntu","default":true,"packages_count":37306,"maintainers_count":0,"namespaces_count":4,"keywords_count":1697,"github":"ubuntu","metadata":{"codename":"noble","funded_packages_count":1479},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:45.928Z","updated_at":"2026-09-10T05:05:53.832Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/namespaces"}},{"id":13659963,"name":"node-picocolors","ecosystem":"debian","description":null,"homepage":"https://github.com/alexeyraspopov/picocolors","licenses":"isc","normalized_licenses":[],"repository_url":"https://github.com/alexeyraspopov/picocolors","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T08:28:07.113Z","latest_release_published_at":"2026-02-12T08:28:07.113Z","latest_release_number":"1.0.0-4","last_synced_at":"2026-03-13T23:15:12.440Z","created_at":"2026-02-12T08:28:06.912Z","updated_at":"2026-08-20T01:11:55.361Z","registry_url":"https://tracker.debian.org/pkg/node-picocolors","install_command":"apt-get install node-picocolors","documentation_url":"https://packages.debian.org/trixie/node-picocolors","metadata":{"component":"main","architecture":"all","priority":"optional","binary":"node-picocolors","standards_version":"4.6.0","maintainer":"Debian Javascript Maintainers \u003cpkg-javascript-devel@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-sequence-nodejs","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":37537050,"uuid":"410740124","full_name":"alexeyraspopov/picocolors","owner":"alexeyraspopov","description":"The tiniest and the fastest library for terminal output formatting with ANSI colors","archived":false,"fork":false,"pushed_at":"2024-11-18T17:46:33.000Z","size":81,"stargazers_count":1745,"open_issues_count":17,"forks_count":52,"subscribers_count":10,"default_branch":"main","last_synced_at":"2026-08-20T00:54:08.943Z","etag":null,"topics":["ansi","colors","console","terminal","zero-dependency"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/alexeyraspopov.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-09-27T04:22:36.000Z","updated_at":"2026-08-19T15:12:28.000Z","dependencies_parsed_at":"2024-02-26T01:49:17.170Z","dependency_job_id":"33859a2e-db2a-4506-83e3-e9bfa7b6c5b8","html_url":"https://github.com/alexeyraspopov/picocolors","commit_stats":{"total_commits":73,"total_committers":14,"mean_commits":5.214285714285714,"dds":0.547945205479452,"last_synced_commit":"7249f8c5d4825550f70bc1ea98652639933d3bbd"},"previous_names":[],"tags_count":8,"template":false,"template_full_name":null,"purl":"pkg:github/alexeyraspopov/picocolors","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/sbom","scorecard":{"id":181384,"data":{"date":"2025-08-11","repo":{"name":"github.com/alexeyraspopov/picocolors","commit":"0e7c4af2de299dd7bc5916f2bddd151fa2f66740"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":4,"reason":"Found 11/23 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:22","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:26","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:28","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:27","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:43","Info:   0 out of   6 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   5 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/benchmarks.yaml:1","Warn: no topLevel permission defined: .github/workflows/testing.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}}]},"last_synced_at":"2025-08-16T18:55:48.325Z","repository_id":37537050,"created_at":"2025-08-16T18:55:48.325Z","updated_at":"2025-08-16T18:55:48.325Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784060,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"alexeyraspopov","name":"Oleksii","uuid":"858295","kind":"user","description":"Curious developer.","email":"","website":"attitude.dev","location":"Brooklyn, NY","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/858295?u=6918b013b2a838c9b3e3836ebbdc266e8d1bac61\u0026v=4","repositories_count":189,"last_synced_at":"2026-08-13T20:58:38.499Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/alexeyraspopov","funding_links":[],"total_stars":2705,"followers":326,"following":63,"created_at":"2022-11-02T16:20:34.534Z","updated_at":"2026-08-13T20:58:38.628Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov/repositories"},"tags":[{"name":"v1.1.1","sha":"7249f8c5d4825550f70bc1ea98652639933d3bbd","kind":"tag","published_at":"2024-10-16T18:22:21.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.1.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"4e946891bb511accf089f4d52003afbcbc1bb928","kind":"tag","published_at":"2024-09-02T23:46:55.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.1.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.0/manifests"},{"name":"v1.0.1","sha":"5f0c047cd61b51e5d794e3ac1ef700095e9bb6a8","kind":"tag","published_at":"2024-05-14T02:46:08.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.0.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.1/manifests"},{"name":"show","sha":"5f0c047cd61b51e5d794e3ac1ef700095e9bb6a8","kind":"tag","published_at":"2024-05-14T02:46:08.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/show","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/show","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@show","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/show","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/show/manifests"},{"name":"v1.0.0","sha":"228cea3fa726857785b8c069cccc58e9743cd71d","kind":"tag","published_at":"2021-10-13T02:47:45.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.0.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.0/manifests"},{"name":"v0.2.1","sha":"06b6c8683c4b6a5dbbf4daf0742b822ae4a00f57","kind":"tag","published_at":"2021-10-04T15:53:02.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.2.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"5f2afbfa8ebd0e0e597d3791b213bba08473a45e","kind":"tag","published_at":"2021-10-04T04:26:56.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.2.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"0364ab9c066fa7aca213f46bdcde5b2da4822e9b","kind":"tag","published_at":"2021-09-27T17:10:47.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.1.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-08-20T01:11:55.360Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/node-picocolors?arch=source\u0026distro=debian-13\u0026repository_url=https://packages.debian.org/trixie","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/node-picocolors","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/node-picocolors","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/node-picocolors/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T00:51:37.206Z","issues_count":43,"pull_requests_count":81,"avg_time_to_close_issue":16803590.38235294,"avg_time_to_close_pull_request":11452140.940298507,"issues_closed_count":34,"pull_requests_closed_count":67,"pull_request_authors_count":30,"issue_authors_count":30,"avg_comments_per_issue":2.627906976744186,"avg_comments_per_pull_request":2.074074074074074,"merged_pull_requests_count":32,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1676831.0,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":1.5,"past_year_avg_comments_per_pull_request":1.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/issues","maintainers":[{"login":"alexeyraspopov","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alexeyraspopov"},{"login":"denysovkos","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/denysovkos"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/node-picocolors/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/node-picocolors/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/node-picocolors/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/node-picocolors/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/node-picocolors/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/node-picocolors/codemeta","maintainers":[],"registry":{"name":"debian-13","url":"https://packages.debian.org/trixie","ecosystem":"debian","default":false,"packages_count":38024,"maintainers_count":0,"namespaces_count":4,"keywords_count":1985,"github":"debian","metadata":{"codename":"trixie","funded_packages_count":1942},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:50.448Z","updated_at":"2026-09-10T05:05:23.251Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/namespaces"}},{"id":13760126,"name":"node-picocolors","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/alexeyraspopov/picocolors","licenses":"isc","normalized_licenses":[],"repository_url":"https://github.com/alexeyraspopov/picocolors","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-13T09:39:39.167Z","latest_release_published_at":"2026-02-13T09:39:39.167Z","latest_release_number":"1.0.0-4","last_synced_at":"2026-08-03T22:08:56.667Z","created_at":"2026-02-13T09:39:38.989Z","updated_at":"2026-08-20T01:16:28.083Z","registry_url":"https://launchpad.net/ubuntu/+source/node-picocolors","install_command":"apt-get install node-picocolors","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"node-picocolors","standards_version":"4.6.0","maintainer":"Debian Javascript Maintainers \u003cpkg-javascript-devel@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-sequence-nodejs","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":37537050,"uuid":"410740124","full_name":"alexeyraspopov/picocolors","owner":"alexeyraspopov","description":"The tiniest and the fastest library for terminal output formatting with ANSI colors","archived":false,"fork":false,"pushed_at":"2024-11-18T17:46:33.000Z","size":81,"stargazers_count":1745,"open_issues_count":17,"forks_count":52,"subscribers_count":10,"default_branch":"main","last_synced_at":"2026-08-20T00:54:08.943Z","etag":null,"topics":["ansi","colors","console","terminal","zero-dependency"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/alexeyraspopov.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-09-27T04:22:36.000Z","updated_at":"2026-08-19T15:12:28.000Z","dependencies_parsed_at":"2024-02-26T01:49:17.170Z","dependency_job_id":"33859a2e-db2a-4506-83e3-e9bfa7b6c5b8","html_url":"https://github.com/alexeyraspopov/picocolors","commit_stats":{"total_commits":73,"total_committers":14,"mean_commits":5.214285714285714,"dds":0.547945205479452,"last_synced_commit":"7249f8c5d4825550f70bc1ea98652639933d3bbd"},"previous_names":[],"tags_count":8,"template":false,"template_full_name":null,"purl":"pkg:github/alexeyraspopov/picocolors","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/sbom","scorecard":{"id":181384,"data":{"date":"2025-08-11","repo":{"name":"github.com/alexeyraspopov/picocolors","commit":"0e7c4af2de299dd7bc5916f2bddd151fa2f66740"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":4,"reason":"Found 11/23 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:22","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:26","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:28","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:27","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:43","Info:   0 out of   6 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   5 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/benchmarks.yaml:1","Warn: no topLevel permission defined: .github/workflows/testing.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}}]},"last_synced_at":"2025-08-16T18:55:48.325Z","repository_id":37537050,"created_at":"2025-08-16T18:55:48.325Z","updated_at":"2025-08-16T18:55:48.325Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36784060,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-19T02:00:06.185Z","response_time":54,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"alexeyraspopov","name":"Oleksii","uuid":"858295","kind":"user","description":"Curious developer.","email":"","website":"attitude.dev","location":"Brooklyn, NY","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/858295?u=6918b013b2a838c9b3e3836ebbdc266e8d1bac61\u0026v=4","repositories_count":189,"last_synced_at":"2026-08-13T20:58:38.499Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/alexeyraspopov","funding_links":[],"total_stars":2705,"followers":326,"following":63,"created_at":"2022-11-02T16:20:34.534Z","updated_at":"2026-08-13T20:58:38.628Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov/repositories"},"tags":[{"name":"v1.1.1","sha":"7249f8c5d4825550f70bc1ea98652639933d3bbd","kind":"tag","published_at":"2024-10-16T18:22:21.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.1.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"4e946891bb511accf089f4d52003afbcbc1bb928","kind":"tag","published_at":"2024-09-02T23:46:55.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.1.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.0/manifests"},{"name":"v1.0.1","sha":"5f0c047cd61b51e5d794e3ac1ef700095e9bb6a8","kind":"tag","published_at":"2024-05-14T02:46:08.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.0.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.1/manifests"},{"name":"show","sha":"5f0c047cd61b51e5d794e3ac1ef700095e9bb6a8","kind":"tag","published_at":"2024-05-14T02:46:08.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/show","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/show","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@show","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/show","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/show/manifests"},{"name":"v1.0.0","sha":"228cea3fa726857785b8c069cccc58e9743cd71d","kind":"tag","published_at":"2021-10-13T02:47:45.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.0.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.0/manifests"},{"name":"v0.2.1","sha":"06b6c8683c4b6a5dbbf4daf0742b822ae4a00f57","kind":"tag","published_at":"2021-10-04T15:53:02.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.2.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"5f2afbfa8ebd0e0e597d3791b213bba08473a45e","kind":"tag","published_at":"2021-10-04T04:26:56.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.2.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"0364ab9c066fa7aca213f46bdcde5b2da4822e9b","kind":"tag","published_at":"2021-09-27T17:10:47.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.1.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-08-20T01:16:28.083Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/node-picocolors?arch=source\u0026distro=ubuntu-24.10\u0026repository_url=https://launchpad.net/ubuntu/oracular","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/node-picocolors","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/node-picocolors","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/node-picocolors/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-19T00:51:37.206Z","issues_count":43,"pull_requests_count":81,"avg_time_to_close_issue":16803590.38235294,"avg_time_to_close_pull_request":11452140.940298507,"issues_closed_count":34,"pull_requests_closed_count":67,"pull_request_authors_count":30,"issue_authors_count":30,"avg_comments_per_issue":2.627906976744186,"avg_comments_per_pull_request":2.074074074074074,"merged_pull_requests_count":32,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1676831.0,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":1.5,"past_year_avg_comments_per_pull_request":1.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/issues","maintainers":[{"login":"alexeyraspopov","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alexeyraspopov"},{"login":"denysovkos","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/denysovkos"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/node-picocolors/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/node-picocolors/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/node-picocolors/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/node-picocolors/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/node-picocolors/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/node-picocolors/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.10","url":"https://launchpad.net/ubuntu/oracular","ecosystem":"ubuntu","default":false,"packages_count":38437,"maintainers_count":0,"namespaces_count":4,"keywords_count":1440,"github":"ubuntu","metadata":{"codename":"oracular","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":1557},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.028Z","updated_at":"2026-09-10T05:05:25.290Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/namespaces"}},{"id":13794554,"name":"node-picocolors","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/alexeyraspopov/picocolors","licenses":"isc","normalized_licenses":["ISC"],"repository_url":"https://github.com/alexeyraspopov/picocolors","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-13T16:09:32.030Z","latest_release_published_at":"2026-02-13T16:09:32.030Z","latest_release_number":"1.0.0-4","last_synced_at":"2026-03-13T20:19:03.407Z","created_at":"2026-02-13T16:09:31.812Z","updated_at":"2026-09-07T04:48:24.116Z","registry_url":"https://launchpad.net/ubuntu/+source/node-picocolors","install_command":"apt-get install node-picocolors","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"node-picocolors","standards_version":"4.6.0","maintainer":"Debian Javascript Maintainers \u003cpkg-javascript-devel@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-sequence-nodejs","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":37537050,"uuid":"410740124","full_name":"alexeyraspopov/picocolors","owner":"alexeyraspopov","description":"The tiniest and the fastest library for terminal output formatting with ANSI colors","archived":false,"fork":false,"pushed_at":"2024-11-18T17:46:33.000Z","size":81,"stargazers_count":1751,"open_issues_count":17,"forks_count":52,"subscribers_count":10,"default_branch":"main","last_synced_at":"2026-09-03T18:05:51.391Z","etag":null,"topics":["ansi","colors","console","terminal","zero-dependency"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/alexeyraspopov.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-09-27T04:22:36.000Z","updated_at":"2026-09-01T23:06:11.000Z","dependencies_parsed_at":"2024-02-26T01:49:17.170Z","dependency_job_id":"33859a2e-db2a-4506-83e3-e9bfa7b6c5b8","html_url":"https://github.com/alexeyraspopov/picocolors","commit_stats":{"total_commits":73,"total_committers":14,"mean_commits":5.214285714285714,"dds":0.547945205479452,"last_synced_commit":"7249f8c5d4825550f70bc1ea98652639933d3bbd"},"previous_names":[],"tags_count":8,"template":false,"template_full_name":null,"purl":"pkg:github/alexeyraspopov/picocolors","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/sbom","scorecard":{"id":181384,"data":{"date":"2025-08-11","repo":{"name":"github.com/alexeyraspopov/picocolors","commit":"0e7c4af2de299dd7bc5916f2bddd151fa2f66740"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":4,"reason":"Found 11/23 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:22","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:26","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:28","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:27","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:43","Info:   0 out of   6 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   5 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/benchmarks.yaml:1","Warn: no topLevel permission defined: .github/workflows/testing.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}}]},"last_synced_at":"2025-08-16T18:55:48.325Z","repository_id":37537050,"created_at":"2025-08-16T18:55:48.325Z","updated_at":"2025-08-16T18:55:48.325Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":336071963,"owners_count":37020715,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-04T02:00:06.169Z","response_time":115,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"alexeyraspopov","name":"Oleksii","uuid":"858295","kind":"user","description":"Curious developer.","email":"","website":"attitude.dev","location":"Brooklyn, NY","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/858295?u=6918b013b2a838c9b3e3836ebbdc266e8d1bac61\u0026v=4","repositories_count":189,"last_synced_at":"2026-09-04T21:43:48.946Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/alexeyraspopov","funding_links":[],"total_stars":2716,"followers":326,"following":63,"created_at":"2022-11-02T16:20:34.534Z","updated_at":"2026-09-04T21:43:48.956Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov/repositories"},"tags":[{"name":"v1.1.1","sha":"7249f8c5d4825550f70bc1ea98652639933d3bbd","kind":"tag","published_at":"2024-10-16T18:22:21.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.1.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"4e946891bb511accf089f4d52003afbcbc1bb928","kind":"tag","published_at":"2024-09-02T23:46:55.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.1.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.0/manifests"},{"name":"v1.0.1","sha":"5f0c047cd61b51e5d794e3ac1ef700095e9bb6a8","kind":"tag","published_at":"2024-05-14T02:46:08.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.0.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.1/manifests"},{"name":"show","sha":"5f0c047cd61b51e5d794e3ac1ef700095e9bb6a8","kind":"tag","published_at":"2024-05-14T02:46:08.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/show","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/show","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@show","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/show","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/show/manifests"},{"name":"v1.0.0","sha":"228cea3fa726857785b8c069cccc58e9743cd71d","kind":"tag","published_at":"2021-10-13T02:47:45.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.0.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.0/manifests"},{"name":"v0.2.1","sha":"06b6c8683c4b6a5dbbf4daf0742b822ae4a00f57","kind":"tag","published_at":"2021-10-04T15:53:02.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.2.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"5f2afbfa8ebd0e0e597d3791b213bba08473a45e","kind":"tag","published_at":"2021-10-04T04:26:56.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.2.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"0364ab9c066fa7aca213f46bdcde5b2da4822e9b","kind":"tag","published_at":"2021-09-27T17:10:47.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.1.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-09-07T04:48:24.116Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":0.7232137983734512,"forks_count":1.6756727252879209,"docker_downloads_count":null,"average":0.599721630915343},"purl":"pkg:deb/ubuntu/node-picocolors?arch=source\u0026distro=ubuntu-23.10\u0026repository_url=https://launchpad.net/ubuntu/mantic","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/node-picocolors","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/node-picocolors","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/node-picocolors/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-06T19:30:51.192Z","issues_count":43,"pull_requests_count":81,"avg_time_to_close_issue":16803590.38235294,"avg_time_to_close_pull_request":11452140.940298507,"issues_closed_count":34,"pull_requests_closed_count":67,"pull_request_authors_count":30,"issue_authors_count":30,"avg_comments_per_issue":2.627906976744186,"avg_comments_per_pull_request":2.0864197530864197,"merged_pull_requests_count":32,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1676831.0,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":1.5,"past_year_avg_comments_per_pull_request":1.1111111111111112,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/issues","maintainers":[{"login":"alexeyraspopov","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alexeyraspopov"},{"login":"denysovkos","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/denysovkos"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/node-picocolors/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/node-picocolors/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/node-picocolors/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/node-picocolors/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/node-picocolors/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/node-picocolors/codemeta","maintainers":[],"registry":{"name":"ubuntu-23.10","url":"https://launchpad.net/ubuntu/mantic","ecosystem":"ubuntu","default":false,"packages_count":36642,"maintainers_count":0,"namespaces_count":4,"keywords_count":2211,"github":"ubuntu","metadata":{"codename":"mantic","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":1541},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.636Z","updated_at":"2026-09-10T05:05:55.540Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/namespaces"}},{"id":5003778,"name":"org.webjars.npm:picocolors","ecosystem":"maven","description":"WebJar for picocolors","homepage":"https://www.webjars.org","licenses":"ISC","normalized_licenses":["ISC"],"repository_url":"https://github.com/alexeyraspopov/picocolors","keywords_array":[],"namespace":"org.webjars.npm","versions_count":5,"first_release_published_at":"2021-10-05T07:56:47.000Z","latest_release_published_at":"2024-10-20T04:18:07.000Z","latest_release_number":"1.1.1","last_synced_at":"2026-09-10T21:32:04.169Z","created_at":"2022-07-27T11:05:36.421Z","updated_at":"2026-09-10T21:32:04.169Z","registry_url":"https://central.sonatype.com/artifact/org.webjars.npm/picocolors/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.webjars.npm/picocolors/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":37537050,"uuid":"410740124","full_name":"alexeyraspopov/picocolors","owner":"alexeyraspopov","description":"The tiniest and the fastest library for terminal output formatting with ANSI colors","archived":false,"fork":false,"pushed_at":"2024-11-18T17:46:33.000Z","size":81,"stargazers_count":1751,"open_issues_count":17,"forks_count":52,"subscribers_count":10,"default_branch":"main","last_synced_at":"2026-09-03T18:05:51.391Z","etag":null,"topics":["ansi","colors","console","terminal","zero-dependency"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/alexeyraspopov.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-09-27T04:22:36.000Z","updated_at":"2026-09-01T23:06:11.000Z","dependencies_parsed_at":"2024-02-26T01:49:17.170Z","dependency_job_id":"33859a2e-db2a-4506-83e3-e9bfa7b6c5b8","html_url":"https://github.com/alexeyraspopov/picocolors","commit_stats":{"total_commits":73,"total_committers":14,"mean_commits":5.214285714285714,"dds":0.547945205479452,"last_synced_commit":"7249f8c5d4825550f70bc1ea98652639933d3bbd"},"previous_names":[],"tags_count":8,"template":false,"template_full_name":null,"purl":"pkg:github/alexeyraspopov/picocolors","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/sbom","scorecard":{"id":181384,"data":{"date":"2025-08-11","repo":{"name":"github.com/alexeyraspopov/picocolors","commit":"0e7c4af2de299dd7bc5916f2bddd151fa2f66740"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":4,"reason":"Found 11/23 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:22","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:26","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:28","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:27","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:43","Info:   0 out of   6 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   5 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/benchmarks.yaml:1","Warn: no topLevel permission defined: .github/workflows/testing.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}}]},"last_synced_at":"2025-08-16T18:55:48.325Z","repository_id":37537050,"created_at":"2025-08-16T18:55:48.325Z","updated_at":"2025-08-16T18:55:48.325Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":336071963,"owners_count":37020715,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-04T02:00:06.169Z","response_time":115,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"alexeyraspopov","name":"Oleksii","uuid":"858295","kind":"user","description":"Curious developer.","email":"","website":"attitude.dev","location":"Brooklyn, NY","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/858295?u=6918b013b2a838c9b3e3836ebbdc266e8d1bac61\u0026v=4","repositories_count":189,"last_synced_at":"2026-09-04T21:43:48.946Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/alexeyraspopov","funding_links":[],"total_stars":2716,"followers":326,"following":63,"created_at":"2022-11-02T16:20:34.534Z","updated_at":"2026-09-04T21:43:48.956Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov/repositories"},"tags":[{"name":"v1.1.1","sha":"7249f8c5d4825550f70bc1ea98652639933d3bbd","kind":"tag","published_at":"2024-10-16T18:22:21.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.1.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"4e946891bb511accf089f4d52003afbcbc1bb928","kind":"tag","published_at":"2024-09-02T23:46:55.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.1.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.0/manifests"},{"name":"v1.0.1","sha":"5f0c047cd61b51e5d794e3ac1ef700095e9bb6a8","kind":"tag","published_at":"2024-05-14T02:46:08.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.0.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.1/manifests"},{"name":"show","sha":"5f0c047cd61b51e5d794e3ac1ef700095e9bb6a8","kind":"tag","published_at":"2024-05-14T02:46:08.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/show","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/show","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@show","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/show","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/show/manifests"},{"name":"v1.0.0","sha":"228cea3fa726857785b8c069cccc58e9743cd71d","kind":"tag","published_at":"2021-10-13T02:47:45.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.0.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.0/manifests"},{"name":"v0.2.1","sha":"06b6c8683c4b6a5dbbf4daf0742b822ae4a00f57","kind":"tag","published_at":"2021-10-04T15:53:02.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.2.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"5f2afbfa8ebd0e0e597d3791b213bba08473a45e","kind":"tag","published_at":"2021-10-04T04:26:56.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.2.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"0364ab9c066fa7aca213f46bdcde5b2da4822e9b","kind":"tag","published_at":"2021-09-27T17:10:47.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.1.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-09-10T05:06:29.381Z","dependent_packages_count":9,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":35.29104332659849,"dependent_packages_count":6.699733476440399,"stargazers_count":12.39705001872273,"forks_count":28.135756808765844,"docker_downloads_count":null,"average":20.630895907631867},"purl":"pkg:maven/org.webjars.npm/picocolors","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.webjars.npm:picocolors","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.webjars.npm:picocolors","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.webjars.npm:picocolors/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-09T21:01:53.134Z","issues_count":43,"pull_requests_count":81,"avg_time_to_close_issue":16803590.38235294,"avg_time_to_close_pull_request":11452140.940298507,"issues_closed_count":34,"pull_requests_closed_count":67,"pull_request_authors_count":30,"issue_authors_count":30,"avg_comments_per_issue":2.627906976744186,"avg_comments_per_pull_request":2.0864197530864197,"merged_pull_requests_count":32,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1676831.0,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":1.5,"past_year_avg_comments_per_pull_request":1.1111111111111112,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/issues","maintainers":[{"login":"alexeyraspopov","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alexeyraspopov"},{"login":"denysovkos","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/denysovkos"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:picocolors/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:picocolors/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:picocolors/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:picocolors/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:picocolors/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:picocolors/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":622836,"maintainers_count":0,"namespaces_count":82695,"keywords_count":37244,"github":"maven-central","metadata":{"funded_packages_count":51590,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-09-11T05:02:29.819Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":1183481,"name":"picocolors","ecosystem":"npm","description":"The tiniest and the fastest library for terminal output formatting with ANSI colors","homepage":"https://github.com/alexeyraspopov/picocolors#readme","licenses":"ISC","normalized_licenses":["ISC"],"repository_url":"https://github.com/alexeyraspopov/picocolors","keywords_array":["terminal","colors","formatting","cli","console"],"namespace":null,"versions_count":9,"first_release_published_at":"2021-09-27T00:33:41.649Z","latest_release_published_at":"2024-10-16T18:20:03.921Z","latest_release_number":"1.1.1","last_synced_at":"2026-09-10T21:32:04.192Z","created_at":"2022-04-08T13:08:44.223Z","updated_at":"2026-09-10T21:32:04.192Z","registry_url":"https://www.npmjs.com/package/picocolors","install_command":"npm install picocolors","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"1.1.1"},"contentPolicy":null},"repo_metadata":{"id":37537050,"uuid":"410740124","full_name":"alexeyraspopov/picocolors","owner":"alexeyraspopov","description":"The tiniest and the fastest library for terminal output formatting with ANSI colors","archived":false,"fork":false,"pushed_at":"2024-11-18T17:46:33.000Z","size":81,"stargazers_count":1751,"open_issues_count":17,"forks_count":52,"subscribers_count":10,"default_branch":"main","last_synced_at":"2026-09-03T18:05:51.391Z","etag":null,"topics":["ansi","colors","console","terminal","zero-dependency"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/alexeyraspopov.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-09-27T04:22:36.000Z","updated_at":"2026-09-01T23:06:11.000Z","dependencies_parsed_at":"2024-02-26T01:49:17.170Z","dependency_job_id":"33859a2e-db2a-4506-83e3-e9bfa7b6c5b8","html_url":"https://github.com/alexeyraspopov/picocolors","commit_stats":{"total_commits":73,"total_committers":14,"mean_commits":5.214285714285714,"dds":0.547945205479452,"last_synced_commit":"7249f8c5d4825550f70bc1ea98652639933d3bbd"},"previous_names":[],"tags_count":8,"template":false,"template_full_name":null,"purl":"pkg:github/alexeyraspopov/picocolors","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/sbom","scorecard":{"id":181384,"data":{"date":"2025-08-11","repo":{"name":"github.com/alexeyraspopov/picocolors","commit":"0e7c4af2de299dd7bc5916f2bddd151fa2f66740"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":4,"reason":"Found 11/23 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:22","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:26","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:28","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:27","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:43","Info:   0 out of   6 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   5 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/benchmarks.yaml:1","Warn: no topLevel permission defined: .github/workflows/testing.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}}]},"last_synced_at":"2025-08-16T18:55:48.325Z","repository_id":37537050,"created_at":"2025-08-16T18:55:48.325Z","updated_at":"2025-08-16T18:55:48.325Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":336071963,"owners_count":37020715,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-04T02:00:06.169Z","response_time":115,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"alexeyraspopov","name":"Oleksii","uuid":"858295","kind":"user","description":"Curious developer.","email":"","website":"attitude.dev","location":"Brooklyn, NY","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/858295?u=6918b013b2a838c9b3e3836ebbdc266e8d1bac61\u0026v=4","repositories_count":189,"last_synced_at":"2026-09-04T21:43:48.946Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/alexeyraspopov","funding_links":[],"total_stars":2716,"followers":326,"following":63,"created_at":"2022-11-02T16:20:34.534Z","updated_at":"2026-09-04T21:43:48.956Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov/repositories"},"tags":[{"name":"v1.1.1","sha":"7249f8c5d4825550f70bc1ea98652639933d3bbd","kind":"tag","published_at":"2024-10-16T18:22:21.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.1.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"4e946891bb511accf089f4d52003afbcbc1bb928","kind":"tag","published_at":"2024-09-02T23:46:55.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.1.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.0/manifests"},{"name":"v1.0.1","sha":"5f0c047cd61b51e5d794e3ac1ef700095e9bb6a8","kind":"tag","published_at":"2024-05-14T02:46:08.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.0.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.1/manifests"},{"name":"show","sha":"5f0c047cd61b51e5d794e3ac1ef700095e9bb6a8","kind":"tag","published_at":"2024-05-14T02:46:08.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/show","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/show","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@show","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/show","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/show/manifests"},{"name":"v1.0.0","sha":"228cea3fa726857785b8c069cccc58e9743cd71d","kind":"tag","published_at":"2021-10-13T02:47:45.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.0.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.0/manifests"},{"name":"v0.2.1","sha":"06b6c8683c4b6a5dbbf4daf0742b822ae4a00f57","kind":"tag","published_at":"2021-10-04T15:53:02.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.2.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"5f2afbfa8ebd0e0e597d3791b213bba08473a45e","kind":"tag","published_at":"2021-10-04T04:26:56.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.2.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"0364ab9c066fa7aca213f46bdcde5b2da4822e9b","kind":"tag","published_at":"2021-09-27T17:10:47.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.1.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-09-09T17:48:38.473Z","dependent_packages_count":3534,"downloads":855181506,"downloads_period":"last-month","dependent_repos_count":2113229,"rankings":{"downloads":0.0034772390065172217,"dependent_repos_count":0.013689917348493001,"dependent_packages_count":0.023984735194559736,"stargazers_count":2.294539666946215,"forks_count":4.320099837829239,"docker_downloads_count":0.007775873053944025,"average":1.1105945448964947},"purl":"pkg:npm/picocolors","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/picocolors","docker_dependents_count":29212,"docker_downloads_count":10535528670,"usage_url":"https://repos.ecosyste.ms/usage/npm/picocolors","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/picocolors/dependencies","status":null,"funding_links":[],"critical":true,"issue_metadata":{"last_synced_at":"2026-09-08T20:31:39.839Z","issues_count":43,"pull_requests_count":81,"avg_time_to_close_issue":16803590.38235294,"avg_time_to_close_pull_request":11452140.940298507,"issues_closed_count":34,"pull_requests_closed_count":67,"pull_request_authors_count":30,"issue_authors_count":30,"avg_comments_per_issue":2.627906976744186,"avg_comments_per_pull_request":2.0864197530864197,"merged_pull_requests_count":32,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1676831.0,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":1.5,"past_year_avg_comments_per_pull_request":1.1111111111111112,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/issues","maintainers":[{"login":"alexeyraspopov","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alexeyraspopov"},{"login":"denysovkos","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/denysovkos"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/picocolors/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/picocolors/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/picocolors/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/picocolors/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/picocolors/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/picocolors/codemeta","maintainers":[{"uuid":"alexeyraspopov","login":"alexeyraspopov","name":null,"email":"oleksii.raspopov@gmail.com","url":null,"packages_count":47,"html_url":"https://www.npmjs.com/~alexeyraspopov","role":null,"created_at":"2022-11-10T15:54:05.902Z","updated_at":"2022-11-10T15:54:05.902Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/alexeyraspopov/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5848296,"maintainers_count":1252086,"namespaces_count":430813,"keywords_count":896120,"github":"npm","metadata":{"funded_packages_count":194004,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-10T05:03:06.062Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":14024840,"name":"@depup/picocolors","ecosystem":"npm","description":"[DepUp] The tiniest and the fastest library for terminal output formatting with ANSI colors","homepage":"https://github.com/alexeyraspopov/picocolors#readme","licenses":"ISC","normalized_licenses":["ISC"],"repository_url":"https://github.com/alexeyraspopov/picocolors","keywords_array":["depup","dependency-bumped","updated-deps","picocolors","terminal","colors","formatting","cli","console"],"namespace":"depup","versions_count":1,"first_release_published_at":"2026-03-09T20:27:03.988Z","latest_release_published_at":"2026-03-09T20:27:03.988Z","latest_release_number":"1.1.1-depup.0","last_synced_at":"2026-09-10T21:32:23.866Z","created_at":"2026-03-11T00:14:08.320Z","updated_at":"2026-09-10T21:32:23.866Z","registry_url":"https://www.npmjs.com/package/@depup/picocolors","install_command":"npm install @depup/picocolors","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"1.1.1-depup.0"},"contentPolicy":null},"repo_metadata":{"id":37537050,"uuid":"410740124","full_name":"alexeyraspopov/picocolors","owner":"alexeyraspopov","description":"The tiniest and the fastest library for terminal output formatting with ANSI colors","archived":false,"fork":false,"pushed_at":"2024-11-18T17:46:33.000Z","size":81,"stargazers_count":1751,"open_issues_count":17,"forks_count":52,"subscribers_count":10,"default_branch":"main","last_synced_at":"2026-09-03T18:05:51.391Z","etag":null,"topics":["ansi","colors","console","terminal","zero-dependency"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/alexeyraspopov.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-09-27T04:22:36.000Z","updated_at":"2026-09-01T23:06:11.000Z","dependencies_parsed_at":"2024-02-26T01:49:17.170Z","dependency_job_id":"33859a2e-db2a-4506-83e3-e9bfa7b6c5b8","html_url":"https://github.com/alexeyraspopov/picocolors","commit_stats":{"total_commits":73,"total_committers":14,"mean_commits":5.214285714285714,"dds":0.547945205479452,"last_synced_commit":"7249f8c5d4825550f70bc1ea98652639933d3bbd"},"previous_names":[],"tags_count":8,"template":false,"template_full_name":null,"purl":"pkg:github/alexeyraspopov/picocolors","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/sbom","scorecard":{"id":181384,"data":{"date":"2025-08-11","repo":{"name":"github.com/alexeyraspopov/picocolors","commit":"0e7c4af2de299dd7bc5916f2bddd151fa2f66740"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":4,"reason":"Found 11/23 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:22","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:26","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:28","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:27","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:43","Info:   0 out of   6 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   5 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/benchmarks.yaml:1","Warn: no topLevel permission defined: .github/workflows/testing.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}}]},"last_synced_at":"2025-08-16T18:55:48.325Z","repository_id":37537050,"created_at":"2025-08-16T18:55:48.325Z","updated_at":"2025-08-16T18:55:48.325Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":336071963,"owners_count":37020715,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-09-04T02:00:06.169Z","response_time":115,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"alexeyraspopov","name":"Oleksii","uuid":"858295","kind":"user","description":"Curious developer.","email":"","website":"attitude.dev","location":"Brooklyn, NY","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/858295?u=6918b013b2a838c9b3e3836ebbdc266e8d1bac61\u0026v=4","repositories_count":189,"last_synced_at":"2026-09-04T21:43:48.946Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/alexeyraspopov","funding_links":[],"total_stars":2716,"followers":326,"following":63,"created_at":"2022-11-02T16:20:34.534Z","updated_at":"2026-09-04T21:43:48.956Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov/repositories"},"tags":[{"name":"v1.1.1","sha":"7249f8c5d4825550f70bc1ea98652639933d3bbd","kind":"tag","published_at":"2024-10-16T18:22:21.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.1.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"4e946891bb511accf089f4d52003afbcbc1bb928","kind":"tag","published_at":"2024-09-02T23:46:55.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.1.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.0/manifests"},{"name":"v1.0.1","sha":"5f0c047cd61b51e5d794e3ac1ef700095e9bb6a8","kind":"tag","published_at":"2024-05-14T02:46:08.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.0.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.1/manifests"},{"name":"show","sha":"5f0c047cd61b51e5d794e3ac1ef700095e9bb6a8","kind":"tag","published_at":"2024-05-14T02:46:08.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/show","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/show","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@show","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/show","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/show/manifests"},{"name":"v1.0.0","sha":"228cea3fa726857785b8c069cccc58e9743cd71d","kind":"tag","published_at":"2021-10-13T02:47:45.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.0.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.0/manifests"},{"name":"v0.2.1","sha":"06b6c8683c4b6a5dbbf4daf0742b822ae4a00f57","kind":"tag","published_at":"2021-10-04T15:53:02.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.2.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"5f2afbfa8ebd0e0e597d3791b213bba08473a45e","kind":"tag","published_at":"2021-10-04T04:26:56.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.2.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"0364ab9c066fa7aca213f46bdcde5b2da4822e9b","kind":"tag","published_at":"2021-09-27T17:10:47.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.1.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-09-09T01:25:38.210Z","dependent_packages_count":0,"downloads":14,"downloads_period":"last-month","dependent_repos_count":0,"rankings":{"downloads":13.122809111773915,"dependent_repos_count":22.512631796629087,"dependent_packages_count":32.43474361860437,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":22.690061509002458},"purl":"pkg:npm/%40depup/picocolors","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/@depup/picocolors","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/@depup/picocolors","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/@depup/picocolors/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-08T20:31:39.839Z","issues_count":43,"pull_requests_count":81,"avg_time_to_close_issue":16803590.38235294,"avg_time_to_close_pull_request":11452140.940298507,"issues_closed_count":34,"pull_requests_closed_count":67,"pull_request_authors_count":30,"issue_authors_count":30,"avg_comments_per_issue":2.627906976744186,"avg_comments_per_pull_request":2.0864197530864197,"merged_pull_requests_count":32,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1676831.0,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":1.5,"past_year_avg_comments_per_pull_request":1.1111111111111112,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/issues","maintainers":[{"login":"alexeyraspopov","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alexeyraspopov"},{"login":"denysovkos","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/denysovkos"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@depup%2Fpicocolors/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@depup%2Fpicocolors/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@depup%2Fpicocolors/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@depup%2Fpicocolors/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@depup%2Fpicocolors/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@depup%2Fpicocolors/codemeta","maintainers":[{"uuid":"chiefmikey","login":"chiefmikey","name":null,"email":"wolfemikl@gmail.com","url":null,"packages_count":2150,"html_url":"https://www.npmjs.com/~chiefmikey","role":null,"created_at":"2026-03-11T00:14:11.865Z","updated_at":"2026-03-11T00:14:11.865Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/chiefmikey/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5848296,"maintainers_count":1252086,"namespaces_count":430813,"keywords_count":896120,"github":"npm","metadata":{"funded_packages_count":194004,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-10T05:03:06.062Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":7408219,"name":"@nyxb/picocolors","ecosystem":"npm","description":"The tiniest and the fastest library for terminal output formatting with ANSI colors","homepage":"https://github.com/alexeyraspopov/picocolors#readme","licenses":"ISC","normalized_licenses":["ISC"],"repository_url":"https://github.com/alexeyraspopov/picocolors","keywords_array":["terminal","colors","formatting","cli","console"],"namespace":"nyxb","versions_count":3,"first_release_published_at":"2023-04-05T17:04:54.183Z","latest_release_published_at":"2023-05-13T15:12:06.398Z","latest_release_number":"1.0.2","last_synced_at":"2026-09-10T21:47:38.209Z","created_at":"2023-04-05T22:06:58.034Z","updated_at":"2026-09-10T21:47:38.209Z","registry_url":"https://www.npmjs.com/package/@nyxb/picocolors","install_command":"npm install @nyxb/picocolors","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"1.0.2"},"contentPolicy":null},"repo_metadata":{"id":37537050,"uuid":"410740124","full_name":"alexeyraspopov/picocolors","owner":"alexeyraspopov","description":"The tiniest and the fastest library for terminal output formatting with ANSI colors","archived":false,"fork":false,"pushed_at":"2024-11-18T17:46:33.000Z","size":81,"stargazers_count":1748,"open_issues_count":17,"forks_count":52,"subscribers_count":10,"default_branch":"main","last_synced_at":"2026-08-27T06:17:15.561Z","etag":null,"topics":["ansi","colors","console","terminal","zero-dependency"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/alexeyraspopov.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-09-27T04:22:36.000Z","updated_at":"2026-08-24T07:48:21.000Z","dependencies_parsed_at":"2024-02-26T01:49:17.170Z","dependency_job_id":"33859a2e-db2a-4506-83e3-e9bfa7b6c5b8","html_url":"https://github.com/alexeyraspopov/picocolors","commit_stats":{"total_commits":73,"total_committers":14,"mean_commits":5.214285714285714,"dds":0.547945205479452,"last_synced_commit":"7249f8c5d4825550f70bc1ea98652639933d3bbd"},"previous_names":[],"tags_count":8,"template":false,"template_full_name":null,"purl":"pkg:github/alexeyraspopov/picocolors","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/sbom","scorecard":{"id":181384,"data":{"date":"2025-08-11","repo":{"name":"github.com/alexeyraspopov/picocolors","commit":"0e7c4af2de299dd7bc5916f2bddd151fa2f66740"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":4,"reason":"Found 11/23 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:22","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:26","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:28","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:27","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:43","Info:   0 out of   6 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   5 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/benchmarks.yaml:1","Warn: no topLevel permission defined: .github/workflows/testing.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}}]},"last_synced_at":"2025-08-16T18:55:48.325Z","repository_id":37537050,"created_at":"2025-08-16T18:55:48.325Z","updated_at":"2025-08-16T18:55:48.325Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36939390,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-27T02:00:07.166Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"alexeyraspopov","name":"Oleksii","uuid":"858295","kind":"user","description":"Curious developer.","email":"","website":"attitude.dev","location":"Brooklyn, NY","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/858295?u=6918b013b2a838c9b3e3836ebbdc266e8d1bac61\u0026v=4","repositories_count":189,"last_synced_at":"2026-08-28T01:14:35.376Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/alexeyraspopov","funding_links":[],"total_stars":2713,"followers":326,"following":63,"created_at":"2022-11-02T16:20:34.534Z","updated_at":"2026-08-28T01:14:35.394Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov/repositories"},"tags":[{"name":"v1.1.1","sha":"7249f8c5d4825550f70bc1ea98652639933d3bbd","kind":"tag","published_at":"2024-10-16T18:22:21.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.1.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"4e946891bb511accf089f4d52003afbcbc1bb928","kind":"tag","published_at":"2024-09-02T23:46:55.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.1.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.0/manifests"},{"name":"v1.0.1","sha":"5f0c047cd61b51e5d794e3ac1ef700095e9bb6a8","kind":"tag","published_at":"2024-05-14T02:46:08.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.0.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.1/manifests"},{"name":"show","sha":"5f0c047cd61b51e5d794e3ac1ef700095e9bb6a8","kind":"tag","published_at":"2024-05-14T02:46:08.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/show","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/show","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@show","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/show","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/show/manifests"},{"name":"v1.0.0","sha":"228cea3fa726857785b8c069cccc58e9743cd71d","kind":"tag","published_at":"2021-10-13T02:47:45.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.0.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.0/manifests"},{"name":"v0.2.1","sha":"06b6c8683c4b6a5dbbf4daf0742b822ae4a00f57","kind":"tag","published_at":"2021-10-04T15:53:02.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.2.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"5f2afbfa8ebd0e0e597d3791b213bba08473a45e","kind":"tag","published_at":"2021-10-04T04:26:56.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.2.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"0364ab9c066fa7aca213f46bdcde5b2da4822e9b","kind":"tag","published_at":"2021-09-27T17:10:47.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.1.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-09-02T06:47:48.252Z","dependent_packages_count":17,"downloads":39,"downloads_period":"last-month","dependent_repos_count":2,"rankings":{"downloads":14.273518452745934,"dependent_repos_count":7.676908347114632,"dependent_packages_count":1.358356666431012,"stargazers_count":2.4008354258407487,"forks_count":4.4940873868007225,"docker_downloads_count":null,"average":6.04074125578661},"purl":"pkg:npm/%40nyxb/picocolors","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/@nyxb/picocolors","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/@nyxb/picocolors","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/@nyxb/picocolors/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-09-01T16:35:10.156Z","issues_count":43,"pull_requests_count":81,"avg_time_to_close_issue":16803590.38235294,"avg_time_to_close_pull_request":11452140.940298507,"issues_closed_count":34,"pull_requests_closed_count":67,"pull_request_authors_count":30,"issue_authors_count":30,"avg_comments_per_issue":2.627906976744186,"avg_comments_per_pull_request":2.074074074074074,"merged_pull_requests_count":32,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1676831.0,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":1.5,"past_year_avg_comments_per_pull_request":1.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/issues","maintainers":[{"login":"alexeyraspopov","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alexeyraspopov"},{"login":"denysovkos","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/denysovkos"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@nyxb%2Fpicocolors/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@nyxb%2Fpicocolors/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@nyxb%2Fpicocolors/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@nyxb%2Fpicocolors/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@nyxb%2Fpicocolors/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@nyxb%2Fpicocolors/codemeta","maintainers":[{"uuid":"dennisollhoff","login":"dennisollhoff","name":null,"email":"contact@nyxb.xyz","url":null,"packages_count":335,"html_url":"https://www.npmjs.com/~dennisollhoff","role":null,"created_at":"2023-04-05T22:26:45.447Z","updated_at":"2023-04-05T22:26:45.447Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/dennisollhoff/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5848296,"maintainers_count":1252086,"namespaces_count":430813,"keywords_count":896120,"github":"npm","metadata":{"funded_packages_count":194004,"rate_limit":2},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-09-10T05:03:06.062Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":13954896,"name":"node-picocolors","ecosystem":"guix","description":"Small and fast ANSI colors terminal output formatting library","homepage":"https://github.com/alexeyraspopov/picocolors","licenses":"isc","normalized_licenses":["ISC"],"repository_url":"https://github.com/alexeyraspopov/picocolors","keywords_array":[],"namespace":null,"versions_count":1,"first_release_published_at":"2026-03-02T20:23:17.468Z","latest_release_published_at":"2026-03-02T20:23:17.468Z","latest_release_number":"1.1.1","last_synced_at":"2026-04-27T16:55:26.250Z","created_at":"2026-03-02T20:23:17.289Z","updated_at":"2026-08-29T21:37:53.844Z","registry_url":"https://packages.guix.gnu.org/packages/node-picocolors/1.1.1/","install_command":"guix install node-picocolors","documentation_url":"https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/node-xyz.scm#n2669","metadata":{"location":"gnu/packages/node-xyz.scm:2669","variable_name":"node-picocolors"},"repo_metadata":{"id":37537050,"uuid":"410740124","full_name":"alexeyraspopov/picocolors","owner":"alexeyraspopov","description":"The tiniest and the fastest library for terminal output formatting with ANSI colors","archived":false,"fork":false,"pushed_at":"2024-11-18T17:46:33.000Z","size":81,"stargazers_count":1748,"open_issues_count":17,"forks_count":52,"subscribers_count":10,"default_branch":"main","last_synced_at":"2026-08-27T06:17:15.561Z","etag":null,"topics":["ansi","colors","console","terminal","zero-dependency"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/alexeyraspopov.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-09-27T04:22:36.000Z","updated_at":"2026-08-24T07:48:21.000Z","dependencies_parsed_at":"2024-02-26T01:49:17.170Z","dependency_job_id":"33859a2e-db2a-4506-83e3-e9bfa7b6c5b8","html_url":"https://github.com/alexeyraspopov/picocolors","commit_stats":{"total_commits":73,"total_committers":14,"mean_commits":5.214285714285714,"dds":0.547945205479452,"last_synced_commit":"7249f8c5d4825550f70bc1ea98652639933d3bbd"},"previous_names":[],"tags_count":8,"template":false,"template_full_name":null,"purl":"pkg:github/alexeyraspopov/picocolors","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/sbom","scorecard":{"id":181384,"data":{"date":"2025-08-11","repo":{"name":"github.com/alexeyraspopov/picocolors","commit":"0e7c4af2de299dd7bc5916f2bddd151fa2f66740"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":4,"reason":"Found 11/23 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:22","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:26","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:28","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:27","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:43","Info:   0 out of   6 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   5 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/benchmarks.yaml:1","Warn: no topLevel permission defined: .github/workflows/testing.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}}]},"last_synced_at":"2025-08-16T18:55:48.325Z","repository_id":37537050,"created_at":"2025-08-16T18:55:48.325Z","updated_at":"2025-08-16T18:55:48.325Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36939390,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-27T02:00:07.166Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"alexeyraspopov","name":"Oleksii","uuid":"858295","kind":"user","description":"Curious developer.","email":"","website":"attitude.dev","location":"Brooklyn, NY","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/858295?u=6918b013b2a838c9b3e3836ebbdc266e8d1bac61\u0026v=4","repositories_count":189,"last_synced_at":"2026-08-28T01:14:35.376Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/alexeyraspopov","funding_links":[],"total_stars":2713,"followers":326,"following":63,"created_at":"2022-11-02T16:20:34.534Z","updated_at":"2026-08-28T01:14:35.394Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov/repositories"},"tags":[{"name":"v1.1.1","sha":"7249f8c5d4825550f70bc1ea98652639933d3bbd","kind":"tag","published_at":"2024-10-16T18:22:21.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.1.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"4e946891bb511accf089f4d52003afbcbc1bb928","kind":"tag","published_at":"2024-09-02T23:46:55.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.1.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.0/manifests"},{"name":"v1.0.1","sha":"5f0c047cd61b51e5d794e3ac1ef700095e9bb6a8","kind":"tag","published_at":"2024-05-14T02:46:08.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.0.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.1/manifests"},{"name":"show","sha":"5f0c047cd61b51e5d794e3ac1ef700095e9bb6a8","kind":"tag","published_at":"2024-05-14T02:46:08.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/show","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/show","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@show","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/show","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/show/manifests"},{"name":"v1.0.0","sha":"228cea3fa726857785b8c069cccc58e9743cd71d","kind":"tag","published_at":"2021-10-13T02:47:45.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.0.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.0/manifests"},{"name":"v0.2.1","sha":"06b6c8683c4b6a5dbbf4daf0742b822ae4a00f57","kind":"tag","published_at":"2021-10-04T15:53:02.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.2.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"5f2afbfa8ebd0e0e597d3791b213bba08473a45e","kind":"tag","published_at":"2021-10-04T04:26:56.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.2.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"0364ab9c066fa7aca213f46bdcde5b2da4822e9b","kind":"tag","published_at":"2021-09-27T17:10:47.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.1.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-08-29T21:37:53.844Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:guix/node-picocolors","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/guix/node-picocolors","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/guix/node-picocolors","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/guix/node-picocolors/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-29T07:03:51.021Z","issues_count":43,"pull_requests_count":81,"avg_time_to_close_issue":16803590.38235294,"avg_time_to_close_pull_request":11452140.940298507,"issues_closed_count":34,"pull_requests_closed_count":67,"pull_request_authors_count":30,"issue_authors_count":30,"avg_comments_per_issue":2.627906976744186,"avg_comments_per_pull_request":2.074074074074074,"merged_pull_requests_count":32,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1676831.0,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":1.5,"past_year_avg_comments_per_pull_request":1.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/issues","maintainers":[{"login":"alexeyraspopov","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alexeyraspopov"},{"login":"denysovkos","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/denysovkos"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/node-picocolors/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/node-picocolors/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/node-picocolors/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/node-picocolors/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/node-picocolors/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages/node-picocolors/codemeta","maintainers":[],"registry":{"name":"guix","url":"https://guix.gnu.org","ecosystem":"guix","default":true,"packages_count":32496,"maintainers_count":0,"namespaces_count":0,"keywords_count":1654,"github":"guix-mirror","metadata":{"funded_packages_count":1422},"icon_url":"https://github.com/guix-mirror.png","created_at":"2026-03-02T16:23:46.981Z","updated_at":"2026-09-10T05:05:29.870Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/guix/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/guix/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/guix/namespaces"}},{"id":11667080,"name":"github.com/alexeyraspopov/picocolors","ecosystem":"go","description":null,"homepage":null,"licenses":"isc","normalized_licenses":["ISC"],"repository_url":"https://github.com/alexeyraspopov/picocolors","keywords_array":[],"namespace":null,"versions_count":7,"first_release_published_at":"2021-09-27T17:10:29.000Z","latest_release_published_at":"2024-10-16T18:21:55.000Z","latest_release_number":"v1.1.1","last_synced_at":"2026-09-11T01:15:22.233Z","created_at":"2025-05-21T10:09:18.977Z","updated_at":"2026-09-11T01:15:22.233Z","registry_url":"https://pkg.go.dev/github.com/alexeyraspopov/picocolors","install_command":"go get github.com/alexeyraspopov/picocolors","documentation_url":"https://pkg.go.dev/github.com/alexeyraspopov/picocolors#section-documentation","metadata":{},"repo_metadata":{"id":37537050,"uuid":"410740124","full_name":"alexeyraspopov/picocolors","owner":"alexeyraspopov","description":"The tiniest and the fastest library for terminal output formatting with ANSI colors","archived":false,"fork":false,"pushed_at":"2024-11-18T17:46:33.000Z","size":81,"stargazers_count":1748,"open_issues_count":17,"forks_count":52,"subscribers_count":10,"default_branch":"main","last_synced_at":"2026-08-27T06:17:15.561Z","etag":null,"topics":["ansi","colors","console","terminal","zero-dependency"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/alexeyraspopov.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-09-27T04:22:36.000Z","updated_at":"2026-08-24T07:48:21.000Z","dependencies_parsed_at":"2024-02-26T01:49:17.170Z","dependency_job_id":"33859a2e-db2a-4506-83e3-e9bfa7b6c5b8","html_url":"https://github.com/alexeyraspopov/picocolors","commit_stats":{"total_commits":73,"total_committers":14,"mean_commits":5.214285714285714,"dds":0.547945205479452,"last_synced_commit":"7249f8c5d4825550f70bc1ea98652639933d3bbd"},"previous_names":[],"tags_count":8,"template":false,"template_full_name":null,"purl":"pkg:github/alexeyraspopov/picocolors","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/sbom","scorecard":{"id":181384,"data":{"date":"2025-08-11","repo":{"name":"github.com/alexeyraspopov/picocolors","commit":"0e7c4af2de299dd7bc5916f2bddd151fa2f66740"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.8,"checks":[{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Code-Review","score":4,"reason":"Found 11/23 approved changesets -- score normalized to 4","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/benchmarks.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/alexeyraspopov/picocolors/testing.yaml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:22","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:26","Warn: npmCommand not pinned by hash: .github/workflows/benchmarks.yaml:28","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:27","Warn: npmCommand not pinned by hash: .github/workflows/testing.yaml:43","Info:   0 out of   6 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   5 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/benchmarks.yaml:1","Warn: no topLevel permission defined: .github/workflows/testing.yaml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 22 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}}]},"last_synced_at":"2025-08-16T18:55:48.325Z","repository_id":37537050,"created_at":"2025-08-16T18:55:48.325Z","updated_at":"2025-08-16T18:55:48.325Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36939390,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-27T02:00:07.166Z","response_time":96,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"alexeyraspopov","name":"Oleksii","uuid":"858295","kind":"user","description":"Curious developer.","email":"","website":"attitude.dev","location":"Brooklyn, NY","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/858295?u=6918b013b2a838c9b3e3836ebbdc266e8d1bac61\u0026v=4","repositories_count":189,"last_synced_at":"2026-08-21T00:54:15.055Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/alexeyraspopov","funding_links":[],"total_stars":2710,"followers":326,"following":63,"created_at":"2022-11-02T16:20:34.534Z","updated_at":"2026-08-21T00:54:15.092Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/alexeyraspopov/repositories"},"tags":[{"name":"v1.1.1","sha":"7249f8c5d4825550f70bc1ea98652639933d3bbd","kind":"tag","published_at":"2024-10-16T18:22:21.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.1.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"4e946891bb511accf089f4d52003afbcbc1bb928","kind":"tag","published_at":"2024-09-02T23:46:55.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.1.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.1.0/manifests"},{"name":"v1.0.1","sha":"5f0c047cd61b51e5d794e3ac1ef700095e9bb6a8","kind":"tag","published_at":"2024-05-14T02:46:08.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.0.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.1/manifests"},{"name":"show","sha":"5f0c047cd61b51e5d794e3ac1ef700095e9bb6a8","kind":"tag","published_at":"2024-05-14T02:46:08.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/show","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/show","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@show","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/show","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/show/manifests"},{"name":"v1.0.0","sha":"228cea3fa726857785b8c069cccc58e9743cd71d","kind":"tag","published_at":"2021-10-13T02:47:45.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v1.0.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v1.0.0/manifests"},{"name":"v0.2.1","sha":"06b6c8683c4b6a5dbbf4daf0742b822ae4a00f57","kind":"tag","published_at":"2021-10-04T15:53:02.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.2.1","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"5f2afbfa8ebd0e0e597d3791b213bba08473a45e","kind":"tag","published_at":"2021-10-04T04:26:56.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.2.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"0364ab9c066fa7aca213f46bdcde5b2da4822e9b","kind":"tag","published_at":"2021-09-27T17:10:47.000Z","download_url":"https://codeload.github.com/alexeyraspopov/picocolors/tar.gz/v0.1.0","html_url":"https://github.com/alexeyraspopov/picocolors/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/alexeyraspopov/picocolors@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/tags/v0.1.0/manifests"}]},"repo_metadata_updated_at":"2026-08-27T14:21:49.200Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.834942938074769,"dependent_packages_count":5.468039285852868,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":5.651491111963818},"purl":"pkg:golang/github.com/alexeyraspopov/picocolors","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/alexeyraspopov/picocolors","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/alexeyraspopov/picocolors","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/alexeyraspopov/picocolors/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-08-27T06:01:26.733Z","issues_count":43,"pull_requests_count":81,"avg_time_to_close_issue":16803590.38235294,"avg_time_to_close_pull_request":11452140.940298507,"issues_closed_count":34,"pull_requests_closed_count":67,"pull_request_authors_count":30,"issue_authors_count":30,"avg_comments_per_issue":2.627906976744186,"avg_comments_per_pull_request":2.074074074074074,"merged_pull_requests_count":32,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1676831.0,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":1.5,"past_year_avg_comments_per_pull_request":1.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/issues","maintainers":[{"login":"alexeyraspopov","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alexeyraspopov"},{"login":"denysovkos","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/denysovkos"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Falexeyraspopov%2Fpicocolors/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Falexeyraspopov%2Fpicocolors/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Falexeyraspopov%2Fpicocolors/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Falexeyraspopov%2Fpicocolors/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Falexeyraspopov%2Fpicocolors/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Falexeyraspopov%2Fpicocolors/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2313267,"maintainers_count":0,"namespaces_count":840996,"keywords_count":127476,"github":"golang","metadata":{"funded_packages_count":80046,"sync_missing_packages_cursor":{"timestamp":"2026-09-10T00:02:38.001811Z","path":"github.com/tm-acode/dependabot_core","version":"v0.27.11"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-09-11T05:01:08.531Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}}],"commits":{"id":10656,"full_name":"alexeyraspopov/picocolors","default_branch":"main","total_commits":74,"total_committers":12,"total_bot_commits":0,"total_bot_committers":0,"mean_commits":6.166666666666667,"dds":0.41891891891891897,"past_year_total_commits":0,"past_year_total_committers":0,"past_year_total_bot_commits":0,"past_year_total_bot_committers":0,"past_year_mean_commits":0.0,"past_year_dds":0.0,"last_synced_at":"2026-09-10T21:31:38.709Z","last_synced_commit":"0e7c4af2de299dd7bc5916f2bddd151fa2f66740","created_at":"2023-03-07T11:08:41.289Z","updated_at":"2026-09-10T21:31:38.693Z","committers":[{"name":"Alexey Raspopov","email":"alexey.raspopov@datarobot.com","login":"alexeyraspopov","count":43},{"name":"Andrey Sitnik","email":"andrey@sitnik.ru","login":"ai","count":20},{"name":"Hamir Mahal","email":"hamirmahal@gmail.com","login":"hamirmahal","count":2},{"name":"heerim","email":"devheerim@gmail.com","login":"Henry-Hong","count":1},{"name":"Vadym Borodin","email":"borodean@gmail.com","login":"borodean","count":1},{"name":"Usman Yunusov","email":"usman.iunusov@gmail.com","login":"usmanyunusov","count":1},{"name":"Marco Carvalho","email":"marcolucio27@gmail.com","login":"marco-carvalho","count":1},{"name":"Maciej Sykuła","email":"MHase","login":"MHase","count":1},{"name":"Hugo Alliaume","email":"hugo@alliau.me","login":"Kocal","count":1},{"name":"Hiroshi Ogawa","email":"hi.ogawa.zz@gmail.com","login":"hi-ogawa","count":1},{"name":"Chooks22","email":"49726759+Choooks22","login":"Choooks22","count":1},{"name":"Anton Verinov","email":"github@zemlan.in","login":"zemlanin","count":1}],"past_year_committers":[],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-09-11T00:00:07.522Z","repositories_count":7218921,"commits_count":1079424022,"contributors_count":47592244,"owners_count":1442771,"committers_count":3491970,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"alexeyraspopov/picocolors","html_url":"https://github.com/alexeyraspopov/picocolors","last_synced_at":"2026-09-10T21:31:49.766Z","status":null,"issues_count":43,"pull_requests_count":81,"avg_time_to_close_issue":16803590.38235294,"avg_time_to_close_pull_request":11452140.940298507,"issues_closed_count":34,"pull_requests_closed_count":67,"pull_request_authors_count":30,"issue_authors_count":30,"avg_comments_per_issue":2.627906976744186,"avg_comments_per_pull_request":2.0864197530864197,"merged_pull_requests_count":32,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":2,"past_year_pull_requests_count":9,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1676831.0,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":3,"past_year_pull_request_authors_count":6,"past_year_issue_authors_count":2,"past_year_avg_comments_per_issue":1.5,"past_year_avg_comments_per_pull_request":1.1111111111111112,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"created_at":"2023-05-16T15:33:09.648Z","updated_at":"2026-09-10T21:31:49.767Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/alexeyraspopov%2Fpicocolors/issues","issue_labels_count":{"table":{}},"pull_request_labels_count":{"table":{}},"issue_author_associations_count":{"table":{"NONE":32,"CONTRIBUTOR":11}},"pull_request_author_associations_count":{"table":{"NONE":42,"CONTRIBUTOR":22,"OWNER":16,"COLLABORATOR":1}},"issue_authors":{"table":{"ai":9,"hamirmahal":2,"anko":2,"alexeyten":2,"SuperchupuDev":2,"kibertoad":2,"kytta":1,"inoyakaigor":1,"elturpin":1,"PRR24":1,"danBamikiya":1,"jonschlinkert":1,"timdeschryver":1,"mrozio13pl":1,"TheArcaneBrony":1,"vincesp":1,"nathanbabcock":1,"43081j":1,"walidmokhtari":1,"nicolo-ribaudo":1,"MrFoxPro":1,"akorchyn":1,"shinebayar-g":1,"hi-ogawa":1,"ishon19":1,"benmccann":1,"idleberg":1,"escapedcat":1,"dy":1,"ematipico":1}},"pull_request_authors":{"table":{"alexeyraspopov":16,"ai":10,"43081j":8,"prantlf":5,"hamirmahal":4,"alexeyten":4,"hyperz111":3,"Henry-Hong":3,"Kocal":2,"hi-ogawa":2,"carlonoelle":2,"wyf027":2,"marifcelik":2,"valadaptive":2,"alchazov":1,"usmanyunusov":1,"jorgebucaran":1,"Hashim1999164":1,"Chooks22":1,"borodean":1,"zemlanin":1,"marco-carvalho":1,"AsyncBanana":1,"MHase":1,"subzey":1,"denysovkos":1,"xxiaoxiong":1,"R-Rajaneesh":1,"nathanbabcock":1,"lete114":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-09-11T00:00:06.637Z","repositories_count":17119468,"issues_count":45292275,"pull_requests_count":142535392,"authors_count":11706834,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{}},"past_year_pull_request_labels_count":{"table":{}},"past_year_issue_author_associations_count":{"table":{"NONE":2}},"past_year_pull_request_author_associations_count":{"table":{"NONE":9}},"past_year_issue_authors":{"table":{"ematipico":1,"TheArcaneBrony":1}},"past_year_pull_request_authors":{"table":{"prantlf":2,"valadaptive":2,"wyf027":2,"Hashim1999164":1,"hyperz111":1,"xxiaoxiong":1}},"maintainers":[{"table":{"login":"alexeyraspopov","count":16,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alexeyraspopov"}},{"table":{"login":"denysovkos","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/denysovkos"}}],"active_maintainers":[]}},"events":{"total":{"CreateEvent":3,"DeleteEvent":3,"ForkEvent":4,"IssueCommentEvent":31,"IssuesEvent":11,"PullRequestEvent":16,"PullRequestReviewCommentEvent":11,"PullRequestReviewEvent":10,"PushEvent":6,"ReleaseEvent":1,"WatchEvent":275},"last_year":{"IssueCommentEvent":6,"IssuesEvent":1,"PullRequestEvent":1,"WatchEvent":31}},"keywords":["ansi","colors","console","terminal","zero-dependency"],"dependencies":[{"ecosystem":"actions","filepath":".github/workflows/benchmarks.yaml","sha":null,"kind":"manifest","created_at":"2023-02-09T19:15:40.987Z","updated_at":"2023-02-09T19:15:40.987Z","repository_link":"https://github.com/alexeyraspopov/picocolors/blob/main/.github/workflows/benchmarks.yaml","dependencies":[{"id":7502794228,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7502794229,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/testing.yaml","sha":null,"kind":"manifest","created_at":"2023-02-09T19:15:40.992Z","updated_at":"2023-02-09T19:15:40.992Z","repository_link":"https://github.com/alexeyraspopov/picocolors/blob/main/.github/workflows/testing.yaml","dependencies":[{"id":7502794230,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":7502794231,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"npm","filepath":"package.json","sha":null,"kind":"manifest","created_at":"2023-02-09T19:15:40.997Z","updated_at":"2023-02-09T19:15:40.997Z","repository_link":"https://github.com/alexeyraspopov/picocolors/blob/main/package.json","dependencies":[{"id":7502794232,"package_name":"ansi-colors","ecosystem":"npm","requirements":"^4.1.1","direct":true,"kind":"development","optional":false},{"id":7502794233,"package_name":"benchmark","ecosystem":"npm","requirements":"^2.1.4","direct":true,"kind":"development","optional":false},{"id":7502794234,"package_name":"chalk","ecosystem":"npm","requirements":"^4.1.2","direct":true,"kind":"development","optional":false},{"id":7502794235,"package_name":"clean-publish","ecosystem":"npm","requirements":"^3.0.3","direct":true,"kind":"development","optional":false},{"id":7502794236,"package_name":"cli-color","ecosystem":"npm","requirements":"^2.0.0","direct":true,"kind":"development","optional":false},{"id":7502794237,"package_name":"colorette","ecosystem":"npm","requirements":"^2.0.12","direct":true,"kind":"development","optional":false},{"id":7502794238,"package_name":"kleur","ecosystem":"npm","requirements":"^4.1.4","direct":true,"kind":"development","optional":false},{"id":7502794239,"package_name":"nanocolors","ecosystem":"npm","requirements":"^0.2.12","direct":true,"kind":"development","optional":false},{"id":7502794240,"package_name":"prettier","ecosystem":"npm","requirements":"^2.4.1","direct":true,"kind":"development","optional":false}]}],"score":33.11876324285512,"created_at":"2026-07-08T05:16:49.069Z","updated_at":"2026-09-11T22:01:27.885Z","avatar_url":"https://github.com/alexeyraspopov.png","language":"JavaScript","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/377711","html_url":"https://summary.ecosyste.ms/projects/377711"}