{"id":378274,"url":"https://github.com/npm/validate-npm-package-name","last_synced_at":"2026-08-13T03:00:32.320Z","repository":{"id":23197567,"uuid":"26554081","full_name":"npm/validate-npm-package-name","owner":"npm","description":"Is the given string an acceptable npm package name?","archived":false,"fork":false,"pushed_at":"2026-06-18T16:24:27.000Z","size":153,"stargazers_count":316,"open_issues_count":3,"forks_count":50,"subscribers_count":23,"default_branch":"main","last_synced_at":"2026-08-09T07:29:15.075Z","etag":null,"topics":["npm-cli"],"latest_commit_sha":null,"homepage":"http://npm.im/validate-npm-package-name","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/npm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2014-11-12T20:10:12.000Z","updated_at":"2026-08-05T23:39:58.000Z","dependencies_parsed_at":"2026-08-09T01:34:09.487Z","dependency_job_id":null,"html_url":"https://github.com/npm/validate-npm-package-name","commit_stats":{"total_commits":107,"total_committers":18,"mean_commits":5.944444444444445,"dds":0.719626168224299,"last_synced_commit":"66522e1131a90ccaa2a3a60a5e6e8ccbfa854162"},"previous_names":[],"tags_count":21,"template":false,"template_full_name":null,"purl":"pkg:github/npm/validate-npm-package-name","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/sbom","scorecard":{"id":696449,"data":{"date":"2025-08-11","repo":{"name":"github.com/npm/validate-npm-package-name","commit":"208b9f42cc82c30216d31666625dc14e67268e95"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.7,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":6,"reason":"7 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:25","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:247","Info: topLevel 'contents' permission set to 'read': .github/workflows/audit.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci-release.yml:22","Warn: topLevel 'checks' permission set to 'write': .github/workflows/ci-release.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Warn: topLevel 'contents' permission set to 'write': .github/workflows/post-dependabot.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/pull-request.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-integration.yml:23","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:11","Warn: topLevel 'checks' permission set to 'write': .github/workflows/release.yml:13","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/audit.yml:41","Warn: npmCommand not pinned by hash: .github/workflows/ci-release.yml:62","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/post-dependabot.yml:39","Warn: npmCommand not pinned by hash: .github/workflows/pull-request.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/release-integration.yml:56","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:50","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:130","Info:   0 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  12 third-party GitHubAction dependencies pinned","Info:   0 out of   8 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":8,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 12 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-22T03:50:32.341Z","repository_id":23197567,"created_at":"2025-08-22T03:50:32.341Z","updated_at":"2025-08-22T03:50:32.341Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36453462,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"npm","name":"npm","uuid":"6078720","kind":"organization","description":"JavaScript Package Manager, Registry \u0026 Website","email":null,"website":"https://npmjs.com","location":"United States of America","twitter":"npmjs","company":null,"icon_url":"https://avatars.githubusercontent.com/u/6078720?v=4","repositories_count":343,"last_synced_at":"2024-04-14T06:35:40.452Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/npm","funding_links":[],"total_stars":50155,"followers":2401,"following":0,"created_at":"2022-11-02T16:18:59.756Z","updated_at":"2024-04-14T06:36:45.292Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm/repositories"},"packages":[{"id":13744921,"name":"node-validate-npm-package-name","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/npm/validate-npm-package-name","licenses":"isc","normalized_licenses":[],"repository_url":"https://github.com/npm/validate-npm-package-name","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-13T05:50:22.450Z","latest_release_published_at":"2026-02-13T05:50:22.450Z","latest_release_number":"3.0.0-1","last_synced_at":"2026-03-13T10:19:23.888Z","created_at":"2026-02-13T05:50:22.294Z","updated_at":"2026-08-09T12:24:24.153Z","registry_url":"https://launchpad.net/ubuntu/+source/node-validate-npm-package-name","install_command":"apt-get install node-validate-npm-package-name","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"node-validate-npm-package-name","standards_version":"4.1.1","maintainer":"Debian Javascript Maintainers \u003cpkg-javascript-devel@lists.alioth.debian.org\u003e","build_depends":"debhelper (\u003e= 9), dh-buildinfo, nodejs, node-builtins (\u003e= 1.0.3), node-tap","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":23197567,"uuid":"26554081","full_name":"npm/validate-npm-package-name","owner":"npm","description":"Is the given string an acceptable npm package name?","archived":false,"fork":false,"pushed_at":"2026-06-18T16:24:27.000Z","size":153,"stargazers_count":316,"open_issues_count":3,"forks_count":50,"subscribers_count":23,"default_branch":"main","last_synced_at":"2026-08-09T07:29:15.075Z","etag":null,"topics":["npm-cli"],"latest_commit_sha":null,"homepage":"http://npm.im/validate-npm-package-name","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/npm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2014-11-12T20:10:12.000Z","updated_at":"2026-08-05T23:39:58.000Z","dependencies_parsed_at":"2026-08-09T01:34:09.487Z","dependency_job_id":null,"html_url":"https://github.com/npm/validate-npm-package-name","commit_stats":{"total_commits":107,"total_committers":18,"mean_commits":5.944444444444445,"dds":0.719626168224299,"last_synced_commit":"66522e1131a90ccaa2a3a60a5e6e8ccbfa854162"},"previous_names":[],"tags_count":21,"template":false,"template_full_name":null,"purl":"pkg:github/npm/validate-npm-package-name","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/sbom","scorecard":{"id":696449,"data":{"date":"2025-08-11","repo":{"name":"github.com/npm/validate-npm-package-name","commit":"208b9f42cc82c30216d31666625dc14e67268e95"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.7,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":6,"reason":"7 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:25","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:247","Info: topLevel 'contents' permission set to 'read': .github/workflows/audit.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci-release.yml:22","Warn: topLevel 'checks' permission set to 'write': .github/workflows/ci-release.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Warn: topLevel 'contents' permission set to 'write': .github/workflows/post-dependabot.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/pull-request.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-integration.yml:23","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:11","Warn: topLevel 'checks' permission set to 'write': .github/workflows/release.yml:13","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/audit.yml:41","Warn: npmCommand not pinned by hash: .github/workflows/ci-release.yml:62","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/post-dependabot.yml:39","Warn: npmCommand not pinned by hash: .github/workflows/pull-request.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/release-integration.yml:56","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:50","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:130","Info:   0 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  12 third-party GitHubAction dependencies pinned","Info:   0 out of   8 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":8,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 12 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-22T03:50:32.341Z","repository_id":23197567,"created_at":"2025-08-22T03:50:32.341Z","updated_at":"2025-08-22T03:50:32.341Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36453462,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-09T12:24:24.152Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/node-validate-npm-package-name?arch=source\u0026distro=ubuntu-20.04\u0026repository_url=https://launchpad.net/ubuntu/focal","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/node-validate-npm-package-name","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/node-validate-npm-package-name","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/node-validate-npm-package-name/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-07-08T08:20:18.926Z","issues_count":27,"pull_requests_count":143,"avg_time_to_close_issue":47420027.04347826,"avg_time_to_close_pull_request":5325759.391304348,"issues_closed_count":23,"pull_requests_closed_count":138,"pull_request_authors_count":35,"issue_authors_count":24,"avg_comments_per_issue":1.3703703703703705,"avg_comments_per_pull_request":1.0,"merged_pull_requests_count":72,"bot_issues_count":0,"bot_pull_requests_count":100,"past_year_issues_count":1,"past_year_pull_requests_count":14,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1275633.9166666667,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":12,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.6428571428571429,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":11,"past_year_merged_pull_requests_count":10,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/issues","maintainers":[{"login":"lukekarrys","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lukekarrys"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/node-validate-npm-package-name/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/node-validate-npm-package-name/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/node-validate-npm-package-name/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/node-validate-npm-package-name/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/node-validate-npm-package-name/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages/node-validate-npm-package-name/codemeta","maintainers":[],"registry":{"name":"ubuntu-20.04","url":"https://launchpad.net/ubuntu/focal","ecosystem":"ubuntu","default":false,"packages_count":30789,"maintainers_count":0,"namespaces_count":4,"keywords_count":1429,"github":"ubuntu","metadata":{"codename":"focal","funded_packages_count":464},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:47.233Z","updated_at":"2026-08-10T05:08:00.495Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-20.04/namespaces"}},{"id":13660424,"name":"node-validate-npm-package-name","ecosystem":"debian","description":null,"homepage":"https://github.com/npm/validate-npm-package-name","licenses":"isc","normalized_licenses":[],"repository_url":"https://github.com/npm/validate-npm-package-name","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T08:39:06.619Z","latest_release_published_at":"2026-02-12T08:39:06.619Z","latest_release_number":"5.0.0+~4.0.0-1","last_synced_at":"2026-03-13T23:15:07.678Z","created_at":"2026-02-12T08:39:06.317Z","updated_at":"2026-08-09T12:24:24.148Z","registry_url":"https://tracker.debian.org/pkg/node-validate-npm-package-name","install_command":"apt-get install node-validate-npm-package-name","documentation_url":"https://packages.debian.org/trixie/node-validate-npm-package-name","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"node-validate-npm-package-name","standards_version":"4.6.1","maintainer":"Debian Javascript Maintainers \u003cpkg-javascript-devel@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-sequence-nodejs, node-builtins (\u003e= 5) \u003c!nocheck\u003e, node-tap \u003c!nocheck\u003e","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":23197567,"uuid":"26554081","full_name":"npm/validate-npm-package-name","owner":"npm","description":"Is the given string an acceptable npm package name?","archived":false,"fork":false,"pushed_at":"2026-06-18T16:24:27.000Z","size":153,"stargazers_count":316,"open_issues_count":3,"forks_count":50,"subscribers_count":23,"default_branch":"main","last_synced_at":"2026-08-09T07:29:15.075Z","etag":null,"topics":["npm-cli"],"latest_commit_sha":null,"homepage":"http://npm.im/validate-npm-package-name","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/npm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2014-11-12T20:10:12.000Z","updated_at":"2026-08-05T23:39:58.000Z","dependencies_parsed_at":"2026-08-09T01:34:09.487Z","dependency_job_id":null,"html_url":"https://github.com/npm/validate-npm-package-name","commit_stats":{"total_commits":107,"total_committers":18,"mean_commits":5.944444444444445,"dds":0.719626168224299,"last_synced_commit":"66522e1131a90ccaa2a3a60a5e6e8ccbfa854162"},"previous_names":[],"tags_count":21,"template":false,"template_full_name":null,"purl":"pkg:github/npm/validate-npm-package-name","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/sbom","scorecard":{"id":696449,"data":{"date":"2025-08-11","repo":{"name":"github.com/npm/validate-npm-package-name","commit":"208b9f42cc82c30216d31666625dc14e67268e95"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.7,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":6,"reason":"7 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:25","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:247","Info: topLevel 'contents' permission set to 'read': .github/workflows/audit.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci-release.yml:22","Warn: topLevel 'checks' permission set to 'write': .github/workflows/ci-release.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Warn: topLevel 'contents' permission set to 'write': .github/workflows/post-dependabot.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/pull-request.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-integration.yml:23","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:11","Warn: topLevel 'checks' permission set to 'write': .github/workflows/release.yml:13","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/audit.yml:41","Warn: npmCommand not pinned by hash: .github/workflows/ci-release.yml:62","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/post-dependabot.yml:39","Warn: npmCommand not pinned by hash: .github/workflows/pull-request.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/release-integration.yml:56","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:50","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:130","Info:   0 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  12 third-party GitHubAction dependencies pinned","Info:   0 out of   8 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":8,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 12 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-22T03:50:32.341Z","repository_id":23197567,"created_at":"2025-08-22T03:50:32.341Z","updated_at":"2025-08-22T03:50:32.341Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36453462,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-09T12:24:24.147Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/node-validate-npm-package-name?arch=source\u0026distro=debian-13\u0026repository_url=https://packages.debian.org/trixie","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/node-validate-npm-package-name","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/node-validate-npm-package-name","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/node-validate-npm-package-name/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-07-08T08:20:18.926Z","issues_count":27,"pull_requests_count":143,"avg_time_to_close_issue":47420027.04347826,"avg_time_to_close_pull_request":5325759.391304348,"issues_closed_count":23,"pull_requests_closed_count":138,"pull_request_authors_count":35,"issue_authors_count":24,"avg_comments_per_issue":1.3703703703703705,"avg_comments_per_pull_request":1.0,"merged_pull_requests_count":72,"bot_issues_count":0,"bot_pull_requests_count":100,"past_year_issues_count":1,"past_year_pull_requests_count":14,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1275633.9166666667,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":12,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.6428571428571429,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":11,"past_year_merged_pull_requests_count":10,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/issues","maintainers":[{"login":"lukekarrys","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lukekarrys"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/node-validate-npm-package-name/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/node-validate-npm-package-name/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/node-validate-npm-package-name/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/node-validate-npm-package-name/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/node-validate-npm-package-name/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages/node-validate-npm-package-name/codemeta","maintainers":[],"registry":{"name":"debian-13","url":"https://packages.debian.org/trixie","ecosystem":"debian","default":false,"packages_count":38024,"maintainers_count":0,"namespaces_count":4,"keywords_count":1985,"github":"debian","metadata":{"codename":"trixie","funded_packages_count":1208},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:50.448Z","updated_at":"2026-08-12T05:05:15.557Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-13/namespaces"}},{"id":5007114,"name":"org.webjars.npm:validate-npm-package-name","ecosystem":"maven","description":"WebJar for validate-npm-package-name","homepage":"https://www.webjars.org","licenses":"ISC","normalized_licenses":["ISC"],"repository_url":"https://github.com/npm/validate-npm-package-name","keywords_array":[],"namespace":"org.webjars.npm","versions_count":4,"first_release_published_at":"2016-04-30T13:44:50.000Z","latest_release_published_at":"2025-04-17T19:48:11.000Z","latest_release_number":"6.0.0","last_synced_at":"2026-08-12T02:31:13.621Z","created_at":"2022-07-27T11:13:51.808Z","updated_at":"2026-08-12T02:31:13.622Z","registry_url":"https://central.sonatype.com/artifact/org.webjars.npm/validate-npm-package-name/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.webjars.npm/validate-npm-package-name/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":23197567,"uuid":"26554081","full_name":"npm/validate-npm-package-name","owner":"npm","description":"Is the given string an acceptable npm package name?","archived":false,"fork":false,"pushed_at":"2026-06-18T16:24:27.000Z","size":153,"stargazers_count":316,"open_issues_count":3,"forks_count":50,"subscribers_count":23,"default_branch":"main","last_synced_at":"2026-08-09T07:29:15.075Z","etag":null,"topics":["npm-cli"],"latest_commit_sha":null,"homepage":"http://npm.im/validate-npm-package-name","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/npm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2014-11-12T20:10:12.000Z","updated_at":"2026-08-05T23:39:58.000Z","dependencies_parsed_at":"2026-08-09T01:34:09.487Z","dependency_job_id":null,"html_url":"https://github.com/npm/validate-npm-package-name","commit_stats":{"total_commits":107,"total_committers":18,"mean_commits":5.944444444444445,"dds":0.719626168224299,"last_synced_commit":"66522e1131a90ccaa2a3a60a5e6e8ccbfa854162"},"previous_names":[],"tags_count":21,"template":false,"template_full_name":null,"purl":"pkg:github/npm/validate-npm-package-name","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/sbom","scorecard":{"id":696449,"data":{"date":"2025-08-11","repo":{"name":"github.com/npm/validate-npm-package-name","commit":"208b9f42cc82c30216d31666625dc14e67268e95"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.7,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":6,"reason":"7 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:25","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:247","Info: topLevel 'contents' permission set to 'read': .github/workflows/audit.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci-release.yml:22","Warn: topLevel 'checks' permission set to 'write': .github/workflows/ci-release.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Warn: topLevel 'contents' permission set to 'write': .github/workflows/post-dependabot.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/pull-request.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-integration.yml:23","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:11","Warn: topLevel 'checks' permission set to 'write': .github/workflows/release.yml:13","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/audit.yml:41","Warn: npmCommand not pinned by hash: .github/workflows/ci-release.yml:62","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/post-dependabot.yml:39","Warn: npmCommand not pinned by hash: .github/workflows/pull-request.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/release-integration.yml:56","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:50","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:130","Info:   0 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  12 third-party GitHubAction dependencies pinned","Info:   0 out of   8 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":8,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 12 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-22T03:50:32.341Z","repository_id":23197567,"created_at":"2025-08-22T03:50:32.341Z","updated_at":"2025-08-22T03:50:32.341Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36453462,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"npm","name":"npm","uuid":"6078720","kind":"organization","description":"JavaScript Package Manager, Registry \u0026 Website","email":null,"website":"https://npmjs.com","location":"United States of America","twitter":"npmjs","company":null,"icon_url":"https://avatars.githubusercontent.com/u/6078720?v=4","repositories_count":343,"last_synced_at":"2024-04-14T06:35:40.452Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/npm","funding_links":[],"total_stars":50155,"followers":2401,"following":0,"created_at":"2022-11-02T16:18:59.756Z","updated_at":"2024-04-14T06:36:45.292Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm/repositories"},"tags":[{"name":"v8.0.0","sha":"f26d9a9778fcc47bd44fd65f9991c9960e67b282","kind":"commit","published_at":"2026-05-08T18:29:01.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v8.0.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v8.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v8.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v8.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v8.0.0/manifests"},{"name":"v7.0.2","sha":"622224dabeb3c381be046d7131e10d9d466fd500","kind":"commit","published_at":"2026-01-06T20:00:17.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v7.0.2","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v7.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v7.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v7.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v7.0.2/manifests"},{"name":"v7.0.1","sha":"728a77adc524d521896195ab2d7b5db6540e73e6","kind":"commit","published_at":"2025-12-18T22:52:20.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v7.0.1","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v7.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v7.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v7.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v7.0.1/manifests"},{"name":"v7.0.0","sha":"1307824511c4e91f0f04d2c90c069999f2c8e7e8","kind":"commit","published_at":"2025-10-22T15:26:33.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v7.0.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v7.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v7.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v7.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v7.0.0/manifests"},{"name":"v6.0.2","sha":"208b9f42cc82c30216d31666625dc14e67268e95","kind":"commit","published_at":"2025-07-21T21:17:32.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v6.0.2","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v6.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v6.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v6.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v6.0.2/manifests"},{"name":"v6.0.1","sha":"b135b9c6d642cb7378584b60ff6043489273244b","kind":"commit","published_at":"2025-06-05T16:14:27.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v6.0.1","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v6.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v6.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v6.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v6.0.1/manifests"},{"name":"v6.0.0","sha":"66522e1131a90ccaa2a3a60a5e6e8ccbfa854162","kind":"commit","published_at":"2024-09-25T17:32:11.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v6.0.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v6.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v6.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v6.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v6.0.0/manifests"},{"name":"v5.0.1","sha":"b7753c95bd57b8d087c4e01ee497d2134fa7130c","kind":"commit","published_at":"2024-05-06T17:21:22.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v5.0.1","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v5.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v5.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v5.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v5.0.1/manifests"},{"name":"v5.0.0","sha":"5e4965a8345c0f14d0b1596be48a7200137cca44","kind":"commit","published_at":"2022-10-14T05:22:22.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v5.0.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v5.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v5.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v5.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v5.0.0/manifests"},{"name":"v4.0.0","sha":"c0a908ea7d30817fc87e32a5cb8801a01f4d07fd","kind":"commit","published_at":"2022-03-29T19:57:36.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v4.0.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v4.0.0/manifests"},{"name":"v3.0.0","sha":"ddf73c79e920b59413485ca2ae50a38552156d62","kind":"tag","published_at":"2017-02-13T22:44:53.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v3.0.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v3.0.0/manifests"},{"name":"v2.2.2","sha":"3af92c881549f1b96f05ab6bfb5768bba94ad72d","kind":"tag","published_at":"2015-06-30T07:33:46.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v2.2.2","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"b25e4f4a927bee4130058c6800b0352711faeacb","kind":"tag","published_at":"2015-06-30T07:07:31.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v2.2.1","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"acef1219c13a0cf4cf6b8706d65f606d82a7d472","kind":"tag","published_at":"2015-04-28T22:41:20.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v2.2.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.2.0/manifests"},{"name":"v2.1.0","sha":"015cffe92eacf7432b22b3b68a37c507d03733c8","kind":"tag","published_at":"2015-04-28T19:19:59.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v2.1.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.1.0/manifests"},{"name":"v2.0.1","sha":"69f5c629525feeccfc941a6f1b9280ceed8a4b3a","kind":"tag","published_at":"2015-01-20T01:20:33.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v2.0.1","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"34c168ed0175a3e20a06c910b06b26cbe81a18a8","kind":"tag","published_at":"2015-01-20T01:19:33.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v2.0.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.0.0/manifests"},{"name":"v1.2.0","sha":"7bc42600dd83f548c7024cebcdce2631f1daadf5","kind":"tag","published_at":"2014-11-13T01:01:04.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v1.2.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v1.2.0/manifests"},{"name":"v1.1.1","sha":"27e7422a24d83513450bfd2d7e3974edbf294862","kind":"tag","published_at":"2014-11-13T00:49:27.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v1.1.1","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v1.1.1/manifests"},{"name":"v1.0.1","sha":"d63552945df873f81666b84ad8f8358ef950700a","kind":"tag","published_at":"2014-11-12T23:01:18.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v1.0.1","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v1.0.1/manifests"},{"name":"v1.1.0","sha":"01cb9d23d755e9bdfeda0795b3f638f291590aac","kind":"tag","published_at":"2014-11-12T20:22:13.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v1.1.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v1.1.0/manifests"}]},"repo_metadata_updated_at":"2026-08-09T12:24:24.288Z","dependent_packages_count":4,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":13.42066560594539,"stargazers_count":null,"forks_count":null,"average":22.700304773446387},"purl":"pkg:maven/org.webjars.npm/validate-npm-package-name","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.webjars.npm:validate-npm-package-name","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.webjars.npm:validate-npm-package-name","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.webjars.npm:validate-npm-package-name/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-07-08T08:20:18.926Z","issues_count":27,"pull_requests_count":143,"avg_time_to_close_issue":47420027.04347826,"avg_time_to_close_pull_request":5325759.391304348,"issues_closed_count":23,"pull_requests_closed_count":138,"pull_request_authors_count":35,"issue_authors_count":24,"avg_comments_per_issue":1.3703703703703705,"avg_comments_per_pull_request":1.0,"merged_pull_requests_count":72,"bot_issues_count":0,"bot_pull_requests_count":100,"past_year_issues_count":1,"past_year_pull_requests_count":14,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1275633.9166666667,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":12,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.6428571428571429,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":11,"past_year_merged_pull_requests_count":10,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/issues","maintainers":[{"login":"lukekarrys","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lukekarrys"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:validate-npm-package-name/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:validate-npm-package-name/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:validate-npm-package-name/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:validate-npm-package-name/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:validate-npm-package-name/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:validate-npm-package-name/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":614338,"maintainers_count":0,"namespaces_count":81639,"keywords_count":35201,"github":"maven-central","metadata":{"funded_packages_count":44250,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-12T15:20:50.627Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":2516236,"name":"validate-npm-package-name","ecosystem":"npm","description":"Give me a string and I'll tell you if it's a valid npm package name","homepage":"https://github.com/npm/validate-npm-package-name","licenses":"ISC","normalized_licenses":["ISC"],"repository_url":"https://github.com/npm/validate-npm-package-name","keywords_array":["npm","package","names","validation"],"namespace":null,"versions_count":22,"first_release_published_at":"2014-11-12T22:55:16.098Z","latest_release_published_at":"2026-05-08T18:31:08.990Z","latest_release_number":"8.0.0","last_synced_at":"2026-08-12T02:31:13.391Z","created_at":"2022-04-10T02:54:05.062Z","updated_at":"2026-08-12T02:31:13.391Z","registry_url":"https://www.npmjs.com/package/validate-npm-package-name","install_command":"npm install validate-npm-package-name","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"8.0.0"},"contentPolicy":null},"repo_metadata":{"id":23197567,"uuid":"26554081","full_name":"npm/validate-npm-package-name","owner":"npm","description":"Is the given string an acceptable npm package name?","archived":false,"fork":false,"pushed_at":"2026-06-18T16:24:27.000Z","size":153,"stargazers_count":316,"open_issues_count":3,"forks_count":50,"subscribers_count":23,"default_branch":"main","last_synced_at":"2026-08-09T07:29:15.075Z","etag":null,"topics":["npm-cli"],"latest_commit_sha":null,"homepage":"http://npm.im/validate-npm-package-name","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/npm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2014-11-12T20:10:12.000Z","updated_at":"2026-08-05T23:39:58.000Z","dependencies_parsed_at":"2026-08-09T01:34:09.487Z","dependency_job_id":null,"html_url":"https://github.com/npm/validate-npm-package-name","commit_stats":{"total_commits":107,"total_committers":18,"mean_commits":5.944444444444445,"dds":0.719626168224299,"last_synced_commit":"66522e1131a90ccaa2a3a60a5e6e8ccbfa854162"},"previous_names":[],"tags_count":21,"template":false,"template_full_name":null,"purl":"pkg:github/npm/validate-npm-package-name","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/sbom","scorecard":{"id":696449,"data":{"date":"2025-08-11","repo":{"name":"github.com/npm/validate-npm-package-name","commit":"208b9f42cc82c30216d31666625dc14e67268e95"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.7,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":6,"reason":"7 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:25","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:247","Info: topLevel 'contents' permission set to 'read': .github/workflows/audit.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci-release.yml:22","Warn: topLevel 'checks' permission set to 'write': .github/workflows/ci-release.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Warn: topLevel 'contents' permission set to 'write': .github/workflows/post-dependabot.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/pull-request.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-integration.yml:23","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:11","Warn: topLevel 'checks' permission set to 'write': .github/workflows/release.yml:13","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/audit.yml:41","Warn: npmCommand not pinned by hash: .github/workflows/ci-release.yml:62","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/post-dependabot.yml:39","Warn: npmCommand not pinned by hash: .github/workflows/pull-request.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/release-integration.yml:56","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:50","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:130","Info:   0 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  12 third-party GitHubAction dependencies pinned","Info:   0 out of   8 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":8,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 12 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-22T03:50:32.341Z","repository_id":23197567,"created_at":"2025-08-22T03:50:32.341Z","updated_at":"2025-08-22T03:50:32.341Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36453462,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"npm","name":"npm","uuid":"6078720","kind":"organization","description":"JavaScript Package Manager, Registry \u0026 Website","email":null,"website":"https://npmjs.com","location":"United States of America","twitter":"npmjs","company":null,"icon_url":"https://avatars.githubusercontent.com/u/6078720?v=4","repositories_count":343,"last_synced_at":"2024-04-14T06:35:40.452Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/npm","funding_links":[],"total_stars":50155,"followers":2401,"following":0,"created_at":"2022-11-02T16:18:59.756Z","updated_at":"2024-04-14T06:36:45.292Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm/repositories"},"tags":[{"name":"v8.0.0","sha":"f26d9a9778fcc47bd44fd65f9991c9960e67b282","kind":"commit","published_at":"2026-05-08T18:29:01.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v8.0.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v8.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v8.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v8.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v8.0.0/manifests"},{"name":"v7.0.2","sha":"622224dabeb3c381be046d7131e10d9d466fd500","kind":"commit","published_at":"2026-01-06T20:00:17.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v7.0.2","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v7.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v7.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v7.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v7.0.2/manifests"},{"name":"v7.0.1","sha":"728a77adc524d521896195ab2d7b5db6540e73e6","kind":"commit","published_at":"2025-12-18T22:52:20.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v7.0.1","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v7.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v7.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v7.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v7.0.1/manifests"},{"name":"v7.0.0","sha":"1307824511c4e91f0f04d2c90c069999f2c8e7e8","kind":"commit","published_at":"2025-10-22T15:26:33.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v7.0.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v7.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v7.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v7.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v7.0.0/manifests"},{"name":"v6.0.2","sha":"208b9f42cc82c30216d31666625dc14e67268e95","kind":"commit","published_at":"2025-07-21T21:17:32.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v6.0.2","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v6.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v6.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v6.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v6.0.2/manifests"},{"name":"v6.0.1","sha":"b135b9c6d642cb7378584b60ff6043489273244b","kind":"commit","published_at":"2025-06-05T16:14:27.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v6.0.1","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v6.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v6.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v6.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v6.0.1/manifests"},{"name":"v6.0.0","sha":"66522e1131a90ccaa2a3a60a5e6e8ccbfa854162","kind":"commit","published_at":"2024-09-25T17:32:11.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v6.0.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v6.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v6.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v6.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v6.0.0/manifests"},{"name":"v5.0.1","sha":"b7753c95bd57b8d087c4e01ee497d2134fa7130c","kind":"commit","published_at":"2024-05-06T17:21:22.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v5.0.1","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v5.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v5.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v5.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v5.0.1/manifests"},{"name":"v5.0.0","sha":"5e4965a8345c0f14d0b1596be48a7200137cca44","kind":"commit","published_at":"2022-10-14T05:22:22.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v5.0.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v5.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v5.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v5.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v5.0.0/manifests"},{"name":"v4.0.0","sha":"c0a908ea7d30817fc87e32a5cb8801a01f4d07fd","kind":"commit","published_at":"2022-03-29T19:57:36.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v4.0.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v4.0.0/manifests"},{"name":"v3.0.0","sha":"ddf73c79e920b59413485ca2ae50a38552156d62","kind":"tag","published_at":"2017-02-13T22:44:53.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v3.0.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v3.0.0/manifests"},{"name":"v2.2.2","sha":"3af92c881549f1b96f05ab6bfb5768bba94ad72d","kind":"tag","published_at":"2015-06-30T07:33:46.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v2.2.2","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"b25e4f4a927bee4130058c6800b0352711faeacb","kind":"tag","published_at":"2015-06-30T07:07:31.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v2.2.1","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"acef1219c13a0cf4cf6b8706d65f606d82a7d472","kind":"tag","published_at":"2015-04-28T22:41:20.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v2.2.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.2.0/manifests"},{"name":"v2.1.0","sha":"015cffe92eacf7432b22b3b68a37c507d03733c8","kind":"tag","published_at":"2015-04-28T19:19:59.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v2.1.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.1.0/manifests"},{"name":"v2.0.1","sha":"69f5c629525feeccfc941a6f1b9280ceed8a4b3a","kind":"tag","published_at":"2015-01-20T01:20:33.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v2.0.1","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"34c168ed0175a3e20a06c910b06b26cbe81a18a8","kind":"tag","published_at":"2015-01-20T01:19:33.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v2.0.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.0.0/manifests"},{"name":"v1.2.0","sha":"7bc42600dd83f548c7024cebcdce2631f1daadf5","kind":"tag","published_at":"2014-11-13T01:01:04.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v1.2.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v1.2.0/manifests"},{"name":"v1.1.1","sha":"27e7422a24d83513450bfd2d7e3974edbf294862","kind":"tag","published_at":"2014-11-13T00:49:27.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v1.1.1","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v1.1.1/manifests"},{"name":"v1.0.1","sha":"d63552945df873f81666b84ad8f8358ef950700a","kind":"tag","published_at":"2014-11-12T23:01:18.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v1.0.1","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v1.0.1/manifests"},{"name":"v1.1.0","sha":"01cb9d23d755e9bdfeda0795b3f638f291590aac","kind":"tag","published_at":"2014-11-12T20:22:13.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v1.1.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v1.1.0/manifests"}]},"repo_metadata_updated_at":"2026-08-09T12:24:24.284Z","dependent_packages_count":3139,"downloads":165525293,"downloads_period":"last-month","dependent_repos_count":897854,"rankings":{"downloads":0.03102134421809237,"dependent_repos_count":0.0376198825733971,"dependent_packages_count":0.02617511480361545,"stargazers_count":3.5364606206897307,"forks_count":3.911729603323693,"docker_downloads_count":0.003066540646448672,"average":1.257678851042496},"purl":"pkg:npm/validate-npm-package-name","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/validate-npm-package-name","docker_dependents_count":63810,"docker_downloads_count":12805268636,"usage_url":"https://repos.ecosyste.ms/usage/npm/validate-npm-package-name","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/validate-npm-package-name/dependencies","status":null,"funding_links":[],"critical":true,"issue_metadata":{"last_synced_at":"2026-07-08T08:20:18.926Z","issues_count":27,"pull_requests_count":143,"avg_time_to_close_issue":47420027.04347826,"avg_time_to_close_pull_request":5325759.391304348,"issues_closed_count":23,"pull_requests_closed_count":138,"pull_request_authors_count":35,"issue_authors_count":24,"avg_comments_per_issue":1.3703703703703705,"avg_comments_per_pull_request":1.0,"merged_pull_requests_count":72,"bot_issues_count":0,"bot_pull_requests_count":100,"past_year_issues_count":1,"past_year_pull_requests_count":14,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1275633.9166666667,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":12,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.6428571428571429,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":11,"past_year_merged_pull_requests_count":10,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/issues","maintainers":[{"login":"lukekarrys","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lukekarrys"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/validate-npm-package-name/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/validate-npm-package-name/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/validate-npm-package-name/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/validate-npm-package-name/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/validate-npm-package-name/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/validate-npm-package-name/codemeta","maintainers":[{"uuid":"saquibkhan","login":"saquibkhan","name":null,"email":"saquibkhan@github.com","url":null,"packages_count":274,"html_url":"https://www.npmjs.com/~saquibkhan","role":null,"created_at":"2022-12-05T07:58:09.553Z","updated_at":"2022-12-05T07:58:09.553Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/saquibkhan/packages"},{"uuid":"reggi","login":"reggi","name":null,"email":"reggi@github.com","url":null,"packages_count":454,"html_url":"https://www.npmjs.com/~reggi","role":null,"created_at":"2024-05-31T13:44:22.103Z","updated_at":"2024-05-31T13:44:22.103Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/reggi/packages"},{"uuid":"npm-cli-ops","login":"npm-cli-ops","name":null,"email":"npm-cli+bot@github.com","url":null,"packages_count":127,"html_url":"https://www.npmjs.com/~npm-cli-ops","role":null,"created_at":"2023-03-08T00:12:30.950Z","updated_at":"2023-03-08T00:12:30.950Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/npm-cli-ops/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5727076,"maintainers_count":1224064,"namespaces_count":412299,"keywords_count":867340,"github":"npm","metadata":{"funded_packages_count":182970,"rate_limit":1},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-08-12T11:14:47.046Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":11736372,"name":"org.mvnpm:validate-npm-package-name","ecosystem":"maven","description":"Give me a string and I'll tell you if it's a valid npm package name","homepage":"https://github.com/npm/validate-npm-package-name","licenses":"ISC","normalized_licenses":["ISC"],"repository_url":"https://github.com/npm/validate-npm-package-name","keywords_array":[],"namespace":"org.mvnpm","versions_count":8,"first_release_published_at":"2025-05-15T14:43:30.000Z","latest_release_published_at":"2026-05-09T15:04:59.000Z","latest_release_number":"8.0.0","last_synced_at":"2026-08-12T02:31:13.256Z","created_at":"2025-06-05T20:16:56.449Z","updated_at":"2026-08-12T02:31:13.256Z","registry_url":"https://central.sonatype.com/artifact/org.mvnpm/validate-npm-package-name/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.mvnpm/validate-npm-package-name/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":23197567,"uuid":"26554081","full_name":"npm/validate-npm-package-name","owner":"npm","description":"Is the given string an acceptable npm package name?","archived":false,"fork":false,"pushed_at":"2026-06-18T16:24:27.000Z","size":153,"stargazers_count":316,"open_issues_count":3,"forks_count":50,"subscribers_count":23,"default_branch":"main","last_synced_at":"2026-08-09T07:29:15.075Z","etag":null,"topics":["npm-cli"],"latest_commit_sha":null,"homepage":"http://npm.im/validate-npm-package-name","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/npm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2014-11-12T20:10:12.000Z","updated_at":"2026-08-05T23:39:58.000Z","dependencies_parsed_at":"2026-08-09T01:34:09.487Z","dependency_job_id":null,"html_url":"https://github.com/npm/validate-npm-package-name","commit_stats":{"total_commits":107,"total_committers":18,"mean_commits":5.944444444444445,"dds":0.719626168224299,"last_synced_commit":"66522e1131a90ccaa2a3a60a5e6e8ccbfa854162"},"previous_names":[],"tags_count":21,"template":false,"template_full_name":null,"purl":"pkg:github/npm/validate-npm-package-name","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/sbom","scorecard":{"id":696449,"data":{"date":"2025-08-11","repo":{"name":"github.com/npm/validate-npm-package-name","commit":"208b9f42cc82c30216d31666625dc14e67268e95"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.7,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":6,"reason":"7 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:25","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:247","Info: topLevel 'contents' permission set to 'read': .github/workflows/audit.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci-release.yml:22","Warn: topLevel 'checks' permission set to 'write': .github/workflows/ci-release.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Warn: topLevel 'contents' permission set to 'write': .github/workflows/post-dependabot.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/pull-request.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-integration.yml:23","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:11","Warn: topLevel 'checks' permission set to 'write': .github/workflows/release.yml:13","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/audit.yml:41","Warn: npmCommand not pinned by hash: .github/workflows/ci-release.yml:62","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/post-dependabot.yml:39","Warn: npmCommand not pinned by hash: .github/workflows/pull-request.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/release-integration.yml:56","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:50","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:130","Info:   0 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  12 third-party GitHubAction dependencies pinned","Info:   0 out of   8 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":8,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 12 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-22T03:50:32.341Z","repository_id":23197567,"created_at":"2025-08-22T03:50:32.341Z","updated_at":"2025-08-22T03:50:32.341Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36453462,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"npm","name":"npm","uuid":"6078720","kind":"organization","description":"JavaScript Package Manager, Registry \u0026 Website","email":null,"website":"https://npmjs.com","location":"United States of America","twitter":"npmjs","company":null,"icon_url":"https://avatars.githubusercontent.com/u/6078720?v=4","repositories_count":343,"last_synced_at":"2024-04-14T06:35:40.452Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/npm","funding_links":[],"total_stars":50155,"followers":2401,"following":0,"created_at":"2022-11-02T16:18:59.756Z","updated_at":"2024-04-14T06:36:45.292Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm/repositories"},"tags":[{"name":"v8.0.0","sha":"f26d9a9778fcc47bd44fd65f9991c9960e67b282","kind":"commit","published_at":"2026-05-08T18:29:01.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v8.0.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v8.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v8.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v8.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v8.0.0/manifests"},{"name":"v7.0.2","sha":"622224dabeb3c381be046d7131e10d9d466fd500","kind":"commit","published_at":"2026-01-06T20:00:17.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v7.0.2","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v7.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v7.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v7.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v7.0.2/manifests"},{"name":"v7.0.1","sha":"728a77adc524d521896195ab2d7b5db6540e73e6","kind":"commit","published_at":"2025-12-18T22:52:20.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v7.0.1","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v7.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v7.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v7.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v7.0.1/manifests"},{"name":"v7.0.0","sha":"1307824511c4e91f0f04d2c90c069999f2c8e7e8","kind":"commit","published_at":"2025-10-22T15:26:33.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v7.0.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v7.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v7.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v7.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v7.0.0/manifests"},{"name":"v6.0.2","sha":"208b9f42cc82c30216d31666625dc14e67268e95","kind":"commit","published_at":"2025-07-21T21:17:32.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v6.0.2","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v6.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v6.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v6.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v6.0.2/manifests"},{"name":"v6.0.1","sha":"b135b9c6d642cb7378584b60ff6043489273244b","kind":"commit","published_at":"2025-06-05T16:14:27.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v6.0.1","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v6.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v6.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v6.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v6.0.1/manifests"},{"name":"v6.0.0","sha":"66522e1131a90ccaa2a3a60a5e6e8ccbfa854162","kind":"commit","published_at":"2024-09-25T17:32:11.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v6.0.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v6.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v6.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v6.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v6.0.0/manifests"},{"name":"v5.0.1","sha":"b7753c95bd57b8d087c4e01ee497d2134fa7130c","kind":"commit","published_at":"2024-05-06T17:21:22.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v5.0.1","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v5.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v5.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v5.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v5.0.1/manifests"},{"name":"v5.0.0","sha":"5e4965a8345c0f14d0b1596be48a7200137cca44","kind":"commit","published_at":"2022-10-14T05:22:22.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v5.0.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v5.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v5.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v5.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v5.0.0/manifests"},{"name":"v4.0.0","sha":"c0a908ea7d30817fc87e32a5cb8801a01f4d07fd","kind":"commit","published_at":"2022-03-29T19:57:36.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v4.0.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v4.0.0/manifests"},{"name":"v3.0.0","sha":"ddf73c79e920b59413485ca2ae50a38552156d62","kind":"tag","published_at":"2017-02-13T22:44:53.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v3.0.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v3.0.0/manifests"},{"name":"v2.2.2","sha":"3af92c881549f1b96f05ab6bfb5768bba94ad72d","kind":"tag","published_at":"2015-06-30T07:33:46.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v2.2.2","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"b25e4f4a927bee4130058c6800b0352711faeacb","kind":"tag","published_at":"2015-06-30T07:07:31.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v2.2.1","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"acef1219c13a0cf4cf6b8706d65f606d82a7d472","kind":"tag","published_at":"2015-04-28T22:41:20.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v2.2.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.2.0/manifests"},{"name":"v2.1.0","sha":"015cffe92eacf7432b22b3b68a37c507d03733c8","kind":"tag","published_at":"2015-04-28T19:19:59.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v2.1.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.1.0/manifests"},{"name":"v2.0.1","sha":"69f5c629525feeccfc941a6f1b9280ceed8a4b3a","kind":"tag","published_at":"2015-01-20T01:20:33.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v2.0.1","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"34c168ed0175a3e20a06c910b06b26cbe81a18a8","kind":"tag","published_at":"2015-01-20T01:19:33.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v2.0.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v2.0.0/manifests"},{"name":"v1.2.0","sha":"7bc42600dd83f548c7024cebcdce2631f1daadf5","kind":"tag","published_at":"2014-11-13T01:01:04.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v1.2.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v1.2.0/manifests"},{"name":"v1.1.1","sha":"27e7422a24d83513450bfd2d7e3974edbf294862","kind":"tag","published_at":"2014-11-13T00:49:27.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v1.1.1","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v1.1.1/manifests"},{"name":"v1.0.1","sha":"d63552945df873f81666b84ad8f8358ef950700a","kind":"tag","published_at":"2014-11-12T23:01:18.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v1.0.1","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v1.0.1/manifests"},{"name":"v1.1.0","sha":"01cb9d23d755e9bdfeda0795b3f638f291590aac","kind":"tag","published_at":"2014-11-12T20:22:13.000Z","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/v1.1.0","html_url":"https://github.com/npm/validate-npm-package-name/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/npm/validate-npm-package-name@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags/v1.1.0/manifests"}]},"repo_metadata_updated_at":"2026-08-09T12:24:24.258Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":34.15019686372387,"dependent_packages_count":48.8222035193623,"stargazers_count":19.691991746740175,"forks_count":24.503750514861864,"docker_downloads_count":null,"average":31.79203566117205},"purl":"pkg:maven/org.mvnpm/validate-npm-package-name","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.mvnpm:validate-npm-package-name","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.mvnpm:validate-npm-package-name","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.mvnpm:validate-npm-package-name/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-07-08T08:20:18.926Z","issues_count":27,"pull_requests_count":143,"avg_time_to_close_issue":47420027.04347826,"avg_time_to_close_pull_request":5325759.391304348,"issues_closed_count":23,"pull_requests_closed_count":138,"pull_request_authors_count":35,"issue_authors_count":24,"avg_comments_per_issue":1.3703703703703705,"avg_comments_per_pull_request":1.0,"merged_pull_requests_count":72,"bot_issues_count":0,"bot_pull_requests_count":100,"past_year_issues_count":1,"past_year_pull_requests_count":14,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1275633.9166666667,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":12,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.6428571428571429,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":11,"past_year_merged_pull_requests_count":10,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/issues","maintainers":[{"login":"lukekarrys","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lukekarrys"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm:validate-npm-package-name/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm:validate-npm-package-name/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm:validate-npm-package-name/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm:validate-npm-package-name/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm:validate-npm-package-name/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.mvnpm:validate-npm-package-name/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":614338,"maintainers_count":0,"namespaces_count":81639,"keywords_count":35201,"github":"maven-central","metadata":{"funded_packages_count":44250,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-08-12T15:20:50.627Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":14623231,"name":"github.com/npm/validate-npm-package-name","ecosystem":"go","description":null,"homepage":null,"licenses":"isc","normalized_licenses":["ISC"],"repository_url":"https://github.com/npm/validate-npm-package-name","keywords_array":[],"namespace":null,"versions_count":21,"first_release_published_at":"2014-11-12T23:01:18.000Z","latest_release_published_at":"2026-05-08T18:29:01.000Z","latest_release_number":"v8.0.0+incompatible","last_synced_at":"2026-08-12T02:31:13.750Z","created_at":"2026-06-13T10:36:27.660Z","updated_at":"2026-08-12T02:31:13.750Z","registry_url":"https://pkg.go.dev/github.com/npm/validate-npm-package-name","install_command":"go get github.com/npm/validate-npm-package-name","documentation_url":"https://pkg.go.dev/github.com/npm/validate-npm-package-name#section-documentation","metadata":{},"repo_metadata":{"id":23197567,"uuid":"26554081","full_name":"npm/validate-npm-package-name","owner":"npm","description":"Is the given string an acceptable npm package name?","archived":false,"fork":false,"pushed_at":"2026-06-18T16:24:27.000Z","size":153,"stargazers_count":316,"open_issues_count":3,"forks_count":50,"subscribers_count":23,"default_branch":"main","last_synced_at":"2026-08-09T07:29:15.075Z","etag":null,"topics":["npm-cli"],"latest_commit_sha":null,"homepage":"http://npm.im/validate-npm-package-name","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/npm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2014-11-12T20:10:12.000Z","updated_at":"2026-08-05T23:39:58.000Z","dependencies_parsed_at":"2026-08-09T01:34:09.487Z","dependency_job_id":null,"html_url":"https://github.com/npm/validate-npm-package-name","commit_stats":{"total_commits":107,"total_committers":18,"mean_commits":5.944444444444445,"dds":0.719626168224299,"last_synced_commit":"66522e1131a90ccaa2a3a60a5e6e8ccbfa854162"},"previous_names":[],"tags_count":21,"template":false,"template_full_name":null,"purl":"pkg:github/npm/validate-npm-package-name","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/sbom","scorecard":{"id":696449,"data":{"date":"2025-08-11","repo":{"name":"github.com/npm/validate-npm-package-name","commit":"208b9f42cc82c30216d31666625dc14e67268e95"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.7,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":6,"reason":"7 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:25","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:247","Info: topLevel 'contents' permission set to 'read': .github/workflows/audit.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci-release.yml:22","Warn: topLevel 'checks' permission set to 'write': .github/workflows/ci-release.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Warn: topLevel 'contents' permission set to 'write': .github/workflows/post-dependabot.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/pull-request.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-integration.yml:23","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:11","Warn: topLevel 'checks' permission set to 'write': .github/workflows/release.yml:13","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/audit.yml:41","Warn: npmCommand not pinned by hash: .github/workflows/ci-release.yml:62","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/post-dependabot.yml:39","Warn: npmCommand not pinned by hash: .github/workflows/pull-request.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/release-integration.yml:56","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:50","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:130","Info:   0 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  12 third-party GitHubAction dependencies pinned","Info:   0 out of   8 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":8,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 12 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-22T03:50:32.341Z","repository_id":23197567,"created_at":"2025-08-22T03:50:32.341Z","updated_at":"2025-08-22T03:50:32.341Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36453462,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-09T12:24:24.167Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":4.994080526060674,"dependent_packages_count":4.679635856654185,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.83685819135743},"purl":"pkg:golang/github.com/npm/validate-npm-package-name","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/npm/validate-npm-package-name","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/npm/validate-npm-package-name","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/npm/validate-npm-package-name/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-07-08T08:20:18.926Z","issues_count":27,"pull_requests_count":143,"avg_time_to_close_issue":47420027.04347826,"avg_time_to_close_pull_request":5325759.391304348,"issues_closed_count":23,"pull_requests_closed_count":138,"pull_request_authors_count":35,"issue_authors_count":24,"avg_comments_per_issue":1.3703703703703705,"avg_comments_per_pull_request":1.0,"merged_pull_requests_count":72,"bot_issues_count":0,"bot_pull_requests_count":100,"past_year_issues_count":1,"past_year_pull_requests_count":14,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1275633.9166666667,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":12,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.6428571428571429,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":11,"past_year_merged_pull_requests_count":10,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/issues","maintainers":[{"login":"lukekarrys","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lukekarrys"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fnpm%2Fvalidate-npm-package-name/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fnpm%2Fvalidate-npm-package-name/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fnpm%2Fvalidate-npm-package-name/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fnpm%2Fvalidate-npm-package-name/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fnpm%2Fvalidate-npm-package-name/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fnpm%2Fvalidate-npm-package-name/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2263070,"maintainers_count":0,"namespaces_count":837425,"keywords_count":122443,"github":"golang","metadata":{"funded_packages_count":65362,"sync_missing_packages_cursor":{"timestamp":"2026-08-12T00:18:10.975284Z","path":"github.com/fhunleth/muontrap","version":"v0.2.1"},"rate_limit":1},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-08-12T12:33:12.528Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}},{"id":13523669,"name":"node-validate-npm-package-name","ecosystem":"debian","description":null,"homepage":"https://github.com/npm/validate-npm-package-name","licenses":"isc","normalized_licenses":[],"repository_url":"https://github.com/npm/validate-npm-package-name","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-10T22:12:20.121Z","latest_release_published_at":"2026-02-10T22:12:20.121Z","latest_release_number":"3.0.0-1.1","last_synced_at":"2026-03-14T02:22:17.551Z","created_at":"2026-02-10T22:12:19.186Z","updated_at":"2026-08-09T12:24:24.150Z","registry_url":"https://tracker.debian.org/pkg/node-validate-npm-package-name","install_command":"apt-get install node-validate-npm-package-name","documentation_url":"https://packages.debian.org/bullseye/node-validate-npm-package-name","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"node-validate-npm-package-name","standards_version":"4.1.1","maintainer":"Debian Javascript Maintainers \u003cpkg-javascript-devel@lists.alioth.debian.org\u003e","build_depends":"debhelper (\u003e= 9), dh-buildinfo, nodejs, node-builtins (\u003e= 1.0.3), node-tap","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":23197567,"uuid":"26554081","full_name":"npm/validate-npm-package-name","owner":"npm","description":"Is the given string an acceptable npm package name?","archived":false,"fork":false,"pushed_at":"2026-06-18T16:24:27.000Z","size":153,"stargazers_count":316,"open_issues_count":3,"forks_count":50,"subscribers_count":23,"default_branch":"main","last_synced_at":"2026-08-09T07:29:15.075Z","etag":null,"topics":["npm-cli"],"latest_commit_sha":null,"homepage":"http://npm.im/validate-npm-package-name","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/npm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2014-11-12T20:10:12.000Z","updated_at":"2026-08-05T23:39:58.000Z","dependencies_parsed_at":"2026-08-09T01:34:09.487Z","dependency_job_id":null,"html_url":"https://github.com/npm/validate-npm-package-name","commit_stats":{"total_commits":107,"total_committers":18,"mean_commits":5.944444444444445,"dds":0.719626168224299,"last_synced_commit":"66522e1131a90ccaa2a3a60a5e6e8ccbfa854162"},"previous_names":[],"tags_count":21,"template":false,"template_full_name":null,"purl":"pkg:github/npm/validate-npm-package-name","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/sbom","scorecard":{"id":696449,"data":{"date":"2025-08-11","repo":{"name":"github.com/npm/validate-npm-package-name","commit":"208b9f42cc82c30216d31666625dc14e67268e95"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.7,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":6,"reason":"7 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:25","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:247","Info: topLevel 'contents' permission set to 'read': .github/workflows/audit.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci-release.yml:22","Warn: topLevel 'checks' permission set to 'write': .github/workflows/ci-release.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Warn: topLevel 'contents' permission set to 'write': .github/workflows/post-dependabot.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/pull-request.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-integration.yml:23","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:11","Warn: topLevel 'checks' permission set to 'write': .github/workflows/release.yml:13","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/audit.yml:41","Warn: npmCommand not pinned by hash: .github/workflows/ci-release.yml:62","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/post-dependabot.yml:39","Warn: npmCommand not pinned by hash: .github/workflows/pull-request.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/release-integration.yml:56","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:50","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:130","Info:   0 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  12 third-party GitHubAction dependencies pinned","Info:   0 out of   8 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":8,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 12 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-22T03:50:32.341Z","repository_id":23197567,"created_at":"2025-08-22T03:50:32.341Z","updated_at":"2025-08-22T03:50:32.341Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36453462,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-09T12:24:24.150Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/node-validate-npm-package-name?arch=source\u0026distro=debian-11\u0026repository_url=https://packages.debian.org/bullseye","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/node-validate-npm-package-name","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/node-validate-npm-package-name","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/node-validate-npm-package-name/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-07-08T08:20:18.926Z","issues_count":27,"pull_requests_count":143,"avg_time_to_close_issue":47420027.04347826,"avg_time_to_close_pull_request":5325759.391304348,"issues_closed_count":23,"pull_requests_closed_count":138,"pull_request_authors_count":35,"issue_authors_count":24,"avg_comments_per_issue":1.3703703703703705,"avg_comments_per_pull_request":1.0,"merged_pull_requests_count":72,"bot_issues_count":0,"bot_pull_requests_count":100,"past_year_issues_count":1,"past_year_pull_requests_count":14,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1275633.9166666667,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":12,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.6428571428571429,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":11,"past_year_merged_pull_requests_count":10,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/issues","maintainers":[{"login":"lukekarrys","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lukekarrys"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/node-validate-npm-package-name/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/node-validate-npm-package-name/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/node-validate-npm-package-name/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/node-validate-npm-package-name/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/node-validate-npm-package-name/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages/node-validate-npm-package-name/codemeta","maintainers":[],"registry":{"name":"debian-11","url":"https://packages.debian.org/bullseye","ecosystem":"debian","default":false,"packages_count":31268,"maintainers_count":0,"namespaces_count":3,"keywords_count":759,"github":"debian","metadata":{"codename":"bullseye","funded_packages_count":456},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:49.702Z","updated_at":"2026-08-10T05:08:02.664Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-11/namespaces"}},{"id":13400228,"name":"node-validate-npm-package-name","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/npm/validate-npm-package-name","licenses":"isc","normalized_licenses":[],"repository_url":"https://github.com/npm/validate-npm-package-name","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-06T06:46:46.626Z","latest_release_published_at":"2026-02-06T06:46:46.626Z","latest_release_number":"5.0.0+~4.0.0-1","last_synced_at":"2026-03-06T16:48:58.333Z","created_at":"2026-02-06T06:46:46.354Z","updated_at":"2026-08-09T12:24:24.150Z","registry_url":"https://launchpad.net/ubuntu/+source/node-validate-npm-package-name","install_command":"apt-get install node-validate-npm-package-name","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"node-validate-npm-package-name","standards_version":"4.6.1","maintainer":"Debian Javascript Maintainers \u003cpkg-javascript-devel@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-sequence-nodejs, node-builtins (\u003e= 5) \u003c!nocheck\u003e, node-tap \u003c!nocheck\u003e","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":23197567,"uuid":"26554081","full_name":"npm/validate-npm-package-name","owner":"npm","description":"Is the given string an acceptable npm package name?","archived":false,"fork":false,"pushed_at":"2026-06-18T16:24:27.000Z","size":153,"stargazers_count":316,"open_issues_count":3,"forks_count":50,"subscribers_count":23,"default_branch":"main","last_synced_at":"2026-08-09T07:29:15.075Z","etag":null,"topics":["npm-cli"],"latest_commit_sha":null,"homepage":"http://npm.im/validate-npm-package-name","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/npm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2014-11-12T20:10:12.000Z","updated_at":"2026-08-05T23:39:58.000Z","dependencies_parsed_at":"2026-08-09T01:34:09.487Z","dependency_job_id":null,"html_url":"https://github.com/npm/validate-npm-package-name","commit_stats":{"total_commits":107,"total_committers":18,"mean_commits":5.944444444444445,"dds":0.719626168224299,"last_synced_commit":"66522e1131a90ccaa2a3a60a5e6e8ccbfa854162"},"previous_names":[],"tags_count":21,"template":false,"template_full_name":null,"purl":"pkg:github/npm/validate-npm-package-name","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/sbom","scorecard":{"id":696449,"data":{"date":"2025-08-11","repo":{"name":"github.com/npm/validate-npm-package-name","commit":"208b9f42cc82c30216d31666625dc14e67268e95"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.7,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":6,"reason":"7 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:25","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:247","Info: topLevel 'contents' permission set to 'read': .github/workflows/audit.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci-release.yml:22","Warn: topLevel 'checks' permission set to 'write': .github/workflows/ci-release.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Warn: topLevel 'contents' permission set to 'write': .github/workflows/post-dependabot.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/pull-request.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-integration.yml:23","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:11","Warn: topLevel 'checks' permission set to 'write': .github/workflows/release.yml:13","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/audit.yml:41","Warn: npmCommand not pinned by hash: .github/workflows/ci-release.yml:62","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/post-dependabot.yml:39","Warn: npmCommand not pinned by hash: .github/workflows/pull-request.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/release-integration.yml:56","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:50","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:130","Info:   0 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  12 third-party GitHubAction dependencies pinned","Info:   0 out of   8 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":8,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 12 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-22T03:50:32.341Z","repository_id":23197567,"created_at":"2025-08-22T03:50:32.341Z","updated_at":"2025-08-22T03:50:32.341Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36453462,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-09T12:24:24.150Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/node-validate-npm-package-name?arch=source\u0026distro=ubuntu-24.04","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/node-validate-npm-package-name","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/node-validate-npm-package-name","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/node-validate-npm-package-name/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-07-08T08:20:18.926Z","issues_count":27,"pull_requests_count":143,"avg_time_to_close_issue":47420027.04347826,"avg_time_to_close_pull_request":5325759.391304348,"issues_closed_count":23,"pull_requests_closed_count":138,"pull_request_authors_count":35,"issue_authors_count":24,"avg_comments_per_issue":1.3703703703703705,"avg_comments_per_pull_request":1.0,"merged_pull_requests_count":72,"bot_issues_count":0,"bot_pull_requests_count":100,"past_year_issues_count":1,"past_year_pull_requests_count":14,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1275633.9166666667,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":12,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.6428571428571429,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":11,"past_year_merged_pull_requests_count":10,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/issues","maintainers":[{"login":"lukekarrys","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lukekarrys"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/node-validate-npm-package-name/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/node-validate-npm-package-name/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/node-validate-npm-package-name/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/node-validate-npm-package-name/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/node-validate-npm-package-name/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages/node-validate-npm-package-name/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.04","url":"https://launchpad.net/ubuntu/noble","ecosystem":"ubuntu","default":true,"packages_count":37306,"maintainers_count":0,"namespaces_count":4,"keywords_count":1697,"github":"ubuntu","metadata":{"codename":"noble","funded_packages_count":723},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:45.928Z","updated_at":"2026-08-10T05:07:57.238Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.04/namespaces"}},{"id":13429267,"name":"node-validate-npm-package-name","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/npm/validate-npm-package-name","licenses":"isc","normalized_licenses":[],"repository_url":"https://github.com/npm/validate-npm-package-name","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-07T16:30:51.067Z","latest_release_published_at":"2026-02-07T16:30:51.067Z","latest_release_number":"3.0.0-4","last_synced_at":"2026-03-07T17:33:23.264Z","created_at":"2026-02-07T16:30:50.815Z","updated_at":"2026-08-09T12:24:24.177Z","registry_url":"https://launchpad.net/ubuntu/+source/node-validate-npm-package-name","install_command":"apt-get install node-validate-npm-package-name","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"node-validate-npm-package-name","standards_version":"4.6.0","maintainer":"Debian Javascript Maintainers \u003cpkg-javascript-devel@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-sequence-nodejs, node-builtins (\u003e= 3) \u003c!nocheck\u003e, node-tap \u003c!nocheck\u003e","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":23197567,"uuid":"26554081","full_name":"npm/validate-npm-package-name","owner":"npm","description":"Is the given string an acceptable npm package name?","archived":false,"fork":false,"pushed_at":"2026-06-18T16:24:27.000Z","size":153,"stargazers_count":316,"open_issues_count":3,"forks_count":50,"subscribers_count":23,"default_branch":"main","last_synced_at":"2026-08-09T07:29:15.075Z","etag":null,"topics":["npm-cli"],"latest_commit_sha":null,"homepage":"http://npm.im/validate-npm-package-name","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/npm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2014-11-12T20:10:12.000Z","updated_at":"2026-08-05T23:39:58.000Z","dependencies_parsed_at":"2026-08-09T01:34:09.487Z","dependency_job_id":null,"html_url":"https://github.com/npm/validate-npm-package-name","commit_stats":{"total_commits":107,"total_committers":18,"mean_commits":5.944444444444445,"dds":0.719626168224299,"last_synced_commit":"66522e1131a90ccaa2a3a60a5e6e8ccbfa854162"},"previous_names":[],"tags_count":21,"template":false,"template_full_name":null,"purl":"pkg:github/npm/validate-npm-package-name","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/sbom","scorecard":{"id":696449,"data":{"date":"2025-08-11","repo":{"name":"github.com/npm/validate-npm-package-name","commit":"208b9f42cc82c30216d31666625dc14e67268e95"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.7,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":6,"reason":"7 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:25","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:247","Info: topLevel 'contents' permission set to 'read': .github/workflows/audit.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci-release.yml:22","Warn: topLevel 'checks' permission set to 'write': .github/workflows/ci-release.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Warn: topLevel 'contents' permission set to 'write': .github/workflows/post-dependabot.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/pull-request.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-integration.yml:23","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:11","Warn: topLevel 'checks' permission set to 'write': .github/workflows/release.yml:13","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/audit.yml:41","Warn: npmCommand not pinned by hash: .github/workflows/ci-release.yml:62","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/post-dependabot.yml:39","Warn: npmCommand not pinned by hash: .github/workflows/pull-request.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/release-integration.yml:56","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:50","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:130","Info:   0 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  12 third-party GitHubAction dependencies pinned","Info:   0 out of   8 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":8,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 12 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-22T03:50:32.341Z","repository_id":23197567,"created_at":"2025-08-22T03:50:32.341Z","updated_at":"2025-08-22T03:50:32.341Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36453462,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-09T12:24:24.177Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/node-validate-npm-package-name?arch=source\u0026distro=ubuntu-22.04\u0026repository_url=https://launchpad.net/ubuntu/jammy","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/node-validate-npm-package-name","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/node-validate-npm-package-name","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/node-validate-npm-package-name/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-07-08T08:20:18.926Z","issues_count":27,"pull_requests_count":143,"avg_time_to_close_issue":47420027.04347826,"avg_time_to_close_pull_request":5325759.391304348,"issues_closed_count":23,"pull_requests_closed_count":138,"pull_request_authors_count":35,"issue_authors_count":24,"avg_comments_per_issue":1.3703703703703705,"avg_comments_per_pull_request":1.0,"merged_pull_requests_count":72,"bot_issues_count":0,"bot_pull_requests_count":100,"past_year_issues_count":1,"past_year_pull_requests_count":14,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1275633.9166666667,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":12,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.6428571428571429,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":11,"past_year_merged_pull_requests_count":10,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/issues","maintainers":[{"login":"lukekarrys","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lukekarrys"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/node-validate-npm-package-name/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/node-validate-npm-package-name/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/node-validate-npm-package-name/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/node-validate-npm-package-name/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/node-validate-npm-package-name/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages/node-validate-npm-package-name/codemeta","maintainers":[],"registry":{"name":"ubuntu-22.04","url":"https://launchpad.net/ubuntu/jammy","ecosystem":"ubuntu","default":false,"packages_count":34289,"maintainers_count":0,"namespaces_count":4,"keywords_count":1498,"github":"ubuntu","metadata":{"codename":"jammy","funded_packages_count":559},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:46.486Z","updated_at":"2026-08-10T05:07:56.140Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-22.04/namespaces"}},{"id":13460212,"name":"node-validate-npm-package-name","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/npm/validate-npm-package-name","licenses":"isc","normalized_licenses":[],"repository_url":"https://github.com/npm/validate-npm-package-name","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-09T07:31:40.779Z","latest_release_published_at":"2026-02-09T07:31:40.779Z","latest_release_number":"5.0.0+~4.0.0-1","last_synced_at":"2026-03-09T08:14:22.338Z","created_at":"2026-02-09T07:31:40.163Z","updated_at":"2026-08-09T12:24:24.148Z","registry_url":"https://launchpad.net/ubuntu/+source/node-validate-npm-package-name","install_command":"apt-get install node-validate-npm-package-name","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"node-validate-npm-package-name","standards_version":"4.6.1","maintainer":"Debian Javascript Maintainers \u003cpkg-javascript-devel@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-sequence-nodejs, node-builtins (\u003e= 5) \u003c!nocheck\u003e, node-tap \u003c!nocheck\u003e","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":23197567,"uuid":"26554081","full_name":"npm/validate-npm-package-name","owner":"npm","description":"Is the given string an acceptable npm package name?","archived":false,"fork":false,"pushed_at":"2026-06-18T16:24:27.000Z","size":153,"stargazers_count":316,"open_issues_count":3,"forks_count":50,"subscribers_count":23,"default_branch":"main","last_synced_at":"2026-08-09T07:29:15.075Z","etag":null,"topics":["npm-cli"],"latest_commit_sha":null,"homepage":"http://npm.im/validate-npm-package-name","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/npm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2014-11-12T20:10:12.000Z","updated_at":"2026-08-05T23:39:58.000Z","dependencies_parsed_at":"2026-08-09T01:34:09.487Z","dependency_job_id":null,"html_url":"https://github.com/npm/validate-npm-package-name","commit_stats":{"total_commits":107,"total_committers":18,"mean_commits":5.944444444444445,"dds":0.719626168224299,"last_synced_commit":"66522e1131a90ccaa2a3a60a5e6e8ccbfa854162"},"previous_names":[],"tags_count":21,"template":false,"template_full_name":null,"purl":"pkg:github/npm/validate-npm-package-name","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/sbom","scorecard":{"id":696449,"data":{"date":"2025-08-11","repo":{"name":"github.com/npm/validate-npm-package-name","commit":"208b9f42cc82c30216d31666625dc14e67268e95"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.7,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":6,"reason":"7 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:25","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:247","Info: topLevel 'contents' permission set to 'read': .github/workflows/audit.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci-release.yml:22","Warn: topLevel 'checks' permission set to 'write': .github/workflows/ci-release.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Warn: topLevel 'contents' permission set to 'write': .github/workflows/post-dependabot.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/pull-request.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-integration.yml:23","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:11","Warn: topLevel 'checks' permission set to 'write': .github/workflows/release.yml:13","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/audit.yml:41","Warn: npmCommand not pinned by hash: .github/workflows/ci-release.yml:62","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/post-dependabot.yml:39","Warn: npmCommand not pinned by hash: .github/workflows/pull-request.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/release-integration.yml:56","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:50","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:130","Info:   0 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  12 third-party GitHubAction dependencies pinned","Info:   0 out of   8 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":8,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 12 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-22T03:50:32.341Z","repository_id":23197567,"created_at":"2025-08-22T03:50:32.341Z","updated_at":"2025-08-22T03:50:32.341Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36453462,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-09T12:24:24.148Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/node-validate-npm-package-name?arch=source\u0026distro=ubuntu-24.10\u0026repository_url=https://launchpad.net/ubuntu/oracular","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/node-validate-npm-package-name","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/node-validate-npm-package-name","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/node-validate-npm-package-name/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-07-08T08:20:18.926Z","issues_count":27,"pull_requests_count":143,"avg_time_to_close_issue":47420027.04347826,"avg_time_to_close_pull_request":5325759.391304348,"issues_closed_count":23,"pull_requests_closed_count":138,"pull_request_authors_count":35,"issue_authors_count":24,"avg_comments_per_issue":1.3703703703703705,"avg_comments_per_pull_request":1.0,"merged_pull_requests_count":72,"bot_issues_count":0,"bot_pull_requests_count":100,"past_year_issues_count":1,"past_year_pull_requests_count":14,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1275633.9166666667,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":12,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.6428571428571429,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":11,"past_year_merged_pull_requests_count":10,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/issues","maintainers":[{"login":"lukekarrys","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lukekarrys"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/node-validate-npm-package-name/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/node-validate-npm-package-name/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/node-validate-npm-package-name/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/node-validate-npm-package-name/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/node-validate-npm-package-name/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages/node-validate-npm-package-name/codemeta","maintainers":[],"registry":{"name":"ubuntu-24.10","url":"https://launchpad.net/ubuntu/oracular","ecosystem":"ubuntu","default":false,"packages_count":38437,"maintainers_count":0,"namespaces_count":4,"keywords_count":1440,"github":"ubuntu","metadata":{"codename":"oracular","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":890},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.028Z","updated_at":"2026-08-12T05:05:16.435Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-24.10/namespaces"}},{"id":13597518,"name":"node-validate-npm-package-name","ecosystem":"debian","description":null,"homepage":"https://github.com/npm/validate-npm-package-name","licenses":"isc","normalized_licenses":[],"repository_url":"https://github.com/npm/validate-npm-package-name","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-11T10:32:34.003Z","latest_release_published_at":"2026-02-11T10:32:34.003Z","latest_release_number":"3.0.0-1","last_synced_at":"2026-07-28T07:05:36.928Z","created_at":"2026-02-11T10:32:33.832Z","updated_at":"2026-08-09T12:24:24.151Z","registry_url":"https://tracker.debian.org/pkg/node-validate-npm-package-name","install_command":"apt-get install node-validate-npm-package-name","documentation_url":"https://packages.debian.org/buster/node-validate-npm-package-name","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"node-validate-npm-package-name","standards_version":"4.1.1","maintainer":"Debian Javascript Maintainers \u003cpkg-javascript-devel@lists.alioth.debian.org\u003e","build_depends":"debhelper (\u003e= 9), dh-buildinfo, nodejs, node-builtins (\u003e= 1.0.3), node-tap","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":23197567,"uuid":"26554081","full_name":"npm/validate-npm-package-name","owner":"npm","description":"Is the given string an acceptable npm package name?","archived":false,"fork":false,"pushed_at":"2026-06-18T16:24:27.000Z","size":153,"stargazers_count":316,"open_issues_count":3,"forks_count":50,"subscribers_count":23,"default_branch":"main","last_synced_at":"2026-08-09T07:29:15.075Z","etag":null,"topics":["npm-cli"],"latest_commit_sha":null,"homepage":"http://npm.im/validate-npm-package-name","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/npm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2014-11-12T20:10:12.000Z","updated_at":"2026-08-05T23:39:58.000Z","dependencies_parsed_at":"2026-08-09T01:34:09.487Z","dependency_job_id":null,"html_url":"https://github.com/npm/validate-npm-package-name","commit_stats":{"total_commits":107,"total_committers":18,"mean_commits":5.944444444444445,"dds":0.719626168224299,"last_synced_commit":"66522e1131a90ccaa2a3a60a5e6e8ccbfa854162"},"previous_names":[],"tags_count":21,"template":false,"template_full_name":null,"purl":"pkg:github/npm/validate-npm-package-name","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/sbom","scorecard":{"id":696449,"data":{"date":"2025-08-11","repo":{"name":"github.com/npm/validate-npm-package-name","commit":"208b9f42cc82c30216d31666625dc14e67268e95"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.7,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":6,"reason":"7 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:25","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:247","Info: topLevel 'contents' permission set to 'read': .github/workflows/audit.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci-release.yml:22","Warn: topLevel 'checks' permission set to 'write': .github/workflows/ci-release.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Warn: topLevel 'contents' permission set to 'write': .github/workflows/post-dependabot.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/pull-request.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-integration.yml:23","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:11","Warn: topLevel 'checks' permission set to 'write': .github/workflows/release.yml:13","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/audit.yml:41","Warn: npmCommand not pinned by hash: .github/workflows/ci-release.yml:62","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/post-dependabot.yml:39","Warn: npmCommand not pinned by hash: .github/workflows/pull-request.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/release-integration.yml:56","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:50","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:130","Info:   0 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  12 third-party GitHubAction dependencies pinned","Info:   0 out of   8 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":8,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 12 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-22T03:50:32.341Z","repository_id":23197567,"created_at":"2025-08-22T03:50:32.341Z","updated_at":"2025-08-22T03:50:32.341Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36453462,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-09T12:24:24.151Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/node-validate-npm-package-name?arch=source\u0026distro=debian-10\u0026repository_url=https://packages.debian.org/buster","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/node-validate-npm-package-name","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/node-validate-npm-package-name","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/node-validate-npm-package-name/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-07-08T08:20:18.926Z","issues_count":27,"pull_requests_count":143,"avg_time_to_close_issue":47420027.04347826,"avg_time_to_close_pull_request":5325759.391304348,"issues_closed_count":23,"pull_requests_closed_count":138,"pull_request_authors_count":35,"issue_authors_count":24,"avg_comments_per_issue":1.3703703703703705,"avg_comments_per_pull_request":1.0,"merged_pull_requests_count":72,"bot_issues_count":0,"bot_pull_requests_count":100,"past_year_issues_count":1,"past_year_pull_requests_count":14,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1275633.9166666667,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":12,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.6428571428571429,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":11,"past_year_merged_pull_requests_count":10,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/issues","maintainers":[{"login":"lukekarrys","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lukekarrys"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/node-validate-npm-package-name/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/node-validate-npm-package-name/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/node-validate-npm-package-name/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/node-validate-npm-package-name/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/node-validate-npm-package-name/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages/node-validate-npm-package-name/codemeta","maintainers":[],"registry":{"name":"debian-10","url":"https://packages.debian.org/buster","ecosystem":"debian","default":false,"packages_count":28836,"maintainers_count":0,"namespaces_count":3,"keywords_count":915,"github":"debian","metadata":{"codename":"buster","mirror":"http://archive.debian.org/debian","funded_packages_count":416},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:50.156Z","updated_at":"2026-08-12T05:03:11.241Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-10/namespaces"}},{"id":13702732,"name":"node-validate-npm-package-name","ecosystem":"debian","description":null,"homepage":"https://github.com/npm/validate-npm-package-name","licenses":"isc","normalized_licenses":[],"repository_url":"https://github.com/npm/validate-npm-package-name","keywords_array":["misc"],"namespace":"main","versions_count":1,"first_release_published_at":"2026-02-12T21:27:05.374Z","latest_release_published_at":"2026-02-12T21:27:05.374Z","latest_release_number":"5.0.0+~4.0.0-1","last_synced_at":"2026-03-13T06:34:00.771Z","created_at":"2026-02-12T21:27:05.186Z","updated_at":"2026-08-09T12:24:24.158Z","registry_url":"https://tracker.debian.org/pkg/node-validate-npm-package-name","install_command":"apt-get install node-validate-npm-package-name","documentation_url":"https://packages.debian.org/bookworm/node-validate-npm-package-name","metadata":{"component":"main","architecture":"all","priority":"extra","binary":"node-validate-npm-package-name","standards_version":"4.6.1","maintainer":"Debian Javascript Maintainers \u003cpkg-javascript-devel@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-sequence-nodejs, node-builtins (\u003e= 5) \u003c!nocheck\u003e, node-tap \u003c!nocheck\u003e","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":23197567,"uuid":"26554081","full_name":"npm/validate-npm-package-name","owner":"npm","description":"Is the given string an acceptable npm package name?","archived":false,"fork":false,"pushed_at":"2026-06-18T16:24:27.000Z","size":153,"stargazers_count":316,"open_issues_count":3,"forks_count":50,"subscribers_count":23,"default_branch":"main","last_synced_at":"2026-08-09T07:29:15.075Z","etag":null,"topics":["npm-cli"],"latest_commit_sha":null,"homepage":"http://npm.im/validate-npm-package-name","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/npm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2014-11-12T20:10:12.000Z","updated_at":"2026-08-05T23:39:58.000Z","dependencies_parsed_at":"2026-08-09T01:34:09.487Z","dependency_job_id":null,"html_url":"https://github.com/npm/validate-npm-package-name","commit_stats":{"total_commits":107,"total_committers":18,"mean_commits":5.944444444444445,"dds":0.719626168224299,"last_synced_commit":"66522e1131a90ccaa2a3a60a5e6e8ccbfa854162"},"previous_names":[],"tags_count":21,"template":false,"template_full_name":null,"purl":"pkg:github/npm/validate-npm-package-name","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/sbom","scorecard":{"id":696449,"data":{"date":"2025-08-11","repo":{"name":"github.com/npm/validate-npm-package-name","commit":"208b9f42cc82c30216d31666625dc14e67268e95"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.7,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":6,"reason":"7 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:25","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:247","Info: topLevel 'contents' permission set to 'read': .github/workflows/audit.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci-release.yml:22","Warn: topLevel 'checks' permission set to 'write': .github/workflows/ci-release.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Warn: topLevel 'contents' permission set to 'write': .github/workflows/post-dependabot.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/pull-request.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-integration.yml:23","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:11","Warn: topLevel 'checks' permission set to 'write': .github/workflows/release.yml:13","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/audit.yml:41","Warn: npmCommand not pinned by hash: .github/workflows/ci-release.yml:62","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/post-dependabot.yml:39","Warn: npmCommand not pinned by hash: .github/workflows/pull-request.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/release-integration.yml:56","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:50","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:130","Info:   0 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  12 third-party GitHubAction dependencies pinned","Info:   0 out of   8 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":8,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 12 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-22T03:50:32.341Z","repository_id":23197567,"created_at":"2025-08-22T03:50:32.341Z","updated_at":"2025-08-22T03:50:32.341Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36453462,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-09T12:24:24.158Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/debian/node-validate-npm-package-name?arch=source\u0026distro=debian-12","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/debian/node-validate-npm-package-name","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/debian/node-validate-npm-package-name","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/debian/node-validate-npm-package-name/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-07-08T08:20:18.926Z","issues_count":27,"pull_requests_count":143,"avg_time_to_close_issue":47420027.04347826,"avg_time_to_close_pull_request":5325759.391304348,"issues_closed_count":23,"pull_requests_closed_count":138,"pull_request_authors_count":35,"issue_authors_count":24,"avg_comments_per_issue":1.3703703703703705,"avg_comments_per_pull_request":1.0,"merged_pull_requests_count":72,"bot_issues_count":0,"bot_pull_requests_count":100,"past_year_issues_count":1,"past_year_pull_requests_count":14,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1275633.9166666667,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":12,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.6428571428571429,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":11,"past_year_merged_pull_requests_count":10,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/issues","maintainers":[{"login":"lukekarrys","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lukekarrys"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/node-validate-npm-package-name/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/node-validate-npm-package-name/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/node-validate-npm-package-name/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/node-validate-npm-package-name/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/node-validate-npm-package-name/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages/node-validate-npm-package-name/codemeta","maintainers":[],"registry":{"name":"debian-12","url":"https://packages.debian.org/bookworm","ecosystem":"debian","default":true,"packages_count":34734,"maintainers_count":0,"namespaces_count":4,"keywords_count":2652,"github":"debian","metadata":{"codename":"bookworm","funded_packages_count":809},"icon_url":"https://github.com/debian.png","created_at":"2026-02-04T11:01:49.459Z","updated_at":"2026-08-10T05:08:01.819Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/debian-12/namespaces"}},{"id":13795115,"name":"node-validate-npm-package-name","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/npm/validate-npm-package-name","licenses":"isc","normalized_licenses":[],"repository_url":"https://github.com/npm/validate-npm-package-name","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-13T16:16:45.530Z","latest_release_published_at":"2026-02-13T16:16:45.530Z","latest_release_number":"5.0.0+~4.0.0-1","last_synced_at":"2026-07-24T21:11:47.697Z","created_at":"2026-02-13T16:16:45.360Z","updated_at":"2026-08-09T12:24:24.171Z","registry_url":"https://launchpad.net/ubuntu/+source/node-validate-npm-package-name","install_command":"apt-get install node-validate-npm-package-name","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"node-validate-npm-package-name","standards_version":"4.6.1","maintainer":"Debian Javascript Maintainers \u003cpkg-javascript-devel@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-sequence-nodejs, node-builtins (\u003e= 5) \u003c!nocheck\u003e, node-tap \u003c!nocheck\u003e","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":23197567,"uuid":"26554081","full_name":"npm/validate-npm-package-name","owner":"npm","description":"Is the given string an acceptable npm package name?","archived":false,"fork":false,"pushed_at":"2026-06-18T16:24:27.000Z","size":153,"stargazers_count":316,"open_issues_count":3,"forks_count":50,"subscribers_count":23,"default_branch":"main","last_synced_at":"2026-08-09T07:29:15.075Z","etag":null,"topics":["npm-cli"],"latest_commit_sha":null,"homepage":"http://npm.im/validate-npm-package-name","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/npm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2014-11-12T20:10:12.000Z","updated_at":"2026-08-05T23:39:58.000Z","dependencies_parsed_at":"2026-08-09T01:34:09.487Z","dependency_job_id":null,"html_url":"https://github.com/npm/validate-npm-package-name","commit_stats":{"total_commits":107,"total_committers":18,"mean_commits":5.944444444444445,"dds":0.719626168224299,"last_synced_commit":"66522e1131a90ccaa2a3a60a5e6e8ccbfa854162"},"previous_names":[],"tags_count":21,"template":false,"template_full_name":null,"purl":"pkg:github/npm/validate-npm-package-name","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/sbom","scorecard":{"id":696449,"data":{"date":"2025-08-11","repo":{"name":"github.com/npm/validate-npm-package-name","commit":"208b9f42cc82c30216d31666625dc14e67268e95"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.7,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":6,"reason":"7 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:25","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:247","Info: topLevel 'contents' permission set to 'read': .github/workflows/audit.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci-release.yml:22","Warn: topLevel 'checks' permission set to 'write': .github/workflows/ci-release.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Warn: topLevel 'contents' permission set to 'write': .github/workflows/post-dependabot.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/pull-request.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-integration.yml:23","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:11","Warn: topLevel 'checks' permission set to 'write': .github/workflows/release.yml:13","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/audit.yml:41","Warn: npmCommand not pinned by hash: .github/workflows/ci-release.yml:62","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/post-dependabot.yml:39","Warn: npmCommand not pinned by hash: .github/workflows/pull-request.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/release-integration.yml:56","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:50","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:130","Info:   0 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  12 third-party GitHubAction dependencies pinned","Info:   0 out of   8 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":8,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 12 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-22T03:50:32.341Z","repository_id":23197567,"created_at":"2025-08-22T03:50:32.341Z","updated_at":"2025-08-22T03:50:32.341Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36453462,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-09T12:24:24.171Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/node-validate-npm-package-name?arch=source\u0026distro=ubuntu-23.10\u0026repository_url=https://launchpad.net/ubuntu/mantic","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/node-validate-npm-package-name","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/node-validate-npm-package-name","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/node-validate-npm-package-name/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-07-08T08:20:18.926Z","issues_count":27,"pull_requests_count":143,"avg_time_to_close_issue":47420027.04347826,"avg_time_to_close_pull_request":5325759.391304348,"issues_closed_count":23,"pull_requests_closed_count":138,"pull_request_authors_count":35,"issue_authors_count":24,"avg_comments_per_issue":1.3703703703703705,"avg_comments_per_pull_request":1.0,"merged_pull_requests_count":72,"bot_issues_count":0,"bot_pull_requests_count":100,"past_year_issues_count":1,"past_year_pull_requests_count":14,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1275633.9166666667,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":12,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.6428571428571429,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":11,"past_year_merged_pull_requests_count":10,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/issues","maintainers":[{"login":"lukekarrys","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lukekarrys"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/node-validate-npm-package-name/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/node-validate-npm-package-name/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/node-validate-npm-package-name/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/node-validate-npm-package-name/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/node-validate-npm-package-name/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages/node-validate-npm-package-name/codemeta","maintainers":[],"registry":{"name":"ubuntu-23.10","url":"https://launchpad.net/ubuntu/mantic","ecosystem":"ubuntu","default":false,"packages_count":36642,"maintainers_count":0,"namespaces_count":4,"keywords_count":2213,"github":"ubuntu","metadata":{"codename":"mantic","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":891},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:48.636Z","updated_at":"2026-08-10T05:07:58.402Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.10/namespaces"}},{"id":13559155,"name":"node-validate-npm-package-name","ecosystem":"ubuntu","description":null,"homepage":"https://github.com/npm/validate-npm-package-name","licenses":"isc","normalized_licenses":[],"repository_url":"https://github.com/npm/validate-npm-package-name","keywords_array":["universe/misc"],"namespace":"universe","versions_count":1,"first_release_published_at":"2026-02-11T04:56:12.167Z","latest_release_published_at":"2026-02-11T04:56:12.167Z","latest_release_number":"5.0.0+~4.0.0-1","last_synced_at":"2026-03-11T11:05:14.655Z","created_at":"2026-02-11T04:56:11.981Z","updated_at":"2026-08-09T12:24:24.197Z","registry_url":"https://launchpad.net/ubuntu/+source/node-validate-npm-package-name","install_command":"apt-get install node-validate-npm-package-name","documentation_url":null,"metadata":{"component":"universe","architecture":"all","priority":"optional","binary":"node-validate-npm-package-name","standards_version":"4.6.1","maintainer":"Debian Javascript Maintainers \u003cpkg-javascript-devel@lists.alioth.debian.org\u003e","build_depends":"debhelper-compat (= 13), dh-sequence-nodejs, node-builtins (\u003e= 5) \u003c!nocheck\u003e, node-tap \u003c!nocheck\u003e","build_depends_indep":null,"build_depends_arch":null},"repo_metadata":{"id":23197567,"uuid":"26554081","full_name":"npm/validate-npm-package-name","owner":"npm","description":"Is the given string an acceptable npm package name?","archived":false,"fork":false,"pushed_at":"2026-06-18T16:24:27.000Z","size":153,"stargazers_count":316,"open_issues_count":3,"forks_count":50,"subscribers_count":23,"default_branch":"main","last_synced_at":"2026-08-09T07:29:15.075Z","etag":null,"topics":["npm-cli"],"latest_commit_sha":null,"homepage":"http://npm.im/validate-npm-package-name","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/npm.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2014-11-12T20:10:12.000Z","updated_at":"2026-08-05T23:39:58.000Z","dependencies_parsed_at":"2026-08-09T01:34:09.487Z","dependency_job_id":null,"html_url":"https://github.com/npm/validate-npm-package-name","commit_stats":{"total_commits":107,"total_committers":18,"mean_commits":5.944444444444445,"dds":0.719626168224299,"last_synced_commit":"66522e1131a90ccaa2a3a60a5e6e8ccbfa854162"},"previous_names":[],"tags_count":21,"template":false,"template_full_name":null,"purl":"pkg:github/npm/validate-npm-package-name","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/npm","download_url":"https://codeload.github.com/npm/validate-npm-package-name/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/sbom","scorecard":{"id":696449,"data":{"date":"2025-08-11","repo":{"name":"github.com/npm/validate-npm-package-name","commit":"208b9f42cc82c30216d31666625dc14e67268e95"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":6.7,"checks":[{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Maintained","score":6,"reason":"7 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 6","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:24","Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:25","Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:247","Info: topLevel 'contents' permission set to 'read': .github/workflows/audit.yml:12","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci-release.yml:22","Warn: topLevel 'checks' permission set to 'write': .github/workflows/ci-release.yml:23","Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:16","Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:17","Warn: topLevel 'contents' permission set to 'write': .github/workflows/post-dependabot.yml:8","Info: topLevel 'contents' permission set to 'read': .github/workflows/pull-request.yml:14","Info: topLevel 'contents' permission set to 'read': .github/workflows/release-integration.yml:23","Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:11","Warn: topLevel 'checks' permission set to 'write': .github/workflows/release.yml:13","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: ISC License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/audit.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/audit.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-release.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-release.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci-release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/codeql-analysis.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-dependabot.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/post-dependabot.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/pull-request.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-integration.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release-integration.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:284: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:304: update your workflow using https://app.stepsecurity.io/secureworkflow/npm/validate-npm-package-name/release.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/audit.yml:41","Warn: npmCommand not pinned by hash: .github/workflows/ci-release.yml:62","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/post-dependabot.yml:39","Warn: npmCommand not pinned by hash: .github/workflows/pull-request.yml:45","Warn: npmCommand not pinned by hash: .github/workflows/release-integration.yml:56","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:50","Warn: npmCommand not pinned by hash: .github/workflows/release.yml:130","Info:   0 out of  26 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  12 third-party GitHubAction dependencies pinned","Info:   0 out of   8 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":8,"reason":"SAST tool detected but not run on all commits","details":["Info: SAST configuration detected: CodeQL","Warn: 12 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-22T03:50:32.341Z","repository_id":23197567,"created_at":"2025-08-22T03:50:32.341Z","updated_at":"2025-08-22T03:50:32.341Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36453462,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-09T02:00:06.528Z","response_time":130,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"repo_metadata_updated_at":"2026-08-09T12:24:24.197Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":0.0,"dependent_packages_count":0.0,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":100},"purl":"pkg:deb/ubuntu/node-validate-npm-package-name?arch=source\u0026distro=ubuntu-23.04\u0026repository_url=https://launchpad.net/ubuntu/lunar","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/ubuntu/node-validate-npm-package-name","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/ubuntu/node-validate-npm-package-name","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/ubuntu/node-validate-npm-package-name/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-07-08T08:20:18.926Z","issues_count":27,"pull_requests_count":143,"avg_time_to_close_issue":47420027.04347826,"avg_time_to_close_pull_request":5325759.391304348,"issues_closed_count":23,"pull_requests_closed_count":138,"pull_request_authors_count":35,"issue_authors_count":24,"avg_comments_per_issue":1.3703703703703705,"avg_comments_per_pull_request":1.0,"merged_pull_requests_count":72,"bot_issues_count":0,"bot_pull_requests_count":100,"past_year_issues_count":1,"past_year_pull_requests_count":14,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1275633.9166666667,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":12,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.6428571428571429,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":11,"past_year_merged_pull_requests_count":10,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/issues","maintainers":[{"login":"lukekarrys","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lukekarrys"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/node-validate-npm-package-name/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/node-validate-npm-package-name/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/node-validate-npm-package-name/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/node-validate-npm-package-name/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/node-validate-npm-package-name/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages/node-validate-npm-package-name/codemeta","maintainers":[],"registry":{"name":"ubuntu-23.04","url":"https://launchpad.net/ubuntu/lunar","ecosystem":"ubuntu","default":false,"packages_count":36116,"maintainers_count":0,"namespaces_count":4,"keywords_count":1000,"github":"ubuntu","metadata":{"codename":"lunar","mirror":"http://old-releases.ubuntu.com/ubuntu","funded_packages_count":613},"icon_url":"https://github.com/ubuntu.png","created_at":"2026-02-04T11:01:49.117Z","updated_at":"2026-08-10T05:07:59.632Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/ubuntu-23.04/namespaces"}}],"commits":{"id":13991,"full_name":"npm/validate-npm-package-name","default_branch":"main","total_commits":139,"total_committers":21,"total_bot_commits":52,"total_bot_committers":2,"mean_commits":6.619047619047619,"dds":0.697841726618705,"past_year_total_commits":24,"past_year_total_committers":6,"past_year_total_bot_commits":13,"past_year_total_bot_committers":2,"past_year_mean_commits":4.0,"past_year_dds":0.625,"last_synced_at":"2026-08-12T02:31:14.618Z","last_synced_commit":"f63469d58278635630681c2506f05176ff18a7cb","created_at":"2023-03-07T11:25:09.819Z","updated_at":"2026-08-12T02:31:14.194Z","committers":[{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":42},{"name":"Luke Karrys","email":"luke@lukekarrys.com","login":"lukekarrys","count":23},{"name":"Zeke Sikelianos","email":"zeke@sikelianos.com","login":"zeke","count":23},{"name":"github-actions[bot]","email":"41898282+github-actions[bot]","login":"github-actions[bot]","count":10},{"name":"Michael Smith","email":"owlstronaut@github.com","login":"owlstronaut","count":8},{"name":"Chris Dickinson","email":"christopher.s.dickinson@gmail.com","login":"chrisdickinson","count":6},{"name":"Chris Sidi","email":"hashtagchris@github.com","login":"hashtagchris","count":6},{"name":"Gar","email":"gar+gh@danger.computer","login":"wraithgar","count":5},{"name":"Benjamin Coe","email":"ben@npmjs.com","login":null,"count":2},{"name":"Kat Marchán","email":"kzm@sykosomatic.org","login":"zkat","count":2},{"name":"shmam","email":"shmam@github.com","login":"shmam","count":2},{"name":"Abdullah Atta","email":"thecodrr@protonmail.com","login":"thecodrr","count":1},{"name":"Ashley Williams","email":"ashley666ashley@gmail.com","login":"ashleygwilliams","count":1},{"name":"Jan Britz","email":"britz@tu-berlin.de","login":"janbritz","count":1},{"name":"Mudit Ameta","email":"zeusdeux@gmail.com","login":"zeusdeux","count":1},{"name":"Raphaël Huchet","email":"rap2hpoutre","login":"rap2hpoutre","count":1},{"name":"Tim Dorr","email":"timdorr","login":"timdorr","count":1},{"name":"Tom Dale","email":"tom@tomdale.net","login":"tomdale","count":1},{"name":"Zuzana Svetlikova","email":"zsvetlik@redhat.com","login":null,"count":1},{"name":"Audrey Eschright","email":"audrey@npmjs.com","login":null,"count":1},{"name":"npm CLI robot","email":"npm-cli+bot@github.com","login":"npm-cli-bot","count":1}],"past_year_committers":[{"name":"dependabot[bot]","email":"49699333+dependabot[bot]","login":"dependabot[bot]","count":9},{"name":"Michael Smith","email":"owlstronaut@github.com","login":"owlstronaut","count":7},{"name":"github-actions[bot]","email":"41898282+github-actions[bot]","login":"github-actions[bot]","count":4},{"name":"Chris Sidi","email":"hashtagchris@github.com","login":"hashtagchris","count":2},{"name":"npm CLI robot","email":"npm-cli+bot@github.com","login":"npm-cli-bot","count":1},{"name":"Gar","email":"gar+gh@danger.computer","login":"wraithgar","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-08-13T00:00:06.963Z","repositories_count":6643737,"commits_count":927564255,"contributors_count":39475636,"owners_count":1334779,"committers_count":3299805,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"npm/validate-npm-package-name","html_url":"https://github.com/npm/validate-npm-package-name","last_synced_at":"2026-07-08T08:20:18.926Z","status":"error","issues_count":27,"pull_requests_count":143,"avg_time_to_close_issue":47420027.04347826,"avg_time_to_close_pull_request":5325759.391304348,"issues_closed_count":23,"pull_requests_closed_count":138,"pull_request_authors_count":35,"issue_authors_count":24,"avg_comments_per_issue":1.3703703703703705,"avg_comments_per_pull_request":1.0,"merged_pull_requests_count":72,"bot_issues_count":0,"bot_pull_requests_count":100,"past_year_issues_count":1,"past_year_pull_requests_count":14,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":1275633.9166666667,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":12,"past_year_pull_request_authors_count":5,"past_year_issue_authors_count":1,"past_year_avg_comments_per_issue":0.0,"past_year_avg_comments_per_pull_request":0.6428571428571429,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":11,"past_year_merged_pull_requests_count":10,"created_at":"2023-05-16T15:55:09.784Z","updated_at":"2026-07-08T08:20:18.927Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/npm%2Fvalidate-npm-package-name/issues","issue_labels_count":{"table":{"Needs Triage":10}},"pull_request_labels_count":{"table":{"Dependencies":94,"autorelease: tagged":6,"autorelease: pending":2,"Needs Discussion":1,"semver:major":1}},"issue_author_associations_count":{"table":{"NONE":23,"CONTRIBUTOR":4}},"pull_request_author_associations_count":{"table":{"CONTRIBUTOR":119,"NONE":20,"MEMBER":4}},"issue_authors":{"table":{"ashleygwilliams":3,"Zackaryjacob":2,"bershanskiy":1,"aarondill":1,"simonechau":1,"othiym23":1,"nexdrew":1,"HHogg":1,"MarketingPip":1,"jorgebodega":1,"bodaso":1,"kellyselden":1,"dy":1,"everett1992":1,"stramel":1,"olsonpm":1,"elrrrrrrr":1,"oliviertassinari":1,"nikikalwar":1,"iarna":1,"exrem":1,"rap2hpoutre":1,"alexanderankin":1,"ozyman42":1}},"pull_request_authors":{"table":{"dependabot[bot]":92,"github-actions[bot]":8,"lukekarrys":4,"wraithgar":4,"shmam":2,"hashtagchris":2,"INeedJobToStartWork":2,"zeke":2,"ozyman42":1,"umeshmore45":1,"XhmikosR":1,"rzhade3":1,"owlstronaut":1,"SamiranRai":1,"ghostdevhv":1,"brettz9":1,"thecodrr":1,"candyapplecorn":1,"sandersn":1,"janbritz":1,"waldyrious":1,"timdorr":1,"Wayde31":1,"adnelson":1,"ghostdevv":1,"ashleygwilliams":1,"tomdale":1,"bcoe":1,"chrisdickinson":1,"thefourtheye":1,"zeusdeux":1,"dineshks1":1,"kasicka":1,"rap2hpoutre":1,"sonicdoe":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-08-01T00:00:20.326Z","repositories_count":14838420,"issues_count":30905527,"pull_requests_count":101800944,"authors_count":11379021,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{}},"past_year_pull_request_labels_count":{"table":{"Dependencies":7,"autorelease: tagged":1}},"past_year_issue_author_associations_count":{"table":{}},"past_year_pull_request_author_associations_count":{"table":{"CONTRIBUTOR":9,"NONE":2}},"past_year_issue_authors":{"table":{}},"past_year_pull_request_authors":{"table":{"dependabot[bot]":7,"ghostdevv":1,"github-actions[bot]":1,"owlstronaut":1,"umeshmore45":1}},"maintainers":[{"table":{"login":"lukekarrys","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lukekarrys"}}],"active_maintainers":[]}},"events":{"total":{"DeleteEvent":14,"PullRequestEvent":37,"ForkEvent":3,"IssuesEvent":2,"WatchEvent":10,"IssueCommentEvent":19,"PushEvent":32,"PullRequestReviewEvent":9,"CreateEvent":14},"last_year":{"DeleteEvent":9,"PullRequestEvent":29,"IssuesEvent":1,"WatchEvent":2,"IssueCommentEvent":11,"PushEvent":18,"PullRequestReviewEvent":4,"CreateEvent":11}},"keywords":["npm-cli"],"dependencies":[{"ecosystem":"actions","filepath":".github/workflows/audit.yml","sha":null,"kind":"manifest","created_at":"2023-01-13T22:55:25.523Z","updated_at":"2023-01-13T22:55:25.523Z","repository_link":"https://github.com/npm/validate-npm-package-name/blob/main/.github/workflows/audit.yml","dependencies":[{"id":6891676802,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6891676803,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/ci-release.yml","sha":null,"kind":"manifest","created_at":"2023-01-13T22:55:25.557Z","updated_at":"2023-01-13T22:55:25.557Z","repository_link":"https://github.com/npm/validate-npm-package-name/blob/main/.github/workflows/ci-release.yml","dependencies":[{"id":6891676804,"package_name":"actions/github-script","ecosystem":"actions","requirements":"v6","direct":true,"kind":"composite","optional":false},{"id":6891676805,"package_name":"LouisBrunner/checks-action","ecosystem":"actions","requirements":"v1.3.1","direct":true,"kind":"composite","optional":false},{"id":6891676806,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6891676807,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/ci.yml","sha":null,"kind":"manifest","created_at":"2023-01-13T22:55:25.587Z","updated_at":"2023-01-13T22:55:25.587Z","repository_link":"https://github.com/npm/validate-npm-package-name/blob/main/.github/workflows/ci.yml","dependencies":[{"id":6891676808,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6891676809,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/codeql-analysis.yml","sha":null,"kind":"manifest","created_at":"2023-01-13T22:55:25.620Z","updated_at":"2023-01-13T22:55:25.620Z","repository_link":"https://github.com/npm/validate-npm-package-name/blob/main/.github/workflows/codeql-analysis.yml","dependencies":[{"id":6891676810,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6891676811,"package_name":"github/codeql-action/init","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false},{"id":6891676812,"package_name":"github/codeql-action/analyze","ecosystem":"actions","requirements":"v2","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/post-dependabot.yml","sha":null,"kind":"manifest","created_at":"2023-01-13T22:55:25.660Z","updated_at":"2023-01-13T22:55:25.660Z","repository_link":"https://github.com/npm/validate-npm-package-name/blob/main/.github/workflows/post-dependabot.yml","dependencies":[{"id":6891676813,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6891676814,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6891676815,"package_name":"dependabot/fetch-metadata","ecosystem":"actions","requirements":"v1","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/pull-request.yml","sha":null,"kind":"manifest","created_at":"2023-01-13T22:55:25.701Z","updated_at":"2023-01-13T22:55:25.701Z","repository_link":"https://github.com/npm/validate-npm-package-name/blob/main/.github/workflows/pull-request.yml","dependencies":[{"id":6891676816,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6891676817,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/release.yml","sha":null,"kind":"manifest","created_at":"2023-01-13T22:55:25.751Z","updated_at":"2023-01-13T22:55:25.751Z","repository_link":"https://github.com/npm/validate-npm-package-name/blob/main/.github/workflows/release.yml","dependencies":[{"id":6891676818,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6891676819,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v3","direct":true,"kind":"composite","optional":false},{"id":6891676820,"package_name":"actions/github-script","ecosystem":"actions","requirements":"v6","direct":true,"kind":"composite","optional":false},{"id":6891676821,"package_name":"LouisBrunner/checks-action","ecosystem":"actions","requirements":"v1.3.1","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"npm","filepath":"package.json","sha":null,"kind":"manifest","created_at":"2023-01-13T22:55:25.791Z","updated_at":"2023-01-13T22:55:25.791Z","repository_link":"https://github.com/npm/validate-npm-package-name/blob/main/package.json","dependencies":[{"id":6891676822,"package_name":"builtins","ecosystem":"npm","requirements":"^5.0.0","direct":true,"kind":"runtime","optional":false},{"id":6891676823,"package_name":"@npmcli/eslint-config","ecosystem":"npm","requirements":"^4.0.0","direct":true,"kind":"development","optional":false},{"id":6891676824,"package_name":"@npmcli/template-oss","ecosystem":"npm","requirements":"4.11.0","direct":true,"kind":"development","optional":false},{"id":6891676825,"package_name":"tap","ecosystem":"npm","requirements":"^16.0.1","direct":true,"kind":"development","optional":false}]},{"ecosystem":"actions","filepath":".github/actions/install-latest-npm/action.yml","sha":null,"kind":"manifest","created_at":"2026-08-09T01:34:08.583Z","updated_at":"2026-08-09T01:34:08.583Z","repository_link":"https://github.com/npm/validate-npm-package-name/blob/main/.github/actions/install-latest-npm/action.yml","dependencies":[]},{"ecosystem":"actions","filepath":".github/workflows/release-integration.yml","sha":null,"kind":"manifest","created_at":"2026-08-09T01:34:09.202Z","updated_at":"2026-08-09T01:34:09.202Z","repository_link":"https://github.com/npm/validate-npm-package-name/blob/main/.github/workflows/release-integration.yml","dependencies":[{"id":25984622409,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v6","direct":true,"kind":"composite","optional":false},{"id":25984622410,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v6","direct":true,"kind":"composite","optional":false},{"id":25984622411,"package_name":"./.github/actions/install-latest-npm","ecosystem":"actions","requirements":"*","direct":true,"kind":"composite","optional":false}]},{"ecosystem":"actions","filepath":".github/actions/create-check/action.yml","sha":null,"kind":"manifest","created_at":"2026-08-09T01:34:08.331Z","updated_at":"2026-08-09T01:34:08.331Z","repository_link":"https://github.com/npm/validate-npm-package-name/blob/main/.github/actions/create-check/action.yml","dependencies":[{"id":25984620413,"package_name":"actions/github-script","ecosystem":"actions","requirements":"v7","direct":true,"kind":"composite","optional":false},{"id":25984620414,"package_name":"LouisBrunner/checks-action","ecosystem":"actions","requirements":"v1.6.0","direct":true,"kind":"composite","optional":false}]}],"score":32.095753967129816,"created_at":"2026-07-08T07:49:53.696Z","updated_at":"2026-08-13T03:00:32.320Z","avatar_url":"https://github.com/npm.png","language":"JavaScript","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/378274","html_url":"https://summary.ecosyste.ms/projects/378274"}