{"id":378290,"url":"https://github.com/jslicense/spdx-expression-parse.js","last_synced_at":"2026-10-12T19:32:46.358Z","repository":{"id":35786544,"uuid":"40067336","full_name":"jslicense/spdx-expression-parse.js","owner":"jslicense","description":"parse SPDX license expressions","archived":false,"fork":false,"pushed_at":"2026-08-18T05:42:10.000Z","size":578,"stargazers_count":46,"open_issues_count":11,"forks_count":28,"subscribers_count":10,"default_branch":"main","last_synced_at":"2026-10-08T06:14:06.535Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://npmjs.com/packages/spdx-expression-parse","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/jslicense.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2015-08-02T03:12:19.000Z","updated_at":"2026-10-07T23:32:33.000Z","dependencies_parsed_at":"2026-09-01T19:42:05.901Z","dependency_job_id":null,"html_url":"https://github.com/jslicense/spdx-expression-parse.js","commit_stats":{"total_commits":155,"total_committers":5,"mean_commits":31.0,"dds":0.04516129032258065,"last_synced_commit":"d7daff468ce455f636838a8375d8699cf36be64d"},"previous_names":[],"tags_count":12,"template":false,"template_full_name":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jslicense","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/sbom","scorecard":{"id":538537,"data":{"date":"2025-08-11","repo":{"name":"github.com/jslicense/spdx-expression-parse.js","commit":"bb753f168e3364649eee90fb5d04e418e2d64d7b"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Code-Review","score":0,"reason":"Found 2/29 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/ci.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/jslicense/spdx-expression-parse.js/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/jslicense/spdx-expression-parse.js/ci.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:15","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 3 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T07:37:53.768Z","repository_id":35786544,"created_at":"2025-08-20T07:37:53.768Z","updated_at":"2025-08-20T07:37:53.768Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343680568,"owners_count":38138654,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-09T02:00:07.585Z","response_time":55,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"owner":{"login":"jslicense","name":"jslicense","uuid":"12302174","kind":"organization","description":"software licensing tools for the npm ecosystem","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/12302174?v=4","repositories_count":58,"last_synced_at":"2026-10-09T09:57:41.639Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/jslicense","funding_links":[],"total_stars":431,"followers":7,"following":0,"created_at":"2022-11-02T16:20:10.044Z","updated_at":"2026-10-09T09:57:41.653Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jslicense","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jslicense/repositories"},"packages":[{"id":5005508,"name":"org.webjars.npm:spdx-expression-parse","ecosystem":"maven","description":"WebJar for spdx-expression-parse","homepage":"https://www.webjars.org","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/jslicense/spdx-expression-parse.js","keywords_array":[],"namespace":"org.webjars.npm","versions_count":5,"first_release_published_at":"2016-11-22T14:24:29.000Z","latest_release_published_at":"2024-08-19T17:43:16.000Z","latest_release_number":"4.0.0","last_synced_at":"2026-10-11T16:31:02.367Z","created_at":"2022-07-27T11:09:29.163Z","updated_at":"2026-10-11T16:31:02.368Z","registry_url":"https://central.sonatype.com/artifact/org.webjars.npm/spdx-expression-parse/","install_command":null,"documentation_url":"https://appdoc.app/artifact/org.webjars.npm/spdx-expression-parse/","metadata":{"repositories":["https://repo.maven.apache.org/maven2"]},"repo_metadata":{"id":35786544,"uuid":"40067336","full_name":"jslicense/spdx-expression-parse.js","owner":"jslicense","description":"parse SPDX license expressions","archived":false,"fork":false,"pushed_at":"2026-08-18T05:42:10.000Z","size":578,"stargazers_count":45,"open_issues_count":11,"forks_count":27,"subscribers_count":9,"default_branch":"main","last_synced_at":"2026-08-25T09:11:48.187Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://npmjs.com/packages/spdx-expression-parse","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/jslicense.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-08-02T03:12:19.000Z","updated_at":"2026-08-20T20:51:18.000Z","dependencies_parsed_at":"2023-11-21T04:27:38.208Z","dependency_job_id":"b5990eeb-6890-4513-987c-3fb2b6331a33","html_url":"https://github.com/jslicense/spdx-expression-parse.js","commit_stats":{"total_commits":155,"total_committers":5,"mean_commits":31.0,"dds":0.04516129032258065,"last_synced_commit":"d7daff468ce455f636838a8375d8699cf36be64d"},"previous_names":[],"tags_count":12,"template":false,"template_full_name":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jslicense","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/sbom","scorecard":{"id":538537,"data":{"date":"2025-08-11","repo":{"name":"github.com/jslicense/spdx-expression-parse.js","commit":"bb753f168e3364649eee90fb5d04e418e2d64d7b"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Code-Review","score":0,"reason":"Found 2/29 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/ci.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/jslicense/spdx-expression-parse.js/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/jslicense/spdx-expression-parse.js/ci.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:15","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 3 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T07:37:53.768Z","repository_id":35786544,"created_at":"2025-08-20T07:37:53.768Z","updated_at":"2025-08-20T07:37:53.768Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36916446,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-26T02:00:06.703Z","response_time":94,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"jslicense","name":"jslicense","uuid":"12302174","kind":"organization","description":"software licensing tools for the npm ecosystem","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/12302174?v=4","repositories_count":58,"last_synced_at":"2026-10-02T00:57:03.516Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/jslicense","funding_links":[],"total_stars":430,"followers":6,"following":0,"created_at":"2022-11-02T16:20:10.044Z","updated_at":"2026-10-02T00:57:03.544Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jslicense","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jslicense/repositories"},"tags":[{"name":"v5.0.0","sha":"b35d112005a31b361898ab449caa4fa988d50794","kind":"tag","published_at":"2026-07-16T01:00:24.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v5.0.0","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v5.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v5.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v5.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v5.0.0/manifests"},{"name":"v4.0.0","sha":"bb753f168e3364649eee90fb5d04e418e2d64d7b","kind":"tag","published_at":"2023-11-21T19:39:24.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v4.0.0","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v4.0.0/manifests"},{"name":"v3.0.1","sha":"d7daff468ce455f636838a8375d8699cf36be64d","kind":"tag","published_at":"2020-05-13T16:12:40.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v3.0.1","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"063e2d555cc5aef6c433c7dce7c543894476bcb8","kind":"tag","published_at":"2018-02-27T00:14:09.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v3.0.0","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v3.0.0/manifests"},{"name":"v2.0.2","sha":"c425569a2d7745c4024b3afad928f8a520f36b54","kind":"tag","published_at":"2017-07-04T19:44:30.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v2.0.2","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v2.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v2.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v2.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v2.0.2/manifests"},{"name":"v2.0.1","sha":"c35ccd2161dfc4259e9b9f497d849b4127831397","kind":"tag","published_at":"2017-06-08T06:09:43.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v2.0.1","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"5a31aa2a2110b13772ceafdc703dab4348584259","kind":"tag","published_at":"2017-06-07T22:29:33.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v2.0.0","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v2.0.0/manifests"},{"name":"v1.0.4","sha":"326b222ed9e89e9ef472656e9970649b9ee4e8f3","kind":"tag","published_at":"2016-10-05T20:12:38.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v1.0.4","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v1.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v1.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.4/manifests"},{"name":"v1.0.3","sha":"50dd70e4fc357b15640b5ebb639588a97f27ee5f","kind":"tag","published_at":"2016-08-26T20:22:35.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v1.0.3","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v1.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v1.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.3/manifests"},{"name":"v1.0.2","sha":"ffe2fa7272ebf640b18286fc561f17a844d4f06b","kind":"tag","published_at":"2015-11-24T22:36:06.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v1.0.2","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v1.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.2/manifests"},{"name":"v1.0.1","sha":"b9631a6fee043474446420f157076bded041c20d","kind":"tag","published_at":"2015-11-04T19:52:26.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v1.0.1","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"213bc03808f709a4ceaadb8466740a8c96c1e896","kind":"tag","published_at":"2015-08-02T03:21:57.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v1.0.0","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-10-08T06:23:34.683Z","dependent_packages_count":2,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":31.979943940947386,"dependent_packages_count":22.360619819704137,"stargazers_count":23.87064283320927,"forks_count":21.134503604512815,"average":24.836427549593402},"purl":"pkg:maven/org.webjars.npm/spdx-expression-parse","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/maven/org.webjars.npm:spdx-expression-parse","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/maven/org.webjars.npm:spdx-expression-parse","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/maven/org.webjars.npm:spdx-expression-parse/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-05T22:34:52.374Z","issues_count":18,"pull_requests_count":21,"avg_time_to_close_issue":1493702.1666666667,"avg_time_to_close_pull_request":1992403.0666666667,"issues_closed_count":12,"pull_requests_closed_count":15,"pull_request_authors_count":7,"issue_authors_count":15,"avg_comments_per_issue":3.7777777777777777,"avg_comments_per_pull_request":2.3333333333333335,"merged_pull_requests_count":12,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":3,"past_year_pull_requests_count":2,"past_year_avg_time_to_close_issue":21.0,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":2,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":2.3333333333333335,"past_year_avg_comments_per_pull_request":2.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/issues","maintainers":[{"login":"kemitchell","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kemitchell"},{"login":"motet-a","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/motet-a"},{"login":"dabutvin","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dabutvin"},{"login":"cscott","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cscott"}],"active_maintainers":[{"login":"kemitchell","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kemitchell"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:spdx-expression-parse/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:spdx-expression-parse/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:spdx-expression-parse/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:spdx-expression-parse/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:spdx-expression-parse/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages/org.webjars.npm:spdx-expression-parse/codemeta","maintainers":[],"registry":{"name":"repo1.maven.org","url":"https://maven-central.storage-download.googleapis.com/maven2","ecosystem":"maven","default":true,"packages_count":631116,"maintainers_count":0,"namespaces_count":83312,"keywords_count":37990,"github":"maven-central","metadata":{"funded_packages_count":55959,"rate_limit":2},"icon_url":"https://github.com/maven-central.png","created_at":"2022-07-21T16:40:13.074Z","updated_at":"2026-10-01T05:02:24.113Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/repo1.maven.org/namespaces"}},{"id":2387539,"name":"spdx-expression-parse","ecosystem":"npm","description":"parse SPDX license expressions","homepage":"https://github.com/jslicense/spdx-expression-parse.js#readme","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/jslicense/spdx-expression-parse.js","keywords_array":["SPDX","law","legal","license","metadata","package","package.json","standards"],"namespace":null,"versions_count":12,"first_release_published_at":"2015-08-02T03:24:08.717Z","latest_release_published_at":"2026-07-16T01:01:41.169Z","latest_release_number":"5.0.0","last_synced_at":"2026-10-11T16:32:53.532Z","created_at":"2022-04-10T01:04:15.214Z","updated_at":"2026-10-11T16:32:53.532Z","registry_url":"https://www.npmjs.com/package/spdx-expression-parse","install_command":"npm install spdx-expression-parse","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"5.0.0"},"contentPolicy":null},"repo_metadata":{"id":35786544,"uuid":"40067336","full_name":"jslicense/spdx-expression-parse.js","owner":"jslicense","description":"parse SPDX license expressions","archived":false,"fork":false,"pushed_at":"2026-08-18T05:42:10.000Z","size":578,"stargazers_count":46,"open_issues_count":11,"forks_count":28,"subscribers_count":10,"default_branch":"main","last_synced_at":"2026-10-08T06:14:06.535Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://npmjs.com/packages/spdx-expression-parse","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/jslicense.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"claude":null,"gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2015-08-02T03:12:19.000Z","updated_at":"2026-10-07T23:32:33.000Z","dependencies_parsed_at":"2026-09-01T19:42:05.901Z","dependency_job_id":null,"html_url":"https://github.com/jslicense/spdx-expression-parse.js","commit_stats":{"total_commits":155,"total_committers":5,"mean_commits":31.0,"dds":0.04516129032258065,"last_synced_commit":"d7daff468ce455f636838a8375d8699cf36be64d"},"previous_names":[],"tags_count":12,"template":false,"template_full_name":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jslicense","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/sbom","scorecard":{"id":538537,"data":{"date":"2025-08-11","repo":{"name":"github.com/jslicense/spdx-expression-parse.js","commit":"bb753f168e3364649eee90fb5d04e418e2d64d7b"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Code-Review","score":0,"reason":"Found 2/29 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/ci.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/jslicense/spdx-expression-parse.js/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/jslicense/spdx-expression-parse.js/ci.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:15","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 3 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T07:37:53.768Z","repository_id":35786544,"created_at":"2025-08-20T07:37:53.768Z","updated_at":"2025-08-20T07:37:53.768Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343680568,"owners_count":38138654,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-09T02:00:07.585Z","response_time":55,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"jslicense","name":"jslicense","uuid":"12302174","kind":"organization","description":"software licensing tools for the npm ecosystem","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/12302174?v=4","repositories_count":58,"last_synced_at":"2026-10-02T00:57:03.516Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/jslicense","funding_links":[],"total_stars":430,"followers":6,"following":0,"created_at":"2022-11-02T16:20:10.044Z","updated_at":"2026-10-02T00:57:03.544Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jslicense","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jslicense/repositories"},"tags":[{"name":"v5.0.0","sha":"b35d112005a31b361898ab449caa4fa988d50794","kind":"tag","published_at":"2026-07-16T01:00:24.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v5.0.0","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v5.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v5.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v5.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v5.0.0/manifests"},{"name":"v4.0.0","sha":"bb753f168e3364649eee90fb5d04e418e2d64d7b","kind":"tag","published_at":"2023-11-21T19:39:24.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v4.0.0","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v4.0.0/manifests"},{"name":"v3.0.1","sha":"d7daff468ce455f636838a8375d8699cf36be64d","kind":"tag","published_at":"2020-05-13T16:12:40.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v3.0.1","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"063e2d555cc5aef6c433c7dce7c543894476bcb8","kind":"tag","published_at":"2018-02-27T00:14:09.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v3.0.0","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v3.0.0/manifests"},{"name":"v2.0.2","sha":"c425569a2d7745c4024b3afad928f8a520f36b54","kind":"tag","published_at":"2017-07-04T19:44:30.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v2.0.2","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v2.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v2.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v2.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v2.0.2/manifests"},{"name":"v2.0.1","sha":"c35ccd2161dfc4259e9b9f497d849b4127831397","kind":"tag","published_at":"2017-06-08T06:09:43.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v2.0.1","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"5a31aa2a2110b13772ceafdc703dab4348584259","kind":"tag","published_at":"2017-06-07T22:29:33.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v2.0.0","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v2.0.0/manifests"},{"name":"v1.0.4","sha":"326b222ed9e89e9ef472656e9970649b9ee4e8f3","kind":"tag","published_at":"2016-10-05T20:12:38.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v1.0.4","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v1.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v1.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.4/manifests"},{"name":"v1.0.3","sha":"50dd70e4fc357b15640b5ebb639588a97f27ee5f","kind":"tag","published_at":"2016-08-26T20:22:35.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v1.0.3","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v1.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v1.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.3/manifests"},{"name":"v1.0.2","sha":"ffe2fa7272ebf640b18286fc561f17a844d4f06b","kind":"tag","published_at":"2015-11-24T22:36:06.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v1.0.2","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v1.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.2/manifests"},{"name":"v1.0.1","sha":"b9631a6fee043474446420f157076bded041c20d","kind":"tag","published_at":"2015-11-04T19:52:26.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v1.0.1","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"213bc03808f709a4ceaadb8466740a8c96c1e896","kind":"tag","published_at":"2015-08-02T03:21:57.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v1.0.0","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-10-09T09:35:40.863Z","dependent_packages_count":1201,"downloads":240811066,"downloads_period":"last-month","dependent_repos_count":1182840,"rankings":{"downloads":0.0140184715266225,"dependent_repos_count":0.02910475631406195,"dependent_packages_count":0.059304705716141284,"stargazers_count":6.34568738854696,"forks_count":4.765350709671626,"docker_downloads_count":0.0011225729152178174,"average":1.8690981007817715},"purl":"pkg:npm/spdx-expression-parse","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/spdx-expression-parse","docker_dependents_count":66743,"docker_downloads_count":18226768028,"usage_url":"https://repos.ecosyste.ms/usage/npm/spdx-expression-parse","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/spdx-expression-parse/dependencies","status":null,"funding_links":[],"critical":true,"issue_metadata":{"last_synced_at":"2026-10-05T22:34:52.374Z","issues_count":18,"pull_requests_count":21,"avg_time_to_close_issue":1493702.1666666667,"avg_time_to_close_pull_request":1992403.0666666667,"issues_closed_count":12,"pull_requests_closed_count":15,"pull_request_authors_count":7,"issue_authors_count":15,"avg_comments_per_issue":3.7777777777777777,"avg_comments_per_pull_request":2.3333333333333335,"merged_pull_requests_count":12,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":3,"past_year_pull_requests_count":2,"past_year_avg_time_to_close_issue":21.0,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":2,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":2.3333333333333335,"past_year_avg_comments_per_pull_request":2.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/issues","maintainers":[{"login":"kemitchell","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kemitchell"},{"login":"motet-a","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/motet-a"},{"login":"dabutvin","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dabutvin"},{"login":"cscott","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cscott"}],"active_maintainers":[{"login":"kemitchell","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kemitchell"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/spdx-expression-parse/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/spdx-expression-parse/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/spdx-expression-parse/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/spdx-expression-parse/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/spdx-expression-parse/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/spdx-expression-parse/codemeta","maintainers":[{"uuid":"kemitchell","login":"kemitchell","name":null,"email":"kyle@kemitchell.com","url":null,"packages_count":381,"html_url":"https://www.npmjs.com/~kemitchell","role":null,"created_at":"2022-11-14T12:59:00.407Z","updated_at":"2022-11-14T12:59:00.407Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/kemitchell/packages"},{"uuid":"motet-a","login":"motet-a","name":null,"email":"antoine.motet@gmail.com","url":null,"packages_count":7,"html_url":"https://www.npmjs.com/~motet-a","role":null,"created_at":"2022-11-14T12:59:00.440Z","updated_at":"2022-11-14T12:59:00.440Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/motet-a/packages"}],"registry":{"name":"npmjs.org","url":"https://registry.npmjs.org","ecosystem":"npm","default":true,"packages_count":5957425,"maintainers_count":1274425,"namespaces_count":445004,"keywords_count":923317,"github":"npm","metadata":{"funded_packages_count":205308,"rate_limit":3},"icon_url":"https://github.com/npm.png","created_at":"2022-04-04T15:19:23.081Z","updated_at":"2026-10-10T05:02:32.237Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/namespaces"}},{"id":14593831,"name":"github.com/jslicense/spdx-expression-parse.js","ecosystem":"go","description":null,"homepage":null,"licenses":"mit","normalized_licenses":["MIT"],"repository_url":"https://github.com/jslicense/spdx-expression-parse.js","keywords_array":[],"namespace":null,"versions_count":12,"first_release_published_at":"2015-08-02T03:21:57.000Z","latest_release_published_at":"2026-07-16T01:00:24.000Z","latest_release_number":"v5.0.0+incompatible","last_synced_at":"2026-10-11T16:30:59.234Z","created_at":"2026-06-06T13:02:27.587Z","updated_at":"2026-10-11T16:30:59.234Z","registry_url":"https://pkg.go.dev/github.com/jslicense/spdx-expression-parse.js","install_command":"go get github.com/jslicense/spdx-expression-parse.js","documentation_url":"https://pkg.go.dev/github.com/jslicense/spdx-expression-parse.js#section-documentation","metadata":{},"repo_metadata":{"id":35786544,"uuid":"40067336","full_name":"jslicense/spdx-expression-parse.js","owner":"jslicense","description":"parse SPDX license expressions","archived":false,"fork":false,"pushed_at":"2026-08-18T05:42:10.000Z","size":578,"stargazers_count":45,"open_issues_count":11,"forks_count":27,"subscribers_count":9,"default_branch":"main","last_synced_at":"2026-08-25T09:11:48.187Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://npmjs.com/packages/spdx-expression-parse","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/jslicense.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-08-02T03:12:19.000Z","updated_at":"2026-08-20T20:51:18.000Z","dependencies_parsed_at":"2023-11-21T04:27:38.208Z","dependency_job_id":"b5990eeb-6890-4513-987c-3fb2b6331a33","html_url":"https://github.com/jslicense/spdx-expression-parse.js","commit_stats":{"total_commits":155,"total_committers":5,"mean_commits":31.0,"dds":0.04516129032258065,"last_synced_commit":"d7daff468ce455f636838a8375d8699cf36be64d"},"previous_names":[],"tags_count":12,"template":false,"template_full_name":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jslicense","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/sbom","scorecard":{"id":538537,"data":{"date":"2025-08-11","repo":{"name":"github.com/jslicense/spdx-expression-parse.js","commit":"bb753f168e3364649eee90fb5d04e418e2d64d7b"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.4,"checks":[{"name":"Code-Review","score":0,"reason":"Found 2/29 approved changesets -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/ci.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Pinned-Dependencies","score":0,"reason":"dependency not pinned by hash detected -- score normalized to 0","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/jslicense/spdx-expression-parse.js/ci.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/jslicense/spdx-expression-parse.js/ci.yml/main?enable=pin","Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:15","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: MIT License: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'main'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 3 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-20T07:37:53.768Z","repository_id":35786544,"created_at":"2025-08-20T07:37:53.768Z","updated_at":"2025-08-20T07:37:53.768Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36916446,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-22T15:14:58.755Z","status":"online","status_checked_at":"2026-08-26T02:00:06.703Z","response_time":94,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"jslicense","name":"jslicense","uuid":"12302174","kind":"organization","description":"software licensing tools for the npm ecosystem","email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/12302174?v=4","repositories_count":58,"last_synced_at":"2026-10-02T00:57:03.516Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/jslicense","funding_links":[],"total_stars":430,"followers":6,"following":0,"created_at":"2022-11-02T16:20:10.044Z","updated_at":"2026-10-02T00:57:03.544Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jslicense","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/jslicense/repositories"},"tags":[{"name":"v5.0.0","sha":"b35d112005a31b361898ab449caa4fa988d50794","kind":"tag","published_at":"2026-07-16T01:00:24.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v5.0.0","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v5.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v5.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v5.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v5.0.0/manifests"},{"name":"v4.0.0","sha":"bb753f168e3364649eee90fb5d04e418e2d64d7b","kind":"tag","published_at":"2023-11-21T19:39:24.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v4.0.0","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v4.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v4.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v4.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v4.0.0/manifests"},{"name":"v3.0.1","sha":"d7daff468ce455f636838a8375d8699cf36be64d","kind":"tag","published_at":"2020-05-13T16:12:40.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v3.0.1","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v3.0.1/manifests"},{"name":"v3.0.0","sha":"063e2d555cc5aef6c433c7dce7c543894476bcb8","kind":"tag","published_at":"2018-02-27T00:14:09.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v3.0.0","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v3.0.0/manifests"},{"name":"v2.0.2","sha":"c425569a2d7745c4024b3afad928f8a520f36b54","kind":"tag","published_at":"2017-07-04T19:44:30.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v2.0.2","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v2.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v2.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v2.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v2.0.2/manifests"},{"name":"v2.0.1","sha":"c35ccd2161dfc4259e9b9f497d849b4127831397","kind":"tag","published_at":"2017-06-08T06:09:43.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v2.0.1","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"5a31aa2a2110b13772ceafdc703dab4348584259","kind":"tag","published_at":"2017-06-07T22:29:33.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v2.0.0","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v2.0.0/manifests"},{"name":"v1.0.4","sha":"326b222ed9e89e9ef472656e9970649b9ee4e8f3","kind":"tag","published_at":"2016-10-05T20:12:38.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v1.0.4","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v1.0.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v1.0.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.4/manifests"},{"name":"v1.0.3","sha":"50dd70e4fc357b15640b5ebb639588a97f27ee5f","kind":"tag","published_at":"2016-08-26T20:22:35.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v1.0.3","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v1.0.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v1.0.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.3/manifests"},{"name":"v1.0.2","sha":"ffe2fa7272ebf640b18286fc561f17a844d4f06b","kind":"tag","published_at":"2015-11-24T22:36:06.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v1.0.2","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v1.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v1.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.2/manifests"},{"name":"v1.0.1","sha":"b9631a6fee043474446420f157076bded041c20d","kind":"tag","published_at":"2015-11-04T19:52:26.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v1.0.1","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"213bc03808f709a4ceaadb8466740a8c96c1e896","kind":"tag","published_at":"2015-08-02T03:21:57.000Z","download_url":"https://codeload.github.com/jslicense/spdx-expression-parse.js/tar.gz/v1.0.0","html_url":"https://github.com/jslicense/spdx-expression-parse.js/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/jslicense/spdx-expression-parse.js@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/tags/v1.0.0/manifests"}]},"repo_metadata_updated_at":"2026-10-08T06:23:34.702Z","dependent_packages_count":0,"downloads":null,"downloads_period":null,"dependent_repos_count":0,"rankings":{"downloads":null,"dependent_repos_count":5.018105683062034,"dependent_packages_count":4.702150485313165,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":4.8601280841876},"purl":"pkg:golang/github.com/jslicense/spdx-expression-parse.js","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/go/github.com/jslicense/spdx-expression-parse.js","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/go/github.com/jslicense/spdx-expression-parse.js","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/go/github.com/jslicense/spdx-expression-parse.js/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-10-05T22:34:52.374Z","issues_count":18,"pull_requests_count":21,"avg_time_to_close_issue":1493702.1666666667,"avg_time_to_close_pull_request":1992403.0666666667,"issues_closed_count":12,"pull_requests_closed_count":15,"pull_request_authors_count":7,"issue_authors_count":15,"avg_comments_per_issue":3.7777777777777777,"avg_comments_per_pull_request":2.3333333333333335,"merged_pull_requests_count":12,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":3,"past_year_pull_requests_count":2,"past_year_avg_time_to_close_issue":21.0,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":2,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":2.3333333333333335,"past_year_avg_comments_per_pull_request":2.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/issues","maintainers":[{"login":"kemitchell","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kemitchell"},{"login":"motet-a","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/motet-a"},{"login":"dabutvin","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dabutvin"},{"login":"cscott","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cscott"}],"active_maintainers":[{"login":"kemitchell","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kemitchell"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fjslicense%2Fspdx-expression-parse.js/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fjslicense%2Fspdx-expression-parse.js/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fjslicense%2Fspdx-expression-parse.js/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fjslicense%2Fspdx-expression-parse.js/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fjslicense%2Fspdx-expression-parse.js/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages/github.com%2Fjslicense%2Fspdx-expression-parse.js/codemeta","maintainers":[],"registry":{"name":"proxy.golang.org","url":"https://proxy.golang.org","ecosystem":"go","default":true,"packages_count":2540578,"maintainers_count":0,"namespaces_count":853240,"keywords_count":140449,"github":"golang","metadata":{"funded_packages_count":115591,"sync_missing_packages_cursor":{"timestamp":"2026-09-29T00:04:57.155362Z","path":"github.com/virtengine/virtengine/sdk/specs","version":"v0.0.0-20260928231908-c0c887541540"},"rate_limit":5},"icon_url":"https://github.com/golang.png","created_at":"2022-04-04T15:19:22.939Z","updated_at":"2026-10-11T05:02:18.238Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/proxy.golang.org/namespaces"}}],"commits":{"id":349692,"full_name":"jslicense/spdx-expression-parse.js","default_branch":"main","total_commits":167,"total_committers":6,"total_bot_commits":0,"total_bot_committers":0,"mean_commits":27.833333333333332,"dds":0.04790419161676651,"past_year_total_commits":3,"past_year_total_committers":2,"past_year_total_bot_commits":0,"past_year_total_bot_committers":0,"past_year_mean_commits":1.5,"past_year_dds":0.33333333333333337,"last_synced_at":"2026-10-06T23:03:50.054Z","last_synced_commit":"f622e5adbbfc856570b7e48050a632ed3fd3abdf","created_at":"2023-03-08T18:46:06.490Z","updated_at":"2026-10-06T23:03:50.043Z","committers":[{"name":"Kyle Mitchell","email":"kyle@kemitchell.com","login":"kemitchell","count":159},{"name":"Antoine Motet","email":"motet_a@epitech.eu","login":"motet-a","count":3},{"name":"C. Scott Ananian","email":"cscott@cscott.net","login":"cscott","count":2},{"name":"Shinnosuke Watanabe","email":"snnskwtnb@gmail.com","login":"shinnn","count":1},{"name":"Matt Vander Vliet","email":"matthew.vander.vliet@oracle.com","login":"mvandervliet","count":1},{"name":"Aaron Hamid","email":"aaron.hamid@fossa.com","login":"ahamid-fossa","count":1}],"past_year_committers":[{"name":"Kyle E. Mitchell","email":"kyle@kemitchell.com","login":"kemitchell","count":2},{"name":"Aaron Hamid","email":"aaron.hamid@fossa.com","login":"ahamid-fossa","count":1}],"commits_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/commits","host":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-10-08T00:00:07.831Z","repositories_count":8184238,"commits_count":1246772527,"contributors_count":56996065,"owners_count":1718812,"committers_count":3768211,"icon_url":"https://github.com/github.png","host_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://commits.ecosyste.ms/api/v1/hosts/GitHub/repositories"}},"issues":{"table":{"full_name":"jslicense/spdx-expression-parse.js","html_url":"https://github.com/jslicense/spdx-expression-parse.js","last_synced_at":"2026-10-11T16:30:54.906Z","status":null,"issues_count":18,"pull_requests_count":21,"avg_time_to_close_issue":1493702.1666666667,"avg_time_to_close_pull_request":1992403.0666666667,"issues_closed_count":12,"pull_requests_closed_count":15,"pull_request_authors_count":7,"issue_authors_count":15,"avg_comments_per_issue":3.7777777777777777,"avg_comments_per_pull_request":2.3333333333333335,"merged_pull_requests_count":12,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":3,"past_year_pull_requests_count":2,"past_year_avg_time_to_close_issue":21.0,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":1,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":2,"past_year_issue_authors_count":3,"past_year_avg_comments_per_issue":2.3333333333333335,"past_year_avg_comments_per_pull_request":2.0,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"created_at":"2023-05-16T15:44:14.548Z","updated_at":"2026-10-11T16:30:54.906Z","repository_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js","issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/jslicense%2Fspdx-expression-parse.js/issues","issue_labels_count":{"table":{"wontfix":1,"help wanted":1,"enhancement":1}},"pull_request_labels_count":{"table":{}},"issue_author_associations_count":{"table":{"NONE":11,"MEMBER":5,"CONTRIBUTOR":1,"COLLABORATOR":1}},"pull_request_author_associations_count":{"table":{"MEMBER":17,"NONE":2,"CONTRIBUTOR":1,"COLLABORATOR":1}},"issue_authors":{"table":{"kemitchell":4,"cbsMartin":1,"danielmoore":1,"sschuberth":1,"cscott":1,"12joan":1,"gururaja15":1,"Stanzilla":1,"ahamid-fossa":1,"neverendingqs":1,"mvandervliet":1,"bcoe":1,"Etsija":1,"zoahdev":1,"motet-a":1}},"pull_request_authors":{"table":{"kemitchell":11,"motet-a":4,"dabutvin":2,"cscott":1,"julienandco":1,"ahamid-fossa":1,"mvandervliet":1}},"host":{"table":{"name":"GitHub","url":"https://github.com","kind":"github","last_synced_at":"2026-10-12T00:00:07.675Z","repositories_count":17951225,"issues_count":48035279,"pull_requests_count":148731214,"authors_count":11990363,"icon_url":"https://github.com/github.png","host_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories","owners_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/owners","authors_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors"}},"past_year_issue_labels_count":{"table":{}},"past_year_pull_request_labels_count":{"table":{}},"past_year_issue_author_associations_count":{"table":{"NONE":3}},"past_year_pull_request_author_associations_count":{"table":{"MEMBER":1,"NONE":1}},"past_year_issue_authors":{"table":{"ahamid-fossa":1,"gururaja15":1,"zoahdev":1}},"past_year_pull_request_authors":{"table":{"ahamid-fossa":1,"kemitchell":1}},"maintainers":[{"table":{"login":"kemitchell","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kemitchell"}},{"table":{"login":"motet-a","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/motet-a"}},{"table":{"login":"dabutvin","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dabutvin"}},{"table":{"login":"cscott","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/cscott"}}],"active_maintainers":[{"table":{"login":"kemitchell","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kemitchell"}}]}},"events":{"total":{"WatchEvent":5,"IssueCommentEvent":8,"PushEvent":1},"last_year":{"IssueCommentEvent":8,"PushEvent":1}},"keywords":[],"dependencies":[{"ecosystem":"npm","filepath":"package.json","sha":null,"kind":"manifest","created_at":"2022-09-04T04:12:28.957Z","updated_at":"2022-09-04T04:12:28.957Z","repository_link":"https://github.com/jslicense/spdx-expression-parse.js/blob/main/package.json","dependencies":[{"id":3749258996,"package_name":"spdx-exceptions","ecosystem":"npm","requirements":"^2.1.0","direct":true,"kind":"runtime","optional":false},{"id":3749258997,"package_name":"spdx-license-ids","ecosystem":"npm","requirements":"^3.0.0","direct":true,"kind":"runtime","optional":false},{"id":3749258998,"package_name":"defence-cli","ecosystem":"npm","requirements":"^3.0.1","direct":true,"kind":"development","optional":false},{"id":3749258999,"package_name":"replace-require-self","ecosystem":"npm","requirements":"^1.0.0","direct":true,"kind":"development","optional":false},{"id":3749259000,"package_name":"standard","ecosystem":"npm","requirements":"^14.1.0","direct":true,"kind":"development","optional":false}]},{"ecosystem":"actions","filepath":".github/workflows/ci.yml","sha":null,"kind":"manifest","created_at":"2026-09-01T19:42:04.102Z","updated_at":"2026-09-01T19:42:04.102Z","repository_link":"https://github.com/jslicense/spdx-expression-parse.js/blob/main/.github/workflows/ci.yml","dependencies":[{"id":26360717731,"package_name":"actions/checkout","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false},{"id":26360717732,"package_name":"actions/setup-node","ecosystem":"actions","requirements":"v4","direct":true,"kind":"composite","optional":false}]}],"score":29.474161013858147,"created_at":"2026-07-08T07:52:34.547Z","updated_at":"2026-10-12T19:32:46.359Z","avatar_url":"https://github.com/jslicense.png","language":"JavaScript","codemeta":null,"publiccode":null,"project_url":"https://summary.ecosyste.ms/api/v1/projects/378290","html_url":"https://summary.ecosyste.ms/projects/378290"}